Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
File:                     7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa (raw, json)
Hash identifier:          22q05kO7LrD87zcdwX5J1q/nLPH1b0fK7lzjcVX3t6c=
Subject key identifier:   6A:8E:F2:BC:23:83:E6:13:CE:CF:E9:E5:8C:BD:04:A6:0B:34:AF:8E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497CC2D7C436AE4BB5B23480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        104.237.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:c2:d7:c4:36:ae:4b:b5:b2:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0dc7fe84-0513-4753-b919-bfb5234d64b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:02:ef:1c:70:f3:8d:b5:28:77:e9:e7:b6:
                    e2:fd:36:7e:c9:18:ca:f5:00:d2:0f:60:9b:aa:41:
                    f5:d9:79:54:c1:93:56:e8:5b:48:00:32:5f:c7:7f:
                    dd:51:9d:e2:92:2b:1d:87:6f:8c:c9:c4:25:ec:ce:
                    60:8f:7d:a4:de:bd:19:1f:36:66:87:7f:c7:42:78:
                    1e:ce:37:dd:d4:ad:5b:63:d1:a8:7b:ed:eb:08:96:
                    ac:de:25:65:56:6c:a5:a7:f2:8e:70:a1:48:c4:c6:
                    79:7f:4e:b9:8f:c4:d6:bf:b1:01:b5:3f:98:98:fc:
                    fd:41:83:0b:0b:ac:b5:f5:a9:28:cd:46:bc:2d:f6:
                    c7:93:a6:f1:6b:1a:2b:ba:4c:8c:bd:1e:a3:e4:b7:
                    c8:1c:c2:fe:2b:ba:f6:a1:63:08:34:02:d3:25:06:
                    23:27:05:dc:bb:55:c2:f4:34:a6:34:1a:04:a6:8c:
                    ec:c4:f7:87:1a:c9:62:36:79:60:e9:79:36:71:60:
                    cc:a7:60:11:04:8b:a0:ef:f9:99:38:36:7f:4a:6f:
                    f4:52:b5:f3:a7:37:2f:4e:23:32:0a:9e:a9:79:2e:
                    5d:f2:bb:8b:5a:d4:39:28:ca:43:76:26:cf:1d:7a:
                    19:02:94:b7:d0:fb:8b:95:bb:bc:74:be:20:a8:b3:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:F2:BC:23:83:E6:13:CE:CF:E9:E5:8C:BD:04:A6:0B:34:AF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e3:7e:01:13:94:1e:76:d3:c0:f8:b6:30:df:57:e4:49:ef:
         7e:bd:03:fb:c2:4a:99:b2:3a:0a:59:3c:ee:a3:ce:15:3c:01:
         a8:83:f3:47:c3:fa:04:7f:e4:9a:2a:d9:53:f5:ad:ec:a0:71:
         c8:8b:1d:9f:f3:ca:46:78:c5:9f:18:6d:1d:b9:21:52:1d:cd:
         eb:94:d4:45:3d:96:cc:87:d1:ff:4c:5c:21:20:ca:91:9a:81:
         a1:12:bd:32:a2:6f:8b:44:f0:32:1b:e9:78:d8:ed:e5:00:ea:
         35:14:03:5c:49:5b:3e:78:4f:78:d2:e9:c7:67:d5:9d:6b:bb:
         b9:00:f3:4b:c9:61:71:77:f0:43:74:6b:14:28:59:09:84:c6:
         c4:30:07:7f:1f:f7:87:be:27:8f:64:21:9c:1c:de:3e:d4:74:
         81:ad:9b:95:21:37:96:14:ed:07:ba:3f:58:ca:62:42:24:0a:
         89:f5:ee:df:d6:c1:91:39:cd:29:21:db:24:3a:9c:3a:34:6a:
         2b:79:25:9c:64:76:5b:11:e3:e7:45:a2:6f:c1:0b:ca:c3:a5:
         62:22:bb:ce:7e:b5:ad:03:0f:92:6e:90:24:ec:e1:69:28:39:
         c4:ee:e4:7d:e9:52:88:2e:85:ea:e0:8c:94:d4:a8:93:b1:04:
         a8:19:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:44:01 2026 by rpki-client