Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6188f116-17ff-317b-9841-8fbe68426a88.roa
File:                     6188f116-17ff-317b-9841-8fbe68426a88.roa (raw, json)
Hash identifier:          jOv6hrQTfOWPg3YfnzlpOd2Z0hsF6OCWA8v3j+dDl6I=
Subject key identifier:   7E:24:3F:4F:59:EE:C8:B5:C0:AE:1F:AD:F7:BE:05:1D:08:E0:F8:71
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC4583B67B05D4AD2111C500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6188f116-17ff-317b-9841-8fbe68426a88.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11404
IP address blocks:        104.244.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:83:b6:7b:05:d4:ad:21:11:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=2a24ce83-1fa7-4565-859b-6ea9fdf0ed2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:cf:23:b9:ee:a6:a9:b0:39:4d:2d:50:89:
                    7e:f8:fe:a3:18:cd:de:69:c0:1c:38:b1:b3:47:9b:
                    86:d1:d2:d6:0d:5d:85:9d:72:8c:9f:90:c3:d7:2f:
                    f9:8c:c4:2e:c3:cd:10:c5:a4:b2:8a:39:c2:7f:fc:
                    54:81:0e:78:6d:03:b9:b7:83:76:20:a1:6d:f7:1b:
                    a8:fe:d9:b8:b1:9e:7c:bc:27:d2:97:6d:d2:0d:e3:
                    f4:8f:d5:6c:94:9c:1f:9c:98:fd:80:a5:be:9a:3f:
                    b6:94:67:7d:0d:88:55:4e:7e:8b:91:b6:0e:45:23:
                    d7:c5:38:a4:6a:52:e2:a2:5c:de:a1:0a:97:ca:95:
                    3a:c4:97:7f:e3:7e:8f:c6:af:65:b6:58:67:90:80:
                    9a:0b:bf:4b:24:ca:2b:ef:eb:15:9b:74:0f:a8:68:
                    a9:2f:31:4c:fe:f8:b7:68:08:87:be:5d:38:30:22:
                    ff:e8:f5:e2:52:47:45:4a:38:9a:3b:a1:03:12:7c:
                    7a:9e:97:47:56:d8:f1:7e:46:f5:ce:5a:84:30:d5:
                    f9:56:0e:22:eb:30:ec:62:57:18:3f:cd:81:c3:d3:
                    22:69:0b:cc:bd:a0:7b:22:db:88:36:d4:1b:3e:3e:
                    27:09:f7:ba:fb:a1:4d:de:f6:6c:d7:f5:49:14:08:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:3F:4F:59:EE:C8:B5:C0:AE:1F:AD:F7:BE:05:1D:08:E0:F8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6188f116-17ff-317b-9841-8fbe68426a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:32:5c:1c:7f:6d:9e:15:fc:53:f6:54:a8:ea:5c:be:62:
         f5:de:a9:59:46:36:d8:f7:a3:97:f4:41:10:98:ea:e3:eb:ee:
         d1:70:90:6f:45:c9:75:fa:78:26:7c:2f:de:a6:1b:3d:f2:00:
         4e:83:61:44:ab:fb:63:6a:91:f0:51:0d:f4:1c:14:eb:52:71:
         04:5c:12:48:d9:ae:25:3e:c5:cc:dd:f5:e8:86:de:c0:99:3b:
         a2:8c:31:cd:46:e2:f4:ee:55:1e:ea:21:f3:f1:24:d8:a8:f8:
         ea:4e:f8:72:2d:41:46:a9:38:38:f1:e7:d2:2e:e6:ee:ef:5f:
         4f:dc:17:07:63:51:d3:5a:f5:54:c7:c2:53:49:49:af:8d:a4:
         d8:e9:48:d4:1e:64:52:b8:35:0c:3f:bb:19:fa:e1:56:a5:3f:
         d4:86:b1:89:81:a7:a6:e2:94:a1:36:0a:a6:54:95:c8:8b:d5:
         6a:34:36:70:ab:d4:e9:33:de:db:47:18:99:82:ea:c4:35:bb:
         29:91:50:64:e4:af:17:d9:91:64:96:d1:27:35:b1:2d:bf:6c:
         40:ea:18:8e:ef:60:a2:7c:fa:41:0f:b7:73:93:69:a4:7b:46:
         63:a8:57:41:81:46:67:0f:2a:35:0f:0b:46:65:18:2d:7f:29:
         8e:e8:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:46 2026 by rpki-client