Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/82caf2c8-9673-39d0-a1d5-a5e50eddbfb0.roa
File:                     82caf2c8-9673-39d0-a1d5-a5e50eddbfb0.roa (raw, json)
Hash identifier:          nH4k9Qk+m0wunwv/B6nIi4fZZqkJQspc9nc4YZUM8ZU=
Subject key identifier:   F8:FE:66:56:12:92:7E:E5:67:EA:38:74:D4:FB:F2:B1:B9:C9:6D:9A
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D35B996B4C95CA0F3A3790400
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/82caf2c8-9673-39d0-a1d5-a5e50eddbfb0.roa
Signing time:             Wed 18 Mar 2026 13:53:21 +0000
ROA not before:           Wed 18 Mar 2026 13:53:21 +0000
ROA not after:            Tue 16 Jun 2026 13:53:21 +0000
asID:                     198087
IP address blocks:        104.233.247.0/24 maxlen: 24
                          107.148.200.0/24 maxlen: 24
                          107.148.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:b9:96:b4:c9:5c:a0:f3:a3:79:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar 18 13:53:21 2026 GMT
            Not After : Jun 16 13:53:21 2026 GMT
        Subject: CN=ef1c5615-f164-4a82-9145-c4e47db75065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:54:5c:00:0f:e0:6a:e9:31:18:08:85:bf:
                    9c:df:c3:12:73:59:9c:d9:df:8f:e4:9a:3c:2a:bd:
                    37:80:00:66:c4:e7:04:96:ad:fa:86:02:94:3f:2c:
                    5e:98:4b:21:95:35:32:63:c1:4c:fc:84:a0:1b:22:
                    8f:cd:98:9e:53:a9:0f:13:84:9a:cf:c9:83:df:70:
                    b5:cf:ba:25:65:8d:20:c6:85:94:5b:84:06:64:32:
                    f6:61:9b:66:84:ea:aa:87:31:2f:69:ad:57:ae:a0:
                    4d:49:00:49:fb:89:9e:e5:d7:1d:61:3d:72:d2:e7:
                    39:ab:e0:a7:69:29:97:d3:01:d6:7d:cb:60:19:11:
                    92:0a:2a:89:22:82:ad:2c:f2:eb:d6:0e:78:da:5a:
                    28:fe:53:21:b2:8c:00:91:90:47:f1:35:9f:e1:75:
                    40:b2:a9:cf:c3:27:61:29:1d:18:4e:b4:2f:30:75:
                    73:fc:42:0f:6a:32:71:ad:be:03:32:75:52:40:67:
                    c4:a4:9d:c9:5a:d3:75:11:9a:74:a1:a6:9a:52:d7:
                    e3:55:7c:d5:fe:c2:5d:a6:0b:c7:ea:13:a0:c5:db:
                    d0:64:32:f6:7e:12:eb:ad:23:39:e0:99:45:38:d3:
                    49:77:43:05:61:15:f7:6a:33:9a:00:9c:a1:08:2e:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:66:56:12:92:7E:E5:67:EA:38:74:D4:FB:F2:B1:B9:C9:6D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/82caf2c8-9673-39d0-a1d5-a5e50eddbfb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.247.0/24
                  107.148.200.0/24
                  107.148.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:73:89:f0:b6:42:d4:d6:82:13:23:93:a4:61:f2:e6:e7:66:
         54:49:30:07:95:fc:b7:4b:5c:a5:85:39:5d:36:c8:52:78:d3:
         3e:f0:1b:d4:e4:59:14:4f:91:80:f8:7c:07:c4:0f:5c:74:01:
         ab:fc:5f:71:54:b7:25:69:ee:a7:57:37:09:2b:b9:b2:4a:14:
         ef:73:27:8c:27:f5:00:09:ac:d5:0e:8c:3e:c9:cd:ad:e8:4e:
         29:08:1f:ba:88:5d:72:41:66:7e:c1:f6:1c:09:7a:e7:89:b8:
         d1:e7:98:ee:08:e4:1a:7f:b2:b4:e6:ae:23:5d:ba:be:d2:a3:
         52:b0:42:63:82:ac:85:1a:c8:b5:d0:93:01:43:3e:ce:f3:1e:
         99:3a:73:6d:c5:94:6c:25:79:04:af:44:90:ae:76:7e:66:05:
         38:d4:13:7b:0e:b0:ab:28:bd:75:a2:da:86:3f:63:87:2c:29:
         6f:00:75:67:ab:0c:16:e4:8c:cd:08:7b:b9:c5:c5:3d:91:82:
         d4:c8:10:3f:00:82:f9:fa:30:64:6e:58:1c:88:f2:b6:dc:16:
         b1:81:65:9d:be:45:76:e7:bf:80:79:0c:c0:88:78:2c:cd:b6:
         79:6c:84:4b:17:e6:56:dd:92:41:df:a8:2f:3c:b7:90:d6:0f:
         96:ae:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:07:00 2026 by rpki-client