Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa
File:                     04d76299-19f6-3977-b16f-5f34f621e67b.roa (raw, json)
Hash identifier:          pBljPZmPYBdpLLNPtUFHd9wn9zPdojI0NUiv0oc053A=
Subject key identifier:   83:2F:9A:0D:8C:69:97:30:18:70:B4:85:63:69:BB:67:CA:E8:70:D9
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584D1B1A1B32C2EC94C4194E95C0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     400304
IP address blocks:        66.23.198.0/23 maxlen: 24
                          104.36.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1b:32:c2:ec:94:c4:19:4e:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=c1c7871c-6a6c-45cc-be11-2d258433236b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:27:7c:09:31:62:e9:60:1f:9a:9f:76:49:
                    9d:ac:3a:16:7f:1f:b0:ed:98:13:3f:f0:2b:9a:4f:
                    f3:6c:8e:27:87:b1:b4:3f:dd:46:2c:b1:2e:e8:e7:
                    df:b7:6c:fe:0c:2b:fd:34:cd:b6:08:9e:a4:85:59:
                    0c:a0:ae:2d:f9:d2:17:ff:10:60:d8:5e:27:f4:62:
                    c3:bf:2a:69:e9:4e:76:61:c9:fb:02:ff:81:95:bb:
                    63:a9:0a:94:90:46:dd:9f:41:2f:7b:6c:08:d8:77:
                    b2:87:8c:87:b8:56:3f:36:de:3f:d0:78:14:2d:86:
                    35:21:ae:32:c6:9d:e7:81:db:52:6b:85:23:60:4f:
                    ec:9d:bf:aa:20:48:54:5d:03:15:14:39:59:84:81:
                    49:07:5c:ea:cb:e1:05:95:dc:d4:95:54:5e:87:80:
                    e9:ac:cd:d5:93:c3:9d:ba:29:48:10:d2:14:a7:9a:
                    2e:dc:14:71:84:9e:22:ca:13:34:3f:26:1b:ef:d4:
                    d1:c0:dd:53:9f:ba:9e:cb:fb:6d:db:ad:c6:10:9b:
                    98:01:5b:6b:79:6e:0f:33:ca:7b:fb:ac:fd:05:f8:
                    dc:d0:cf:90:f2:02:19:60:16:47:7e:51:9e:4b:3b:
                    d3:d9:83:b7:12:4a:5c:88:56:1e:f5:42:d0:2a:8e:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:9A:0D:8C:69:97:30:18:70:B4:85:63:69:BB:67:CA:E8:70:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/04d76299-19f6-3977-b16f-5f34f621e67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.23.198.0/23
                  104.36.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:c9:d1:e4:35:be:ba:b2:30:3f:9e:c6:d5:4c:6f:5c:45:
         52:16:2f:12:4a:c3:27:28:cc:67:a3:3d:a5:93:4b:0e:9e:0e:
         9d:c6:5f:0e:5c:79:de:e6:06:c4:82:d5:39:3c:37:b8:4d:18:
         d3:dd:54:a0:8d:24:d0:8b:39:65:ed:0f:e8:88:e2:f4:52:f5:
         22:dd:20:f8:f4:23:27:31:c8:5d:d3:2b:79:c1:28:65:e8:00:
         03:34:96:e2:27:c3:3d:b1:f1:90:a8:59:73:42:7b:cf:dd:b4:
         ce:69:6a:57:24:78:4b:b5:36:7e:f8:4b:5c:a4:b6:fe:9c:19:
         1d:b0:e0:47:2d:e4:1f:c8:e0:5a:f4:ca:3d:89:a3:29:2d:1f:
         ed:2e:ad:50:ce:70:f8:50:c4:97:5a:19:b1:a8:99:70:92:e3:
         19:66:69:7f:25:d7:6e:13:e5:e2:fa:8e:3a:f5:21:c3:95:e3:
         60:84:78:e9:db:2e:1d:60:63:a5:3e:6d:87:a5:0b:ee:db:a2:
         d0:aa:8b:db:2e:53:fe:81:55:57:8f:53:f3:bb:2c:9f:71:15:
         13:80:6e:e3:00:7c:e0:83:12:01:36:57:91:3f:a1:18:e0:a1:
         21:9b:29:0f:65:0f:76:91:26:e4:20:c6:39:d0:ca:15:96:24:
         e0:24:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:07 2026 by rpki-client