Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa
File:                     fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa (raw, json)
Hash identifier:          CWr1qBjpyRQExMPnC0nvrhh89RCRq4laNkISmbbH2wY=
Subject key identifier:   11:A5:EE:97:55:5F:08:DF:1C:98:D6:DD:22:94:E7:EA:24:B0:7C:35
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E04361FCA83F65E58EB7F5E00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     23473
IP address blocks:        104.145.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1f:ca:83:f6:5e:58:eb:7f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8d9053b4-b6ca-4922-9776-003ddfeff1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:69:7c:2a:7b:29:57:e7:54:16:f6:28:5d:
                    2a:f5:b9:e0:47:c0:49:81:01:0a:cb:ab:bc:ef:cd:
                    33:b7:39:0d:43:59:f3:00:b6:4e:74:5e:f7:9e:f3:
                    12:9a:e9:8c:3f:31:63:bd:49:31:a0:e2:97:b1:77:
                    8d:24:e4:aa:33:d0:d4:24:9c:02:19:b4:58:0c:8d:
                    7e:60:a7:d0:05:39:16:e0:6b:91:c8:4f:c9:de:e9:
                    f8:6f:d0:6e:f7:53:09:f8:b2:30:dc:b5:03:a8:4c:
                    f9:3f:fd:3e:a7:41:53:22:2e:66:6a:76:75:fd:c8:
                    37:79:8b:3d:b2:77:78:dc:4d:77:ae:77:8c:d8:24:
                    33:33:ee:bb:33:e8:51:43:51:bd:98:92:12:42:00:
                    6d:81:b3:f2:1a:d9:4f:a9:ee:a5:5b:cd:ac:b7:af:
                    bd:34:9c:ba:56:76:a9:fe:3b:38:79:32:f9:dd:47:
                    60:37:47:6a:43:41:8b:2e:9c:07:f3:9b:3c:d9:db:
                    0a:81:12:fe:6c:4e:3e:a0:18:91:a4:34:61:2a:65:
                    77:91:f1:19:d1:22:cf:96:57:f1:13:30:9a:b4:23:
                    ee:65:f5:33:31:3b:2a:9e:99:77:8b:3b:70:be:19:
                    cc:cf:e8:60:37:aa:0b:93:29:2f:89:2e:45:e4:09:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A5:EE:97:55:5F:08:DF:1C:98:D6:DD:22:94:E7:EA:24:B0:7C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbc17f0b-bdba-3bf7-8ad3-1246be479c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:8b:cc:cd:98:49:03:89:8c:38:da:53:3f:8f:76:84:59:
         d7:41:cf:1f:91:6e:21:61:01:d7:54:05:8d:32:94:a5:9d:05:
         67:77:8d:c9:10:c7:fe:fd:64:3d:0b:9d:e1:1d:ba:4b:53:af:
         67:5e:90:e0:71:b7:f4:8c:8b:20:a2:05:38:de:e1:15:c2:98:
         98:03:5f:ee:1f:fa:ae:13:53:39:4d:1b:e5:91:78:f9:df:f6:
         70:97:06:e1:fa:d7:eb:f9:87:b8:64:60:39:48:3e:ce:f9:5c:
         77:f7:a5:f7:c5:6e:e0:8c:e4:5b:23:c4:7a:46:16:17:ba:c0:
         e1:e4:7c:4e:8f:ef:64:f7:94:55:f5:4b:c7:c9:d3:2e:65:3a:
         67:17:cc:55:84:50:c4:b7:e0:30:12:2e:c0:62:a1:b6:e1:79:
         e1:f6:c5:36:1e:6d:0d:9c:c6:9e:d6:a8:f4:f9:bd:64:77:f6:
         2f:57:82:21:c5:35:a7:e6:22:70:18:d8:dc:f0:84:70:e5:19:
         bf:c2:cc:0f:32:53:26:d7:1b:d3:20:40:f1:04:87:6e:ba:b5:
         7d:84:b1:e7:ca:36:d9:71:1a:ec:2f:22:32:06:08:91:da:ab:
         66:81:ef:bc:f1:ac:67:f7:d5:ee:a8:d7:58:ae:a3:c0:f2:c0:
         a3:e0:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:18 2026 by rpki-client