Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
File:                     6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa (raw, json)
Hash identifier:          fCgGezmHwmjABuTQnKlxYDsidodaCffO7Q5/MxT8WEM=
Subject key identifier:   7D:67:EA:E5:AD:86:42:71:01:60:CE:17:C3:46:93:9B:E0:C9:AF:4D
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584EA788825DF1C40D539B0F9080
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        104.218.200.0/24 maxlen: 24
                          104.218.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:82:5d:f1:c4:0d:53:9b:0f:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04be46a8-97d3-4a36-935a-8ac92b56aaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:e5:32:93:fc:13:cb:d7:f1:7a:2b:e9:8d:
                    03:79:db:ad:fc:af:7f:01:49:b4:2f:6a:5e:fc:bd:
                    75:08:4a:93:8e:b5:b3:5a:15:3d:d3:ca:d1:d2:c1:
                    6c:85:49:e3:4c:20:07:9d:ed:29:9d:e5:2f:25:60:
                    c5:ee:fb:ad:bd:e4:a2:20:19:35:65:90:e4:cf:7a:
                    a0:48:96:74:ed:0e:0d:61:23:19:66:ed:7e:f8:e1:
                    f8:1e:a2:f2:3d:56:51:a6:05:a1:a0:ca:49:f3:f8:
                    e4:bb:68:ec:d5:61:66:39:51:ee:bb:a4:ca:6f:72:
                    93:27:6c:bb:ea:72:ab:2b:e3:2c:fb:42:a6:f8:00:
                    01:8e:1f:71:ae:d6:97:6c:11:81:05:bf:e7:ab:24:
                    b6:c2:e6:92:32:d7:68:59:3f:9e:13:60:bf:ef:23:
                    c8:b8:6b:55:93:77:59:61:bb:3e:65:d9:a8:dd:2d:
                    9c:be:a1:d5:c4:5a:e0:d9:b8:66:41:23:03:c3:fd:
                    33:d7:cf:29:dd:7f:ea:37:14:06:52:dc:81:26:cc:
                    82:15:1a:13:a6:3b:c1:9e:1e:23:d1:e3:79:67:c6:
                    b8:29:bf:bf:e0:e8:37:2a:c1:af:76:e9:d0:a3:bf:
                    3d:e1:74:f0:71:7f:b9:5e:62:94:c5:97:16:a4:68:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:EA:E5:AD:86:42:71:01:60:CE:17:C3:46:93:9B:E0:C9:AF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.200.0/24
                  104.218.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:00:31:2d:4b:89:f0:58:f3:22:17:9e:4e:dc:98:79:1d:
         18:a5:07:d4:66:17:2c:c3:77:bf:a9:3f:05:0f:da:c9:53:f7:
         f0:85:c1:69:51:7c:de:b4:21:2d:6d:ce:67:a4:0a:ab:e4:71:
         cd:e2:0b:5a:94:22:e8:0a:93:b3:d6:d6:44:f2:4e:2c:97:c9:
         15:ac:ae:59:d5:cd:68:9e:21:73:4f:27:ab:35:1a:e6:6b:f5:
         75:25:fc:a5:e9:6f:d5:fa:26:07:93:81:d8:10:3c:1e:be:ea:
         ce:58:7d:b1:81:25:08:6e:67:d5:2e:8b:2a:fe:cf:58:46:cb:
         ec:03:1d:db:eb:2e:4a:9d:a0:db:7f:cb:8f:1d:08:0c:f2:05:
         9b:94:b1:77:a5:dd:50:c4:06:7f:3c:72:17:9e:56:93:73:6b:
         fa:9d:2a:95:4a:71:05:85:1b:8c:76:8e:9d:09:26:b0:e2:0b:
         0d:f9:96:5d:e8:19:e9:43:b6:24:fa:ce:4c:48:30:2f:d6:98:
         5f:70:95:05:14:e8:82:98:83:8b:5b:e5:92:b5:10:a9:64:74:
         ba:f4:12:ed:ad:a6:42:ec:8f:1f:2a:d1:2d:44:02:cd:cb:d3:
         cc:55:7f:68:72:f5:4e:cb:93:2f:9d:9a:20:24:d3:94:a2:71:
         ca:ae:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:22 2026 by rpki-client