Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/e1bc2c87-06a5-34f1-b5c6-78cd944cc615.roa
File:                     e1bc2c87-06a5-34f1-b5c6-78cd944cc615.roa (raw, json)
Hash identifier:          UyffV6h2j3Oa5k3zE8XaBxDoZytU+qMwSnQxWaCTgu4=
Subject key identifier:   79:60:CF:57:16:77:ED:DC:FC:EA:90:03:6C:70:17:F0:51:B4:91:86
Certificate issuer:       /CN=70197168-13e1-4a38-9046-75d751ec520a
Certificate serial:       010D0C9F4328584D0D426EFF0552FC8FD5325680
Authority key identifier: 3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/e1bc2c87-06a5-34f1-b5c6-78cd944cc615.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        104.194.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6e:ff:05:52:fc:8f:d5:32:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70197168-13e1-4a38-9046-75d751ec520a
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=05c055b2-ab9c-4906-8b54-b974267e830e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:23:02:a3:a2:06:37:fc:aa:71:25:fd:0c:
                    37:88:ba:99:b7:eb:83:03:1f:92:42:11:7b:48:47:
                    f5:86:37:7b:94:30:51:5c:be:ed:36:34:6f:a7:20:
                    c2:8d:90:43:53:a7:37:03:a7:9e:79:51:12:75:27:
                    5d:92:0f:d7:30:dc:d6:b2:5e:49:8c:a6:de:a8:79:
                    c7:fa:73:c0:0b:c1:12:c2:27:ed:61:ee:6a:6d:82:
                    55:0d:b0:6d:94:7d:e2:31:51:d3:1b:f5:65:5b:71:
                    d1:5e:47:50:ee:97:38:9f:c7:bd:fe:a7:00:b3:7a:
                    d6:63:7a:16:24:48:88:15:cb:af:6b:d8:d6:d5:15:
                    82:bc:77:a6:ae:59:2e:aa:46:94:ef:ea:b6:17:60:
                    41:29:d6:c6:00:22:18:8a:0c:23:3a:00:4b:bf:c1:
                    0d:17:3b:b3:fa:93:54:8f:20:99:a1:c7:b6:60:dd:
                    e8:e5:50:4c:ae:b4:c2:cb:75:25:c7:69:20:e2:df:
                    54:7d:ea:c8:8f:86:7d:e0:0e:f6:68:bf:b1:99:ab:
                    53:e6:a0:99:ff:c8:e4:36:c0:1d:b2:d7:c6:88:8f:
                    35:a6:22:44:b0:8d:5e:b1:54:43:16:1a:a7:74:d8:
                    f5:3c:e6:9f:3b:0d:92:2e:db:be:ab:b9:bb:84:a3:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:CF:57:16:77:ED:DC:FC:EA:90:03:6C:70:17:F0:51:B4:91:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/e1bc2c87-06a5-34f1-b5c6-78cd944cc615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.crl

            X509v3 Authority Key Identifier:
                keyid:3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:5f:ac:f3:31:4d:79:9b:5b:ca:b3:ab:fb:25:66:ae:8d:
         6c:95:e0:5a:14:d6:13:e9:57:55:ef:22:cc:39:e9:99:93:b6:
         0b:77:11:c6:53:82:c6:f0:38:3b:a4:d4:d4:d9:96:4d:3f:08:
         28:6a:2d:58:6b:29:41:71:89:14:22:c6:3f:59:db:a2:84:8e:
         0f:69:f5:4e:c9:2d:a4:97:ee:eb:e2:64:b3:8a:5a:eb:eb:b7:
         0a:0a:13:bd:e8:ce:ec:30:1d:8d:74:90:f3:4b:b4:4a:69:44:
         ab:55:1d:31:80:2f:01:84:4c:44:88:a2:96:a7:b5:94:ce:3f:
         e4:f3:6f:04:8b:cb:77:7b:c2:21:c0:fc:15:4d:7c:28:32:f6:
         97:c9:16:68:7d:27:28:0c:a5:eb:5a:b5:cb:19:06:10:1d:61:
         3b:25:de:07:5c:38:00:b8:9c:c5:17:bc:52:62:6b:b5:3c:b8:
         aa:b2:5f:bd:5d:d8:20:f6:0c:79:c7:aa:ab:15:94:4b:14:de:
         cc:27:7d:b1:b4:3b:b7:0c:8a:0b:09:28:f5:e6:ab:78:30:a0:
         20:81:c1:51:43:87:6f:6a:73:d4:c2:ba:c6:bf:05:3d:2c:75:
         81:b3:ed:22:dc:88:4a:32:8c:1e:8c:e0:16:db:54:04:a8:b2:
         db:0a:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:29 2026 by rpki-client