Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
File:                     34164e83-730c-3084-85e5-2ac39df4113c.roa (raw, json)
Hash identifier:          fGYz/0T5itL4gSvsx6SEUyTo6DXrnUw90cTubaGQI8Y=
Subject key identifier:   B8:3E:C1:35:35:7E:F8:3F:2C:98:6D:3C:F0:64:DF:99:C8:1B:39:42
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584D2A74C5D4A735DCAE4C6537C0
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     0
IP address blocks:        104.192.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c5:d4:a7:35:dc:ae:4c:65:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=22b887df-3083-4703-a638-d2a96c21f81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:39:5b:b6:35:6d:d6:d6:14:d0:a1:85:8b:
                    ce:d3:9f:ed:67:b2:11:02:16:ef:bc:5e:21:94:db:
                    cc:88:2c:77:8e:9c:f4:41:d7:5b:6f:1a:4d:e4:83:
                    c2:fb:f9:79:07:c3:59:36:3f:5d:4e:a1:d0:17:9f:
                    49:58:67:9d:cb:72:a5:84:e8:92:70:dd:49:81:c1:
                    5f:07:7e:97:2c:24:98:a2:5d:40:bb:a8:5c:64:cf:
                    e8:2c:52:42:2a:d7:b1:6e:c5:e6:a4:94:65:04:d6:
                    db:14:b6:a4:77:1a:c0:09:80:09:29:25:f6:83:92:
                    74:76:1c:06:b8:3b:91:c4:4b:f2:40:eb:89:4c:61:
                    7f:41:84:70:7a:27:52:37:c6:4a:e4:b0:c8:2a:2f:
                    7c:1e:f3:c1:b1:37:a8:d0:a0:b5:f6:1d:bf:f2:13:
                    76:6e:2d:7d:dd:b0:e3:10:3c:b7:b1:cd:53:63:8c:
                    6a:73:58:21:01:29:31:cf:f5:ee:cc:4d:6b:b5:c6:
                    ea:b3:3b:e1:4c:ff:65:7d:24:ed:0b:b8:8a:a2:ff:
                    41:0b:ac:49:34:6f:7c:65:42:a9:a4:27:68:4f:ef:
                    c2:ac:9c:cb:2e:de:52:89:53:46:59:50:55:71:c4:
                    59:02:3e:f1:69:03:d3:bd:25:38:92:b1:73:55:f9:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:C1:35:35:7E:F8:3F:2C:98:6D:3C:F0:64:DF:99:C8:1B:39:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:12:1b:85:81:f2:3c:8f:ee:3a:ca:1d:f5:59:58:d6:44:
         1f:01:ef:d4:b8:a4:67:73:cd:81:00:6a:2c:b8:6a:82:de:10:
         3b:68:6c:ad:bd:f9:ed:4f:19:0a:6c:99:68:a9:da:a0:06:ee:
         c1:82:bb:74:26:21:14:37:f7:58:59:c1:68:05:e7:85:f2:55:
         e7:05:96:7b:cb:b4:66:8e:3f:87:55:d7:9a:7d:9f:57:71:12:
         2e:6f:38:35:1b:f8:f0:a5:de:d8:93:74:66:1e:83:f9:e6:2d:
         e7:e0:37:6b:32:a7:b3:07:1b:01:5b:16:20:27:10:ce:4c:cb:
         73:d3:b9:6c:44:f1:3e:8d:66:a6:b0:b0:95:09:85:ac:0f:23:
         96:10:63:75:a0:e1:9d:d5:15:18:ce:a4:a5:01:6b:f9:f6:c3:
         9e:75:e0:67:15:25:7d:90:c6:d4:4f:0e:8c:b4:dc:24:17:8f:
         f0:8a:92:2e:f2:8a:83:1d:ea:e8:65:5d:3f:49:5d:78:9e:73:
         33:47:df:ba:e1:e1:6b:f2:d2:32:f5:12:4a:d5:29:be:54:c1:
         7e:88:56:86:7c:92:6d:3c:12:bb:17:8d:8e:3a:df:d9:d7:44:
         e0:86:77:9e:50:1f:a2:57:79:0d:22:05:54:2e:87:40:d8:70:
         dd:b0:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:52 2026 by rpki-client