Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/763450bd-44d0-3d7e-b883-8c0d28f17c1c.roa
File:                     763450bd-44d0-3d7e-b883-8c0d28f17c1c.roa (raw, json)
Hash identifier:          HqLT6Gn07iLMDjJt4SMsLR/9L0+Dry2TTJErhZYVNAc=
Subject key identifier:   CC:69:CE:5E:20:A9:3F:86:89:B8:E4:F2:18:21:D2:F8:74:AE:07:27
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CB6B71BC254D0348AB5178D00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/763450bd-44d0-3d7e-b883-8c0d28f17c1c.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        104.145.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:1b:c2:54:d0:34:8a:b5:17:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=bf90db19-ba2c-45fa-9fd0-ca1dd5197088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:d7:fe:c5:21:92:f7:87:e7:2d:a5:f1:1a:
                    7f:4e:05:4b:48:cd:c6:e1:dd:9a:df:6d:02:ca:a6:
                    14:c5:c2:8f:88:a2:05:18:82:d1:4b:73:e0:d9:21:
                    1a:52:01:79:30:4d:b9:a1:86:f8:1a:da:21:ac:cb:
                    57:07:3e:74:38:89:d1:9d:f8:2f:d6:df:40:7a:b6:
                    cd:91:22:68:71:4f:d0:98:ab:43:7f:26:55:24:c4:
                    ae:45:ea:bb:d7:c7:63:e1:3c:e2:dd:c7:9a:90:ad:
                    10:d4:7e:d3:bf:9e:3e:10:c8:8c:2f:e0:b0:42:5d:
                    1e:4d:ce:18:3f:5b:cc:f7:d5:82:93:a5:0e:7b:ca:
                    7f:9f:ac:55:58:32:71:6e:8b:b9:eb:8e:b4:c7:eb:
                    ea:a0:92:7c:c2:94:12:4e:f4:da:a9:88:d6:79:75:
                    09:39:0e:74:27:15:d6:f5:39:0b:7f:e0:a1:0e:23:
                    5b:3b:07:09:e2:16:a8:a4:e3:ef:8a:e2:6e:b2:0c:
                    47:57:c7:d1:90:16:c7:b5:b5:4f:81:b7:95:84:05:
                    6c:a7:03:9a:22:14:9a:82:26:d9:2f:9b:9e:69:c2:
                    c5:32:a2:78:7c:84:95:0a:95:b9:d3:e6:bd:a0:f0:
                    2d:32:5f:e5:3d:eb:ee:8b:12:6f:11:37:e8:89:e8:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:CE:5E:20:A9:3F:86:89:B8:E4:F2:18:21:D2:F8:74:AE:07:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/763450bd-44d0-3d7e-b883-8c0d28f17c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:e8:01:7b:32:ff:d4:63:e3:2a:b1:35:97:6f:6a:ec:a2:
         2b:a9:bb:08:b6:31:6f:c9:98:9d:f2:9c:ff:ce:db:14:fd:fc:
         16:51:72:5b:56:d8:de:dd:2b:07:1b:f8:34:0e:53:e5:16:bc:
         04:75:a8:e1:6b:1a:a3:db:f4:22:3e:f0:39:95:db:95:02:d2:
         8f:b9:18:43:38:db:19:96:68:2b:17:21:5c:32:77:64:b0:80:
         0c:b9:eb:56:1d:21:1a:47:8a:61:5f:0d:0d:41:d9:66:65:98:
         31:52:b0:2c:ac:d7:78:c0:65:68:32:bf:9b:c8:5e:7f:64:57:
         c0:ad:02:06:d7:4c:01:c3:5c:8c:cf:61:84:a3:70:ad:77:a0:
         58:a2:55:e5:c1:0b:70:5a:23:c8:68:4e:49:f8:44:11:bd:a8:
         a9:f9:88:7e:71:22:93:f9:61:3e:83:a8:ab:9d:60:0e:b6:8f:
         28:94:91:15:4d:ed:f2:5a:1e:c9:18:d3:c1:ad:42:05:91:7e:
         2c:a4:49:0d:41:e0:90:cb:42:53:fc:5c:4f:c9:84:20:9b:c1:
         c7:98:0e:54:8a:b8:8d:d0:ce:ae:0a:34:9e:35:03:cb:0c:b4:
         9d:8f:c2:e7:d8:1c:ac:1a:1f:72:2f:51:45:77:b5:9a:00:9e:
         b3:88:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:56 2026 by rpki-client