Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf7c4859-c0c4-30e1-b19e-5d4d9e6c9947.roa
File:                     cf7c4859-c0c4-30e1-b19e-5d4d9e6c9947.roa (raw, json)
Hash identifier:          +j7+feKO+NIhuSxBW/zQXMOzbvaE7OmphRspFQzGtgk=
Subject key identifier:   86:AB:7C:C2:D8:28:6C:6A:98:7E:5B:92:BE:E5:BC:E9:4C:FE:53:D3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B0E5BCCB61E4B0C819580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf7c4859-c0c4-30e1-b19e-5d4d9e6c9947.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        104.244.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0e:5b:cc:b6:1e:4b:0c:81:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0b3365bb-646d-43bd-bd28-7954839b1efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:9f:42:d9:89:10:d6:7e:97:06:f9:36:59:
                    7b:c2:4a:90:1b:1e:83:6e:d3:11:83:d2:a1:03:fa:
                    f0:84:1d:e7:ec:dd:db:e4:be:af:2b:95:21:3a:3f:
                    36:c7:59:90:50:6e:47:ff:61:e6:56:18:1a:c3:aa:
                    1b:4c:f4:98:3a:6b:73:49:82:2c:3a:1d:aa:d8:90:
                    c2:99:05:45:17:43:d3:61:14:df:30:64:15:12:92:
                    f8:f5:7c:98:a8:3f:ae:82:6a:38:9f:ed:a6:5e:9d:
                    b7:8f:01:0b:2f:4f:ec:df:9c:4f:08:f9:87:cc:5c:
                    f2:b6:3a:2a:6c:54:46:14:15:e3:e1:0e:ef:a8:45:
                    6a:73:0f:39:b2:a2:c8:b6:41:f3:06:8b:20:4e:c2:
                    ba:e6:23:f4:58:8d:1a:2f:0d:fe:c6:92:6a:59:fd:
                    73:db:67:63:c1:94:25:fe:23:3e:85:89:95:27:6e:
                    08:43:45:cd:00:94:43:15:2c:60:09:f4:d4:37:50:
                    ea:d2:e5:01:7f:c9:99:ac:71:56:6a:da:49:99:45:
                    93:64:b9:fb:b2:8f:1d:b2:06:74:12:26:03:3f:fb:
                    66:f6:3d:7b:0c:6f:cb:80:be:2a:92:a0:da:1c:8b:
                    2d:c2:53:a6:17:c4:88:91:8d:88:83:1b:49:2a:53:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:7C:C2:D8:28:6C:6A:98:7E:5B:92:BE:E5:BC:E9:4C:FE:53:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf7c4859-c0c4-30e1-b19e-5d4d9e6c9947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:28:f3:3c:90:f3:d2:b3:c4:cc:b5:b0:ca:75:35:39:1c:
         5a:0b:3e:6c:63:e2:b9:d6:90:3b:b7:c4:6e:ec:4b:74:1b:70:
         f1:7f:42:c4:19:38:ae:5f:f4:ba:7e:f8:4a:32:67:a0:ff:70:
         e4:69:26:7c:86:2b:c8:45:16:0a:a6:73:02:03:c5:09:fa:8d:
         6a:0c:da:7f:c2:87:6a:87:a5:54:7f:54:86:c8:a3:53:86:0e:
         ba:44:c0:67:82:ae:ab:49:72:cc:29:0c:54:51:e6:22:93:dd:
         55:15:3e:f9:b3:0d:9b:d6:0d:9d:ca:be:51:2c:57:3b:ae:20:
         f5:ff:05:bb:57:d2:46:bc:ce:46:7a:a7:e6:bf:46:56:2d:6d:
         be:c1:56:96:93:3a:81:8d:e4:19:8e:3e:32:f4:89:a1:38:0f:
         8a:f7:2e:ce:a0:cd:e9:38:54:58:ad:24:1a:a1:12:19:44:77:
         74:0f:14:b4:a8:75:29:17:b5:7f:b5:98:3b:bb:e5:3b:17:4f:
         ab:15:d4:e3:88:39:fe:ef:2c:e5:0e:05:fb:e8:3c:ed:2e:a3:
         6c:b2:93:69:0a:e0:ab:a8:91:39:a2:bd:56:cf:4d:aa:21:8b:
         01:85:a9:b7:c2:65:6c:f5:e1:55:4d:50:41:91:59:e0:f4:72:
         ea:0a:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:07 2026 by rpki-client