Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
File:                     9b38aa73-d1e5-3574-86f0-2be61de03925.roa (raw, json)
Hash identifier:          CLO8/zhkM78jIyjM+AQGO3ffsOE3Nj/SQFLWpUFPoMY=
Subject key identifier:   51:74:DF:1B:90:37:2B:71:44:84:B8:AB:D7:5E:13:6A:7B:38:5B:52
Certificate issuer:       /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial:       010D0C9F4328584D47C4E29778651116BFEE0180
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     18907
IP address blocks:        104.219.144.0/22 maxlen: 22
                          162.249.36.0/22 maxlen: 22
                          2605:2880::/48 maxlen: 48
                          2605:2880:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e2:97:78:65:11:16:bf:ee:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=4e997cdd-a7f8-407c-846e-f5a839589867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:29:5b:e1:b5:29:fc:ed:5c:04:31:05:a8:
                    fe:48:cd:ad:e6:a7:48:a4:a6:b4:3a:66:78:d4:11:
                    39:64:2d:2b:e9:a0:18:b9:19:54:ec:78:ea:64:b9:
                    3c:42:65:9d:dc:0e:42:7c:1a:c6:91:43:94:4d:2a:
                    df:da:03:61:e4:a1:a1:73:f7:d5:56:12:d1:b9:b8:
                    3c:72:bd:d3:61:58:43:3e:c4:9f:66:1c:94:c5:d2:
                    59:0f:39:bf:5d:aa:fa:61:b3:ed:7e:ec:ce:31:c3:
                    e0:b6:68:ee:98:05:cd:60:21:a1:99:c7:30:0a:a4:
                    1c:88:c0:1c:00:da:1f:32:04:83:b8:79:bc:32:25:
                    ea:25:b9:80:d0:dc:d7:3f:38:1d:cf:5a:86:97:2b:
                    e5:ef:6d:9c:77:fe:9a:45:08:0c:11:28:3a:3a:cd:
                    1d:f1:90:b4:fb:09:d6:93:57:79:89:f0:e6:50:be:
                    a1:10:89:55:88:69:8c:c3:b7:c4:cf:2a:cd:5d:2a:
                    a6:cd:aa:6a:1e:8b:61:3b:38:27:52:46:8b:01:e2:
                    bb:2a:36:09:70:cd:ad:db:36:49:f6:47:c5:e2:ad:
                    ac:f1:d4:67:4c:13:c0:37:60:b4:16:ca:14:bf:46:
                    92:67:b7:01:72:10:3a:19:c4:66:e8:32:4c:37:28:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:DF:1B:90:37:2B:71:44:84:B8:AB:D7:5E:13:6A:7B:38:5B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.144.0/22
                  162.249.36.0/22
                IPv6:
                  2605:2880::/48
                  2605:2880:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:82:9f:fe:48:c9:f5:ef:22:7a:dd:65:4f:72:00:40:02:63:
         cc:90:41:bc:07:f0:10:13:98:45:51:41:bd:35:9f:5c:b8:0b:
         ba:c9:e6:81:06:07:72:58:d3:ba:ec:14:93:f8:39:9e:6c:78:
         ef:f9:f8:d2:50:00:74:5a:38:96:17:77:99:1a:b1:9a:32:fe:
         8f:cc:a4:cc:7b:37:59:a2:1d:75:f4:ab:4b:33:d6:c4:a1:b0:
         6b:c5:f7:d0:22:96:04:32:05:d0:69:03:68:f6:f4:f3:1e:75:
         cf:9d:65:c1:99:3c:db:2c:ff:a6:28:f5:75:05:46:42:bf:a6:
         63:2f:8a:07:d5:ce:0d:0e:dc:f1:66:8d:f3:9e:73:a6:ce:5b:
         9b:08:4a:6a:47:d4:d7:c6:74:07:41:2f:af:f9:72:91:16:52:
         d7:c8:26:3f:ac:7b:88:6f:63:67:80:6f:9f:40:47:78:f6:22:
         29:c2:92:ae:85:a5:0d:39:90:38:d8:0e:48:ea:93:b5:77:22:
         c7:02:d3:26:16:7c:02:82:2e:c6:2d:03:87:43:9b:06:e4:f3:
         9f:93:96:78:b1:ca:d7:d2:df:3b:aa:f0:da:bb:3c:f9:7c:6f:
         60:b2:8b:f0:db:9d:54:ee:70:17:48:49:3b:4a:95:66:6d:6e:
         58:1e:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:36 2026 by rpki-client