Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa
File:                     91505259-16de-3e4f-9fdb-1b6d22637eea.roa (raw, json)
Hash identifier:          7QqZ5LM36a9NiDAvy7LjwhD+TJDCzjF+U9ppTT2gzfQ=
Subject key identifier:   AD:E3:8B:CD:85:69:06:BD:98:9A:D6:A0:E5:56:E9:38:F2:83:0A:67
Certificate issuer:       /CN=12d514ee-f97d-4775-a4c9-16429339fd21
Certificate serial:       010D0C9F4328584D44FA424F926DEF5E7040B1C0
Authority key identifier: 30:8A:E7:E3:5D:D0:83:E0:A1:14:50:98:64:35:CD:5A:9E:02:6C:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16696
IP address blocks:        104.167.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:42:4f:92:6d:ef:5e:70:40:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d514ee-f97d-4775-a4c9-16429339fd21
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=b9c2bf61-0dbe-4955-a80b-3d4f28ee1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:ff:d9:64:c4:46:0a:98:c2:38:71:c0:f9:
                    81:1a:39:ac:00:16:c7:47:22:0e:30:08:a0:5b:30:
                    0e:b9:be:c4:28:ed:77:68:7d:73:e4:3f:a3:31:3c:
                    22:6f:65:56:8f:03:c7:73:a0:7b:75:c1:14:c4:09:
                    c4:9e:4c:ec:81:9d:ab:8c:33:71:81:7b:52:b5:08:
                    81:89:2d:2c:ec:b6:c7:ce:21:ef:ce:13:b3:d1:af:
                    e6:0f:38:05:28:25:cb:3c:aa:40:04:af:bb:ee:10:
                    65:d8:35:4f:ec:ed:ce:62:96:d2:c0:19:58:95:29:
                    03:6f:f1:9e:9e:e7:a6:11:fa:0b:ad:d0:60:70:6e:
                    77:62:df:c5:b6:2f:c5:8b:1d:d7:c4:86:4e:2c:e2:
                    f3:fa:cd:69:c4:00:ae:f7:af:30:6d:26:f0:49:68:
                    85:2e:7e:9f:c9:76:7d:cd:76:2b:f1:c1:39:43:60:
                    18:f7:b6:a4:79:ea:cd:67:97:1b:1b:5e:0e:bb:ba:
                    43:34:e1:9d:74:bb:57:3e:73:27:34:0a:ad:b0:a3:
                    10:63:02:1b:0c:41:c1:03:5f:d8:26:1b:14:b0:dc:
                    6e:37:c5:7a:22:d8:35:54:a8:65:57:5e:b6:30:54:
                    96:54:61:5e:6d:0e:cb:d0:d9:67:3e:7a:f5:70:eb:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:8B:CD:85:69:06:BD:98:9A:D6:A0:E5:56:E9:38:F2:83:0A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.crl

            X509v3 Authority Key Identifier:
                keyid:30:8A:E7:E3:5D:D0:83:E0:A1:14:50:98:64:35:CD:5A:9E:02:6C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8f:33:a9:3b:3f:b3:e9:52:00:a2:9f:0f:a9:2a:a5:1d:c4:
         d9:0c:e9:a7:70:19:bd:24:56:15:4e:89:27:d9:01:9c:71:4b:
         6b:74:72:47:b9:92:88:74:23:52:6d:65:9c:32:6e:cc:2c:44:
         e1:28:72:b9:b4:db:67:2f:56:11:57:fd:70:a2:7c:c1:48:d3:
         be:a1:bd:9d:89:8e:03:24:71:ed:eb:81:81:65:86:4c:cf:76:
         a0:7e:02:d6:b6:f0:07:df:ed:0c:f6:3f:94:5e:48:ba:81:81:
         77:c6:c5:ce:b8:98:cf:fe:da:05:ad:e7:07:60:8e:87:87:8a:
         98:7d:42:57:07:4e:9e:ef:94:8a:b4:e3:b9:1b:83:78:49:38:
         48:87:1f:8b:e0:eb:19:5b:67:ac:b7:5e:2a:8f:9d:89:43:4d:
         a5:b0:44:d3:46:5a:2d:00:27:5f:cb:cd:85:ff:4d:d6:d9:d4:
         9c:eb:ef:94:b4:e8:3b:d1:bb:af:de:41:b8:66:a7:7b:ab:1a:
         cf:b9:c0:87:4b:e9:c7:cf:59:30:5c:42:3a:3e:a6:d9:f8:f0:
         b1:f3:2c:d3:b8:32:25:52:4e:0c:90:d6:34:e9:36:ed:09:94:
         35:df:74:8f:4b:ef:8f:1f:b2:2b:dd:72:e9:f7:ce:e6:31:64:
         af:99:30:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:25 2026 by rpki-client