Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
File:                     f16f134d-17d8-31b4-8410-4a72975bc1c0.roa (raw, json)
Hash identifier:          2t+Pi3FTCii+WvTJEvwbIDxZ0CeRLWCH7eRUOepCD1I=
Subject key identifier:   9B:A6:81:4A:AD:64:8B:4C:2C:56:6F:75:38:A4:DF:9D:D3:21:2D:D1
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584DA11ABF79865609522E765D48
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        104.218.205.0/24 maxlen: 24
                          104.218.206.0/24 maxlen: 24
                          104.218.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:bf:79:86:56:09:52:2e:76:5d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=16ee1bb9-60bd-4f07-99bf-1ca8ad963606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:f5:d9:cb:3b:a4:c9:71:3d:ce:7f:53:21:
                    95:a2:87:74:61:94:58:d0:0c:a3:c6:7b:05:57:79:
                    70:a1:c2:7f:27:4b:41:9d:35:24:3f:66:84:65:72:
                    57:ff:4e:11:58:6a:3d:1c:43:50:92:fc:1d:be:ad:
                    fe:31:84:84:c3:0f:a8:cc:3e:cb:52:dc:70:34:05:
                    fb:16:dc:6e:49:15:72:ea:42:57:8b:6e:6a:c5:b4:
                    16:90:37:ae:f1:54:28:de:98:e5:9d:82:7b:f1:af:
                    b9:4f:00:73:a1:d8:8d:57:f2:79:8f:e4:f2:47:2b:
                    60:c2:78:f7:41:18:43:61:26:f4:b3:6d:d7:0d:d5:
                    f8:70:90:a9:a9:40:17:c0:10:f6:47:52:9a:27:79:
                    d8:76:50:63:c3:96:52:a3:95:87:4a:8b:29:c4:a5:
                    de:7a:cb:55:89:7c:85:e0:3e:21:5f:8b:1d:36:05:
                    e3:2d:7d:bd:bc:cd:b8:1b:a1:33:92:14:5f:73:51:
                    b7:47:a3:bc:7d:b9:47:64:03:ef:b4:88:49:be:75:
                    b6:1e:d4:3c:d6:f9:3b:3d:c0:fc:39:18:a6:c8:c2:
                    9e:70:43:fa:71:cb:07:8c:f3:30:ce:57:1a:d2:8f:
                    53:94:0f:a4:5c:13:75:20:80:02:e0:6b:20:0a:5f:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:81:4A:AD:64:8B:4C:2C:56:6F:75:38:A4:DF:9D:D3:21:2D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.205.0-104.218.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c5:e5:23:eb:c1:09:d7:4c:07:c7:83:9f:fc:81:e7:b8:e4:
         38:4c:df:25:8f:e0:9e:1e:b7:9c:4e:f3:b8:f2:84:98:d9:55:
         9a:6e:55:83:ad:69:7b:be:ce:1a:a3:b6:b2:69:2c:2d:24:d0:
         bd:56:79:f9:87:6c:97:4f:80:58:c4:64:19:e5:b1:f6:a8:4a:
         b8:52:c2:28:fe:5a:6c:b5:d1:ad:63:f0:f1:06:33:28:7c:5c:
         96:ab:c3:7b:ea:2d:f6:34:6a:79:8b:d2:5a:87:db:9b:d0:34:
         b4:9e:7b:86:79:a3:0c:58:7c:05:5d:00:04:ff:cb:6c:d5:4a:
         f2:8b:e0:fd:57:c6:a9:ed:b3:ce:37:e0:07:82:d1:5b:ef:2c:
         c3:5d:97:3e:66:ed:f6:f3:64:3d:4a:e5:a9:79:19:fb:27:02:
         9f:52:56:5c:fd:10:cd:c7:29:28:ba:de:e9:4e:79:6b:d4:c4:
         ab:b8:ab:40:46:3c:ea:cd:c0:a4:3c:6b:f2:ce:d6:2f:6f:94:
         d3:4a:39:d6:70:8c:f8:ea:af:df:d3:dc:8b:01:1b:ec:2b:52:
         dc:3a:d8:e4:e5:9e:d9:5d:e0:14:df:5b:4c:37:30:4a:0e:d0:
         de:e7:e9:2e:c0:56:ba:27:42:43:e1:0a:76:30:6a:e0:b2:6b:
         79:02:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:47 2026 by rpki-client