Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa
File:                     688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa (raw, json)
Hash identifier:          jAT6GlrNkpskXp/U6YA2gEqwjReB6lId1lW4d3cOW5s=
Subject key identifier:   6F:77:60:53:15:20:FE:42:BC:8F:70:35:DC:1E:9F:1F:78:7D:06:FA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D7B6A825074136001A62D0840
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        104.145.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:82:50:74:13:60:01:a6:2d:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=7edd8cc0-6d46-4570-bea9-d697e3a0f8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6d:5d:11:89:07:8e:04:b7:ca:1c:51:63:b2:
                    d2:c7:4b:6d:8d:79:b3:25:eb:4d:ce:97:c9:23:50:
                    38:2a:2b:c7:31:c5:d7:fa:61:95:09:75:15:33:b5:
                    a8:bc:22:ef:e2:15:c4:5c:bb:dd:32:85:96:37:d0:
                    9b:61:76:56:39:6f:bf:b9:82:9b:cc:ac:27:82:1d:
                    59:2d:6f:f9:6b:bc:29:81:e2:b9:ef:7b:24:bf:e7:
                    9d:73:10:66:b0:d3:ac:42:8b:ff:3e:d4:32:b3:be:
                    ab:eb:49:b0:c2:59:23:29:6b:66:aa:35:99:5c:71:
                    32:d9:0c:f9:88:d2:19:dc:51:2b:a9:b1:cf:58:e5:
                    e1:27:3f:ad:6b:99:05:37:94:42:e6:e4:14:5a:76:
                    5d:fa:4c:68:f1:dd:3d:de:e7:6a:fa:f2:cb:d1:0e:
                    d5:93:9a:ac:56:c0:34:c8:2a:8d:8d:ed:7c:42:32:
                    16:62:48:49:98:28:62:5a:49:4e:6e:42:d2:23:4d:
                    92:75:ae:f1:e6:79:e2:85:15:25:55:20:3c:e5:ec:
                    7b:fc:bd:d8:e4:87:50:40:be:e8:ff:78:2a:98:c5:
                    9f:a5:3f:94:c0:af:1f:4b:ce:49:49:b2:ca:a9:3f:
                    a3:5b:6e:48:ca:8d:8d:72:4d:79:fa:71:0c:29:19:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:60:53:15:20:FE:42:BC:8F:70:35:DC:1E:9F:1F:78:7D:06:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/688f045d-3b75-3901-9cb6-bf1137c2b9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:9f:21:a6:87:f0:d2:ea:3c:07:18:f4:5e:c2:9a:31:bc:
         ae:76:09:b9:83:33:51:87:14:87:2d:95:ab:7f:25:78:ea:9e:
         0e:a3:e4:7d:b1:37:34:a9:84:cf:c0:df:29:13:5b:4b:34:27:
         94:43:8a:1b:cc:b7:d3:83:1d:28:f7:72:00:5f:11:b3:66:97:
         e1:52:4f:58:f7:41:ab:14:6c:e1:4a:2a:1f:89:db:fd:4f:c8:
         17:2b:eb:eb:59:76:55:bb:d6:58:a4:3d:73:e7:02:09:60:2f:
         5e:18:9a:61:34:c1:98:0b:b1:ff:cc:47:73:7d:4d:8f:8a:cd:
         34:81:c8:1f:b6:3d:df:0e:1c:42:74:de:51:e3:07:9b:25:20:
         79:7a:bd:16:1d:c8:fa:e1:7d:a3:b2:3c:97:12:8a:da:09:0d:
         30:4a:f4:57:3e:ca:c8:dc:75:cc:b6:d4:01:9e:8e:0d:26:9b:
         1d:8b:ea:3d:44:30:99:a2:a2:03:ba:18:61:6d:51:f6:f2:0c:
         0a:02:28:69:e0:e0:19:69:ff:ac:cc:e7:5e:af:e0:f6:2c:53:
         16:61:12:3a:dd:45:e7:4d:a0:d0:0a:fa:3a:7c:e4:e5:f4:1b:
         aa:61:34:2d:1a:61:e5:13:32:1c:04:c6:2c:78:4b:96:2a:57:
         fb:2c:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:57 2026 by rpki-client