Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fb392fcb-5d21-34d3-99c2-91d4ff2c74b3.roa
File:                     fb392fcb-5d21-34d3-99c2-91d4ff2c74b3.roa (raw, json)
Hash identifier:          osVqisIxuFjarUZjxRdBbknP+KWIDbbnvuPj8VG7u7g=
Subject key identifier:   1C:B0:11:A4:39:E8:02:F9:7A:0D:24:1D:77:C3:82:48:C5:36:B7:CE
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584D3F64CDF3FDF15FAADC02B600
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fb392fcb-5d21-34d3-99c2-91d4ff2c74b3.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     62943
IP address blocks:        104.255.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:cd:f3:fd:f1:5f:aa:dc:02:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=ed6b6ab6-64cf-49b2-862b-76bc93fef756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:3e:cc:39:26:8d:f5:d6:38:3e:e0:22:7f:
                    50:6b:e3:e6:e1:6c:f1:9d:f7:03:50:c3:f6:29:fa:
                    d2:c7:b5:2a:47:d1:8a:52:c9:e0:e3:21:f5:6a:aa:
                    86:47:15:ed:78:6b:41:be:31:82:6b:1a:63:71:a5:
                    d7:40:b0:f6:e8:d3:25:9f:3a:03:c8:a5:99:c5:d4:
                    81:97:1b:7f:61:aa:fe:15:e0:7b:6a:b8:66:fe:8c:
                    7b:45:8e:f0:47:13:c9:09:a5:3a:81:71:a3:0b:e2:
                    cb:84:ab:92:a1:44:c3:42:2d:ec:47:73:62:49:f4:
                    d1:ff:ef:76:72:14:b5:92:f6:b7:1b:32:00:04:f3:
                    e5:24:e6:e6:bb:9e:57:07:ae:54:28:50:da:17:25:
                    ab:ac:63:1b:3c:16:5c:fb:d6:16:7f:5e:07:f1:f1:
                    d3:c8:20:fb:71:b5:e0:d0:82:7c:3e:0b:ca:cd:ee:
                    1b:69:a7:e1:2f:85:d1:e2:16:51:f1:ce:69:cb:fd:
                    b7:81:3e:6e:11:49:21:fd:49:6e:bb:86:4e:3c:27:
                    e8:f7:d9:82:6e:07:0f:8d:e7:3b:2a:77:38:97:5c:
                    85:66:e0:47:11:f6:34:e6:cf:70:9c:e2:36:a2:0a:
                    5e:54:c5:ba:f9:a8:42:d5:65:70:9d:9c:41:d0:b5:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:11:A4:39:E8:02:F9:7A:0D:24:1D:77:C3:82:48:C5:36:B7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fb392fcb-5d21-34d3-99c2-91d4ff2c74b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:64:91:2b:98:ad:26:3c:d3:5a:e0:27:3f:7f:85:bb:5e:
         5d:c3:ff:22:48:7d:23:0f:f3:9a:e2:98:ea:40:ea:de:0a:61:
         5c:e3:2d:f4:f6:66:6c:3d:46:e8:6a:6f:0a:f6:c5:71:71:96:
         0c:54:a3:66:72:96:66:92:e0:02:60:7c:6d:08:d1:bc:7b:e8:
         ac:d3:0d:2e:d1:33:ca:9d:6d:2c:82:75:c8:b3:a7:6e:55:3e:
         d3:b3:76:99:a5:27:5b:95:92:22:32:c9:cd:e5:0f:02:d5:09:
         0f:72:f8:ec:fb:8b:7a:03:39:f3:bd:6c:4d:87:f8:bb:d8:f5:
         13:55:bd:db:cf:e8:f2:95:da:c9:54:45:14:fa:ae:0f:d3:30:
         df:19:5e:5e:04:4a:0f:b2:12:3e:b7:7b:b8:c9:43:61:97:92:
         fb:93:6a:00:f0:b3:57:2e:e4:a4:6a:84:65:4c:05:14:71:0a:
         1a:29:98:02:19:21:e2:3a:a6:29:9b:47:cd:68:b9:35:94:ec:
         d7:7b:01:01:15:e1:32:55:a8:73:18:c3:3d:9b:de:fa:e9:c1:
         aa:ab:52:a4:0b:3d:de:6d:be:54:31:11:80:04:a9:91:55:5e:
         c4:05:10:65:ea:33:14:97:4f:8c:9a:32:b9:7e:26:6a:49:04:
         cc:3b:c7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:41 2026 by rpki-client