Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa
File:                     0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa (raw, json)
Hash identifier:          9r22ilVvHm7q5KQUjY/0IlqfXccS2ndcY7UTeEv7UAs=
Subject key identifier:   58:EF:B1:2F:20:E1:D4:59:5B:CA:F2:AC:11:89:B8:D6:06:E4:0A:1D
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584CF9B779A13A14CCBFFDFCAA40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     398993
IP address blocks:        104.233.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:79:a1:3a:14:cc:bf:fd:fc:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=954657a9-2f63-4693-85d9-12cda52293d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:c3:1a:a6:df:e0:ac:aa:b3:76:2d:a7:cd:
                    e9:8e:f5:d1:04:c4:fa:9b:7c:64:85:31:78:0e:d5:
                    97:ec:53:4b:ec:73:64:8b:48:01:cd:5a:87:a9:2d:
                    4e:48:8c:d2:0f:32:11:80:99:f3:86:41:29:35:d0:
                    7d:4d:6f:02:56:35:c2:f2:ce:53:23:37:db:68:c5:
                    b8:67:cd:f9:09:17:36:bd:45:3c:4c:63:5e:cd:80:
                    03:fb:02:c8:e4:01:b2:39:e8:a9:c5:69:01:6c:14:
                    b3:de:06:b5:e3:68:65:eb:fd:f9:2f:ea:c2:17:70:
                    30:04:f5:6f:87:c7:9c:9c:b5:a1:8b:4a:8e:68:f4:
                    ea:47:6b:53:c7:2d:bd:10:c3:56:7c:25:cb:f8:89:
                    92:5b:0a:1a:1c:d8:bc:f6:8a:bb:b0:40:cd:fb:93:
                    06:9c:17:04:4c:c6:6e:5d:ac:a1:d5:03:e9:72:37:
                    38:1a:69:c2:45:65:a1:96:16:3d:48:48:44:51:0e:
                    f0:00:31:eb:48:ca:ef:74:4e:07:20:54:96:ae:b5:
                    c6:7c:bf:5b:e9:b9:86:2b:89:b4:62:37:f7:0e:7e:
                    42:28:7a:ef:78:01:bd:fb:f3:f6:88:2e:23:aa:95:
                    d5:19:96:b3:a9:e3:de:44:f8:f3:e0:2b:d9:e7:ba:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:B1:2F:20:E1:D4:59:5B:CA:F2:AC:11:89:B8:D6:06:E4:0A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:9e:6d:c2:f7:67:c7:60:74:e5:9f:9a:2b:66:70:18:47:
         8e:8b:68:c1:1d:7a:43:57:57:81:4a:42:a4:cb:58:da:c6:53:
         7e:9f:68:42:5c:72:d2:de:5d:dd:d5:44:62:66:24:30:66:9b:
         72:a0:e3:88:63:4f:e5:f5:f5:b8:e9:21:97:b0:52:ca:76:bc:
         c4:f3:d9:9e:16:3f:c4:89:c5:80:8d:cc:29:70:17:31:52:1f:
         8f:25:23:92:d6:be:a7:cd:1f:54:f3:fc:45:9b:98:50:de:bb:
         72:1e:5d:41:66:15:70:ad:9c:ee:6e:fe:ce:34:9c:cc:ba:bf:
         52:8f:a6:26:ef:5f:22:78:64:c2:ff:4f:e5:b9:11:76:aa:73:
         87:7e:a7:5b:05:db:96:a3:5e:e8:b3:a9:ac:12:21:e6:82:79:
         d7:fe:38:67:e8:21:0c:73:96:c3:72:a9:82:26:ad:f7:37:b9:
         cc:5d:ac:82:95:d0:f1:2c:57:85:d8:0a:dd:82:59:97:bb:47:
         e6:bd:c3:6c:46:42:e2:00:bc:46:89:90:f6:91:54:b1:c4:ad:
         59:6a:b8:7d:2f:48:48:2d:bc:b8:2e:a7:6d:06:97:f0:f3:40:
         e2:2f:ae:ef:c0:cc:1e:b1:eb:a2:8d:82:a6:fb:1e:0c:8c:49:
         39:54:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:10 2026 by rpki-client