Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa
File:                     83071f39-2540-343d-b0a6-069a0599dbe7.roa (raw, json)
Hash identifier:          1I4zre5mFBQZcgRgtIu38x61EsQlaKksvMiLKmHwjpI=
Subject key identifier:   3E:96:71:2D:CB:8E:66:6C:FE:F7:BC:F4:C5:77:83:63:41:CD:48:17
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584CF8524DBC6E706235ADAB8680
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        104.218.200.0/24 maxlen: 24
                          104.218.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4d:bc:6e:70:62:35:ad:ab:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=643238ea-5ddd-4769-886b-ffce22a23af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:92:34:1a:c9:ec:ff:5f:90:3a:ca:53:30:
                    a7:d4:7a:45:18:a4:42:ed:f5:eb:0f:f9:3e:36:d5:
                    a1:b1:5c:87:a0:5c:a1:f9:72:76:8b:20:e6:c4:b7:
                    cf:48:91:82:0a:e0:42:14:5c:da:4f:a0:f9:6e:ba:
                    c7:4c:60:71:9c:fc:c0:88:2a:f1:44:43:f7:41:7d:
                    cf:af:3b:22:6f:44:7b:5f:60:6c:09:62:21:af:28:
                    70:05:ea:d8:eb:44:ab:ee:bc:d8:7d:77:0f:e5:43:
                    83:7d:55:bd:db:1d:6d:a5:76:aa:19:5c:b6:ba:51:
                    db:cd:e4:2e:62:ad:7c:c3:b6:40:18:a3:b1:ec:6d:
                    0e:4a:28:4b:d9:2b:4d:20:63:17:75:17:3d:dc:b7:
                    cc:01:b4:23:bc:da:ce:db:07:f6:e5:e6:1b:77:a9:
                    c5:c7:8d:9f:a7:07:bb:f4:32:cc:9e:3f:59:61:31:
                    89:64:0b:17:1a:e7:c0:de:64:ff:ce:1f:97:f4:b6:
                    b0:f3:2d:4d:f1:01:a2:2e:9f:84:a7:e6:b6:f5:73:
                    14:bd:c5:8a:0c:83:61:b7:55:e2:cf:e2:2a:f6:c2:
                    12:92:58:f4:49:5c:6a:21:b2:f2:8f:cc:db:b8:9e:
                    62:39:86:57:ff:7d:80:f6:3a:f9:fb:e3:18:5d:e9:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:96:71:2D:CB:8E:66:6C:FE:F7:BC:F4:C5:77:83:63:41:CD:48:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.200.0/24
                  104.218.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:43:67:9b:90:e0:ae:f9:7e:46:92:0d:35:d0:3d:bd:15:
         c7:df:66:da:98:c4:41:78:c6:6f:4e:ce:c5:19:6d:00:22:6e:
         a8:57:36:2d:20:b8:f6:c0:29:07:29:e8:8c:bc:b2:84:fa:1d:
         cc:f8:42:4b:15:66:57:17:e9:c4:59:9d:1b:ba:79:db:47:3b:
         48:da:4d:80:4b:18:78:0b:30:f4:99:48:8a:16:7b:8f:98:ad:
         6d:05:4e:b1:dd:ae:54:41:d5:4d:10:06:70:45:1e:a8:e1:8c:
         f8:6a:79:df:02:1f:05:04:d3:ac:a6:e4:7b:72:f1:b1:d1:12:
         ab:05:6d:8a:51:4f:64:33:a0:09:82:be:65:93:38:6b:74:9a:
         9d:f2:33:b6:4f:d7:92:bd:c0:90:9a:97:b9:b2:e6:66:46:d1:
         bd:41:d1:6d:78:c6:1d:55:3f:14:de:b7:4f:7c:11:d4:65:ba:
         1c:54:e8:ec:38:a8:3c:f9:dc:4e:3d:7c:0d:bd:28:56:19:a1:
         0c:5b:71:25:83:d2:7b:b3:e8:f3:ba:08:62:72:f9:f6:8f:7f:
         dc:54:cc:ea:b4:00:c3:bd:70:27:16:dd:a4:c3:c3:31:60:ed:
         91:d2:8b:12:09:76:84:79:12:68:eb:6f:0d:8c:ba:22:9c:a4:
         62:36:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:53 2026 by rpki-client