Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa
File:                     fba144c0-7b20-3ea6-829a-6b7333457b43.roa (raw, json)
Hash identifier:          gaCQsQ47Q38CVtWnsr6QUDPqSkZThcCCgZXVFvJBtXQ=
Subject key identifier:   41:C1:2D:1D:76:48:86:AB:FA:6F:D4:4E:C5:0C:98:AE:E8:B7:B1:D3
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584D83CAAC428DC8AD785C28AE00
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     19318
IP address blocks:        104.218.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ac:42:8d:c8:ad:78:5c:28:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d3c69454-5b19-4e9e-abd9-d95fd24b0eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:7e:88:7e:99:82:13:27:95:ce:ba:e7:0c:
                    c5:04:df:4b:d5:10:e0:b3:be:77:45:8a:3d:70:0c:
                    0d:ab:5d:f8:41:01:59:bf:d1:2a:12:f0:16:b3:a4:
                    95:64:f3:75:2e:7e:b2:d3:6d:da:39:ae:2d:75:98:
                    21:84:71:b5:6f:b3:77:f7:29:36:0a:40:27:99:b9:
                    dc:8b:1c:b3:28:e0:69:1a:64:40:ba:cb:c9:27:ff:
                    79:a7:01:fe:7e:d0:9f:eb:d1:9b:02:8d:a4:31:d6:
                    27:95:e1:3d:f9:41:bc:95:44:4b:b1:8a:3b:d5:30:
                    ad:76:fb:7a:b3:5b:a7:3c:53:a9:b0:02:69:f0:cf:
                    9b:3a:d0:fc:3e:b0:e9:d3:04:f7:ca:b1:c7:ea:d5:
                    97:30:50:51:39:6a:19:0c:46:b5:f9:9a:d8:1d:e2:
                    8d:0c:06:91:4d:f9:3a:b3:2a:b1:92:09:3b:54:ff:
                    52:8e:d6:2a:0f:f2:19:63:cf:15:d7:e0:54:4d:c2:
                    18:f0:c1:26:43:24:dc:73:73:42:3f:03:b9:64:f4:
                    f3:a9:a1:e6:7c:d2:9c:22:5f:b1:5a:8b:d7:15:b3:
                    f8:d4:93:1b:a7:a5:f4:6b:41:89:ee:06:00:10:8a:
                    65:b5:1e:19:e1:1d:ea:20:b4:fb:c2:e2:81:7d:fe:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:2D:1D:76:48:86:AB:FA:6F:D4:4E:C5:0C:98:AE:E8:B7:B1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:49:64:f2:d0:f5:61:02:97:0a:ac:ea:2b:3a:2a:07:e1:
         20:92:99:68:27:f7:ab:82:e2:76:76:f0:f1:98:2a:5a:ca:b6:
         a6:d9:9d:84:e6:df:04:e7:20:47:c2:18:7b:8b:aa:16:1f:f8:
         fd:4f:a5:0e:01:da:1e:3f:fa:a4:04:4b:50:39:5d:b5:82:db:
         65:16:d1:d7:2a:cc:62:0a:df:0b:7a:99:fe:95:f2:9d:05:21:
         c0:2f:4b:bf:56:82:e0:4c:42:8a:17:74:79:0a:af:4b:f1:3f:
         a2:d9:2a:bf:47:37:47:67:81:61:ac:ec:ee:d4:1d:fa:63:81:
         c3:fd:b2:24:6c:d2:20:f5:d9:49:16:71:1e:59:a5:d4:37:14:
         12:ec:4a:a1:66:8d:41:0a:3c:fc:8c:6a:e7:bb:7a:a1:ef:26:
         d2:fc:ad:68:36:58:fc:60:7e:71:40:ec:a8:da:86:5e:93:8e:
         86:8e:88:f0:7b:d1:dc:28:ab:b4:2b:94:2a:64:88:1f:d0:3c:
         ca:aa:ba:59:e9:e4:1a:c6:e4:d1:4f:5a:35:e0:7a:70:87:37:
         40:46:57:20:bd:ba:c9:6a:ef:cd:0e:3a:28:de:4e:88:7b:24:
         4d:01:fc:6b:fc:f9:8e:2f:72:ee:e4:d5:33:af:cd:e9:54:40:
         21:f5:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:14 2026 by rpki-client