Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa
File:                     3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa (raw, json)
Hash identifier:          bDw47NRVxSC4L/Q1LW99ad/vQ8Omk4QMmdYFvnymLqI=
Subject key identifier:   7F:D9:85:B2:D4:32:13:C9:88:09:A8:E9:20:15:BC:BA:BC:0D:BB:B9
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584D037D1849E754AFC3847A2000
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     33548
IP address blocks:        104.254.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:18:49:e7:54:af:c3:84:7a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=115bdf19-894a-4f10-a457-806e1232d2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:62:32:a9:6f:d6:ac:73:1d:f3:9f:d1:c4:
                    00:74:db:65:1f:b8:87:9b:d6:06:fe:90:68:a6:cb:
                    be:0c:3c:8c:93:ae:a5:ae:75:b8:a7:92:58:ff:e2:
                    e6:ae:2d:1a:37:b7:a4:a4:95:fc:d7:34:7b:33:b0:
                    fc:98:e6:49:a0:88:74:73:ee:94:64:da:7a:33:0d:
                    f4:8e:2d:6e:fc:d6:4d:16:58:3d:e8:cc:cc:be:00:
                    d9:ba:02:33:fe:3d:7e:82:7a:97:51:49:0c:53:52:
                    7e:23:27:39:ba:d3:c0:cf:76:69:f6:6c:ea:77:7b:
                    3b:b2:cf:ed:16:9f:be:c3:68:5e:3d:1d:a0:0d:a9:
                    1e:8a:53:81:43:40:1e:d6:d9:3a:e9:a0:32:8c:c3:
                    59:44:dc:3b:e7:03:14:f3:81:4d:a2:9e:05:47:86:
                    d6:08:f9:f7:f0:ea:01:42:d8:0f:26:8c:df:c0:63:
                    1c:02:cd:2d:b8:69:3b:13:d5:dc:a0:3a:42:8f:f1:
                    40:cc:f0:0a:7b:39:53:7f:72:a8:4b:e2:fe:c9:c4:
                    08:d9:5b:a1:10:5d:7e:c1:51:49:7d:be:7d:76:14:
                    bb:b6:c4:fe:e2:e4:02:ae:d6:15:75:d3:e5:74:e0:
                    ba:02:e1:ca:fc:01:da:39:11:a5:1a:0a:4d:0c:ae:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:85:B2:D4:32:13:C9:88:09:A8:E9:20:15:BC:BA:BC:0D:BB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/3d0a8021-0c17-3a9e-9ead-e114e11f7512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:5f:06:63:8c:e9:a0:6e:69:dd:bb:c0:45:f0:15:e2:df:
         20:c7:ca:c1:36:02:9c:7f:53:66:96:ff:6d:a7:89:e4:48:98:
         c2:b1:ba:4b:f9:16:03:d2:13:b7:ef:d2:65:2d:7f:c3:e0:1e:
         04:aa:9b:48:a4:6c:6c:f6:99:0d:97:c4:54:bb:9a:4b:a2:6c:
         39:0e:ec:b3:08:2c:81:80:c4:60:af:a2:f4:7b:88:bb:5f:f6:
         48:43:e3:bd:61:74:38:47:01:40:56:27:00:5e:cc:ac:2c:f1:
         0f:cf:c9:e9:4c:61:99:cf:21:43:5e:63:ae:fe:81:b7:e7:fd:
         0f:41:a5:bb:2d:69:40:0f:08:86:de:d3:9e:39:8c:88:be:2a:
         95:89:9c:c5:13:6f:db:f1:0d:55:7c:3d:3e:89:75:19:fc:9b:
         5a:42:b7:c5:6b:05:db:8e:5d:7c:c1:bb:c2:9b:87:0b:b1:79:
         56:77:5b:43:bd:22:55:26:7c:c9:87:e1:7b:17:6f:b2:19:7b:
         89:89:56:52:9e:f2:e9:8a:ee:7d:59:0f:94:10:e5:f2:1c:3d:
         8b:6e:ac:9b:da:43:b4:62:cc:38:2f:d4:5a:b9:e1:dd:20:bd:
         6a:75:dd:62:2d:bd:a5:1c:cf:4c:2a:b3:d6:70:ee:4f:0f:dc:
         f7:72:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:22 2026 by rpki-client