Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
File:                     63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa (raw, json)
Hash identifier:          uwkOvw/m916HxC9sQMj+ZsnUDWMlcmDORdtAMAelHFw=
Subject key identifier:   C6:A6:27:C0:67:47:A7:0B:E9:3A:AF:97:81:A7:F6:FD:39:BD:68:17
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497CD52DD584E969E5E449C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        104.237.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:d5:2d:d5:84:e9:69:e5:e4:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=acb843eb-2dbf-485a-9a95-c450a3dc6056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:0d:56:3d:f0:fb:94:17:23:95:f0:65:49:
                    30:c1:78:12:bc:92:e2:e8:f3:16:93:fd:8b:09:28:
                    09:0d:0c:0f:6e:b3:08:27:9e:71:4a:0b:be:c2:42:
                    41:fc:a6:17:9c:f9:9f:9e:d4:4d:ea:42:81:7b:8d:
                    93:c3:dd:bc:43:47:f6:f9:fb:f6:eb:0a:5c:ce:3a:
                    8a:c9:8f:d9:da:a7:cf:bd:71:e0:e5:a9:07:46:20:
                    79:90:69:f4:92:53:8a:49:4e:33:54:c7:34:88:f0:
                    83:41:9c:45:12:a5:c5:55:9a:5b:7c:41:56:37:bf:
                    96:d9:44:c2:02:2e:02:26:79:72:33:3b:c5:06:c9:
                    81:18:fa:b1:53:97:b8:1a:e2:9e:71:3f:e7:8a:c0:
                    79:a1:90:a6:91:1b:a6:53:65:ec:ab:2d:5f:54:ba:
                    81:b7:a5:fb:79:d3:b7:f0:6a:02:72:f8:62:14:e2:
                    d4:a9:da:c4:ac:e9:74:30:63:f2:aa:f0:a7:de:85:
                    8a:68:05:fe:0a:f3:2d:f5:c9:09:09:6d:08:b0:1d:
                    01:1c:ae:0a:61:ab:4e:eb:a0:c3:96:79:55:0d:0d:
                    19:29:29:ed:c7:30:01:e2:4b:d3:f7:c1:5f:89:69:
                    c5:07:cb:d6:8c:57:cb:64:b5:71:61:3f:87:4f:d1:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:27:C0:67:47:A7:0B:E9:3A:AF:97:81:A7:F6:FD:39:BD:68:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:00:0e:77:ec:79:68:1a:a7:be:89:2c:cb:ce:4c:ca:bf:cc:
         50:64:3a:97:36:16:65:48:44:bf:fd:68:50:84:da:47:08:d5:
         34:7b:42:5c:a7:d5:9d:ad:e6:61:56:73:67:4e:4d:46:e0:56:
         e9:47:e4:15:fc:3e:33:32:17:15:e5:d6:70:09:80:8c:b2:b5:
         01:49:ab:7a:b0:71:d9:0d:45:51:16:11:74:cc:4f:5f:55:8c:
         e5:4d:52:33:a8:b9:3a:d7:fc:48:26:09:55:b5:b1:63:04:f4:
         4c:3a:7a:c5:73:49:c5:05:f7:21:9f:35:54:e3:31:f9:48:32:
         21:84:47:0e:ea:35:6c:c7:51:7c:0c:9e:7c:44:5c:fd:f8:25:
         52:94:b8:8c:28:a5:bc:fe:95:c1:2c:ca:12:62:37:33:ce:73:
         ba:09:1a:93:b0:19:0b:bf:62:59:29:5f:ba:a9:d5:95:9e:59:
         fd:9a:e3:34:41:a4:ab:f8:45:9c:db:49:eb:06:f0:cc:eb:80:
         10:0f:05:f3:22:be:16:c0:18:43:9c:cb:3c:0c:39:71:0e:0f:
         91:d2:36:f8:a6:32:76:8a:65:22:43:65:a7:c0:b9:ce:d2:f7:
         55:1a:be:35:be:ac:c4:73:74:0b:7c:46:26:be:48:1a:80:36:
         31:67:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:45:16 2026 by rpki-client