Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa
File:                     ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa (raw, json)
Hash identifier:          BAryKUjsstCV7tgfl8EFSv/To9smusykE05KY+1efhU=
Subject key identifier:   C8:2D:FF:AE:5E:20:83:A8:28:9D:7F:E6:EA:52:DA:7B:4E:D7:E5:C2
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497CB301ED25D57F7AEDFB01
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        104.237.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:b3:01:ed:25:d5:7f:7a:ed:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2f31a3e7-c2a0-4292-8eb6-70f65249e4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:60:da:1f:91:d2:46:f0:ab:22:a4:b0:96:
                    06:0b:69:78:f6:45:fb:6a:ec:58:d9:61:b2:1a:0d:
                    c4:09:d1:59:02:08:3f:2a:1e:00:82:e3:5e:26:46:
                    27:fd:58:e6:92:65:0a:b5:09:9d:24:44:27:a1:1d:
                    ac:1a:fa:73:0a:39:4a:eb:65:92:6f:cb:ae:7b:e9:
                    2b:c2:cd:48:3c:2d:ab:4f:40:43:d2:79:07:93:f3:
                    22:95:31:38:5a:74:0f:a4:60:39:d8:19:5c:0d:25:
                    67:ee:79:f1:4f:85:0e:ca:19:31:66:18:e6:4f:40:
                    2f:42:90:20:69:da:d3:08:e7:01:90:3f:c7:cb:fe:
                    48:0e:4c:95:25:fc:e1:0e:52:58:9f:a1:75:69:d3:
                    9e:af:dc:25:42:1d:14:d1:94:31:75:dd:ea:82:bb:
                    d0:a8:3f:12:da:5c:0e:d6:7c:c3:46:fa:00:f8:46:
                    d8:5c:5b:7c:36:f5:40:33:aa:37:15:62:14:ca:b5:
                    f5:80:2e:ac:78:be:8b:11:1c:e3:a8:70:62:44:87:
                    95:0e:5e:39:ab:6a:cb:a9:af:18:4b:64:aa:b1:bb:
                    3f:82:07:67:81:63:0c:fd:8a:3d:32:de:74:6c:1c:
                    af:b5:e5:78:e1:a9:a4:69:92:23:4b:0c:0f:a7:41:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2D:FF:AE:5E:20:83:A8:28:9D:7F:E6:EA:52:DA:7B:4E:D7:E5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca2bd6aa-5004-31d7-a1f4-7f5625f2112b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:54:9c:0f:66:37:2c:70:b9:a0:6a:7a:78:3e:36:e5:05:
         bd:3f:2b:e8:0b:08:80:65:a0:ca:63:f4:6b:1b:bc:49:ce:2c:
         49:c4:57:2e:48:f2:29:d6:bb:4f:bd:20:93:ec:7d:44:bf:65:
         fb:97:d4:52:76:b4:39:34:53:37:58:90:b0:83:b6:d7:63:1a:
         46:6f:f1:52:65:a9:46:2e:80:44:47:36:cc:11:4b:8f:fc:cb:
         d2:63:88:db:37:b3:f1:4f:ac:2f:08:0d:ad:8b:af:bc:a7:b2:
         9a:40:3b:8a:93:be:94:92:c2:1f:1f:39:e7:aa:73:ce:80:6c:
         44:a2:2e:66:63:1b:f2:ce:08:b5:ae:00:38:0e:b8:1e:0e:3a:
         34:1d:92:86:41:1e:4a:73:7f:ec:f2:26:5e:ba:e7:83:d5:0c:
         1e:b6:96:cc:cd:b4:93:bf:3a:dc:58:a9:2f:61:cd:69:1f:99:
         d6:e5:36:96:ad:6f:92:22:3a:96:b7:30:c6:71:ba:75:90:d4:
         0c:d4:fa:db:39:3e:73:f5:40:b2:64:76:ed:0a:df:66:1a:5c:
         7b:58:82:5d:73:f2:bb:53:c0:a2:84:7c:8c:25:91:6a:4d:d4:
         4b:f1:99:c2:20:a0:21:e4:29:3a:86:6f:8f:4a:fc:2c:cb:ed:
         bb:6e:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:40:41 2026 by rpki-client