Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/861743ab-abd7-3b4a-a9c4-ebe1c9c496bc.roa
File:                     861743ab-abd7-3b4a-a9c4-ebe1c9c496bc.roa (raw, json)
Hash identifier:          ZZf27PHU/ddWKIwr8pmne6pt7sd0r6wTeKhVSoZle2A=
Subject key identifier:   04:96:6C:D1:BE:C9:72:66:1F:9C:65:08:FB:6B:2A:CD:5A:77:DC:D0
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584D60E514A848A85CC00C365080
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/861743ab-abd7-3b4a-a9c4-ebe1c9c496bc.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     14434
IP address blocks:        104.192.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:14:a8:48:a8:5c:c0:0c:36:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=e6c7b8fe-9be9-403f-93fe-ca56f0e334df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0f:d8:15:d9:81:23:83:f5:59:16:1e:ea:38:
                    61:fb:74:20:a4:09:02:f9:02:2c:7e:51:04:a7:7c:
                    13:2c:b8:04:63:a5:14:4e:64:b3:5d:0d:ad:22:e8:
                    91:d0:d8:d4:9c:6a:5c:fe:2c:72:ed:41:88:7f:9b:
                    f1:e5:d5:86:d3:b8:71:07:e8:34:8b:b3:f5:51:0a:
                    f7:15:4b:94:30:61:b6:ec:d4:20:57:a5:e6:ec:9e:
                    bf:ee:06:80:e5:dd:c7:dd:c9:4b:cc:a6:e3:0e:31:
                    1c:da:7a:0e:f3:7b:ce:d6:c3:ea:27:4f:ca:1f:95:
                    2a:b2:b0:3e:58:91:7f:09:f4:38:7b:04:4e:82:40:
                    24:a5:ad:8d:fb:3d:7f:44:5d:5d:80:1a:30:ca:46:
                    d7:ca:30:df:45:4c:cb:1c:d5:4c:f8:a8:47:10:c8:
                    e9:c0:3d:a2:4d:4d:44:bd:7c:c1:3d:61:d0:43:fe:
                    d1:80:f7:fe:e7:72:48:42:a0:38:9c:b0:d9:2c:b3:
                    bd:37:03:4f:f1:27:80:5a:87:fa:21:e5:dd:27:4f:
                    c0:5f:05:fb:98:fd:23:87:f1:40:7b:4a:9a:d7:ed:
                    5b:d3:73:f6:14:97:f4:11:e2:b7:6b:3a:70:7a:9a:
                    63:ab:33:a0:46:84:dc:7e:88:f4:df:57:15:cb:ce:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:6C:D1:BE:C9:72:66:1F:9C:65:08:FB:6B:2A:CD:5A:77:DC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/861743ab-abd7-3b4a-a9c4-ebe1c9c496bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:b2:74:15:e1:c7:f5:5f:d1:84:f7:b2:25:52:7b:fd:62:
         e2:48:f9:4a:50:ef:5e:f8:e2:4d:ca:f1:55:a4:19:d5:58:28:
         b1:ce:62:64:fe:0d:10:1f:f0:ad:da:47:9e:63:07:14:7c:f2:
         5b:33:8a:53:1b:d1:0b:0d:85:60:d7:e8:11:48:5d:a7:fc:2b:
         47:ba:c8:69:ca:bc:c4:b6:33:73:6e:5f:cc:ba:26:fc:48:4b:
         fd:76:13:aa:78:bc:82:b8:09:e3:09:6a:cd:09:5b:e9:80:4f:
         27:fe:82:82:01:e7:a3:73:72:0e:8e:e9:40:98:9a:df:1a:f6:
         aa:98:f1:bc:1c:58:43:57:6d:10:37:d0:e9:44:38:f5:e6:e0:
         eb:d3:78:0f:c4:21:21:14:b9:b0:af:c9:75:57:8a:01:1d:93:
         e5:04:28:12:b0:55:35:6b:9f:f6:f6:60:64:41:02:22:d8:56:
         7e:28:2d:d6:27:a7:f6:f6:fa:1d:ca:41:1e:08:97:b7:cd:56:
         32:52:67:18:f9:ba:fe:ce:51:b3:05:3f:bb:8e:c0:91:04:7c:
         1b:bc:2d:68:a9:06:51:41:df:5e:f3:87:3a:3a:c1:6b:38:9e:
         fe:cb:77:a8:63:7f:44:9f:63:eb:d7:81:46:cc:c9:f1:9c:2f:
         bc:84:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:18 2026 by rpki-client