Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45451171-9651-3acd-8b28-1aad809fd359.roa
File:                     45451171-9651-3acd-8b28-1aad809fd359.roa (raw, json)
Hash identifier:          g30r+yGZ23LW9Kop+Xowo54tK6PlVVI4NbmX30Fogz0=
Subject key identifier:   63:4B:54:63:31:89:86:6B:C2:0F:D4:72:9D:CA:B7:F7:FA:97:AF:BD
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CD60751A3275B6FC53C9A
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45451171-9651-3acd-8b28-1aad809fd359.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        104.244.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:d6:07:51:a3:27:5b:6f:c5:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=950d46b0-4a0f-4eb1-8fdb-c108dfff4078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:8d:72:36:8b:71:85:f1:9a:36:7b:c2:32:
                    d6:b2:3c:76:66:ab:4c:5e:c8:62:62:92:18:82:f2:
                    f1:42:93:41:09:0f:d2:1a:da:ab:e3:ce:0f:30:b2:
                    11:c1:cd:1a:0a:4e:4a:70:89:6b:d7:23:44:a1:71:
                    a1:e9:bf:8e:92:64:88:9c:46:8f:a2:17:f2:59:65:
                    f2:94:f4:78:e9:ce:24:87:ac:0c:07:e5:fc:e2:a9:
                    58:5f:f1:7a:fb:d2:2e:9a:2e:73:b1:3f:59:a6:37:
                    d9:f1:4a:77:10:75:4b:6c:a1:eb:89:ed:04:0d:f1:
                    94:fc:a0:9e:9d:f5:36:dc:40:7d:c1:12:4e:c2:57:
                    75:cd:68:20:6b:fa:12:b6:cb:07:b4:46:e0:dd:89:
                    70:83:7d:01:4b:e0:1d:3e:98:70:04:83:dc:9a:80:
                    a9:f0:3d:db:e3:83:84:2a:2f:35:41:3c:88:3c:f6:
                    8f:4c:b4:f0:99:be:8f:43:c8:07:4c:f7:85:ad:d8:
                    48:f3:99:cc:3f:cb:76:e6:0b:95:07:e5:63:c1:6c:
                    1c:1e:bc:36:e7:8b:38:f5:60:a1:67:26:ac:d6:bc:
                    dd:5f:c2:33:e5:0d:57:cd:17:02:65:d3:e1:ed:46:
                    fc:a6:1a:93:be:e9:0b:16:58:6a:3e:3c:46:2d:09:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:54:63:31:89:86:6B:C2:0F:D4:72:9D:CA:B7:F7:FA:97:AF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45451171-9651-3acd-8b28-1aad809fd359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:89:85:01:9f:5a:0e:01:d2:37:02:ee:45:c2:0a:cd:e0:f2:
         9d:5e:16:1f:87:21:b1:f5:0a:bf:4a:69:48:1f:cf:fa:aa:b1:
         ec:1e:65:40:77:ca:98:46:61:ba:d4:e0:6c:f4:ad:f5:a7:07:
         75:f1:11:8b:44:3f:f1:9c:79:66:51:7c:ef:2a:26:e8:3b:aa:
         0e:81:fd:5a:14:25:c7:09:00:67:5d:11:14:b4:e6:46:58:59:
         67:a3:6a:29:fb:32:2c:c2:85:33:ce:54:ba:47:9e:52:db:53:
         e1:03:9b:5b:b1:75:bd:06:b4:0d:04:14:f3:37:98:40:a3:d8:
         44:e1:5b:0d:c2:f9:5b:ab:21:88:a3:d3:6f:51:15:d0:b1:ce:
         6f:b8:0f:45:b9:8d:1d:9b:5e:37:e4:18:e8:0b:cf:3f:b0:13:
         89:c9:d3:31:a2:a1:b4:a9:73:7e:f6:57:0f:09:37:2a:56:f6:
         1b:44:cd:dc:4e:0f:1c:da:7f:23:c3:c0:7c:e5:9a:6e:57:bd:
         99:63:49:e3:1f:20:ff:71:50:9a:d1:9c:15:b3:ea:18:07:71:
         4f:f0:25:4f:98:9b:3e:7b:78:df:83:64:56:c6:3c:40:f6:1a:
         19:e3:11:1e:a2:ea:ba:98:e9:5b:cd:06:4b:af:e3:f7:7b:7d:
         93:dd:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:18 2026 by rpki-client