Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa
File:                     5846edab-0650-3c94-acc8-bcb993d9bf61.roa (raw, json)
Hash identifier:          +EI4rVjtllt9LYEvaaDoj94DvrigqBpp+YcIEsm7gMY=
Subject key identifier:   19:61:6F:A0:2C:FC:BE:EE:65:B6:CB:D4:86:F9:BC:D9:C9:31:55:80
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584D7A05507B9AF128BE5BA11280
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     40676
IP address blocks:        104.238.248.0/24 maxlen: 24
                          104.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:50:7b:9a:f1:28:be:5b:a1:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=0f6c133b-74b4-4038-839e-a5fc479a968a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:14:a0:92:7c:5f:89:e7:5b:0b:ac:99:53:
                    a2:4b:bd:75:2e:c1:b7:4e:c8:34:d3:a5:88:95:7f:
                    0a:16:df:62:85:af:7d:b5:66:49:46:e1:3b:e3:2b:
                    c9:9e:c6:8c:35:6f:83:2d:f3:25:08:44:a8:ba:b1:
                    98:bf:9c:2c:ef:51:6b:64:b0:e2:8e:7b:e8:3d:02:
                    d6:e9:d0:fb:8d:fb:fe:a9:dc:cd:69:e2:0e:2b:07:
                    aa:e2:1e:46:46:13:51:0c:4c:54:d5:6e:4c:6c:0c:
                    fb:a5:34:c7:76:05:0f:fa:59:c8:a8:cd:26:4b:fd:
                    86:73:d0:e6:20:3a:d3:85:a6:a8:c4:b0:4c:e4:2d:
                    05:16:79:a8:cc:35:db:76:aa:1c:ad:d1:79:27:bc:
                    34:33:43:c8:1c:c4:74:9e:a1:19:c4:4d:7e:8d:e4:
                    71:4b:18:0e:28:d5:8d:47:b9:72:69:d1:49:1f:32:
                    bc:ee:5b:41:1e:31:03:b6:ea:a3:b0:6f:95:20:26:
                    fc:24:ca:b6:a4:d8:c7:d4:8f:c4:01:bf:24:46:f6:
                    ba:1a:65:e8:16:f6:cd:f1:2c:52:ac:26:59:90:b8:
                    34:80:17:78:32:06:9a:ac:9a:41:f5:31:be:bf:3c:
                    3b:15:32:a1:b6:d9:52:0c:8b:82:f7:4c:8f:03:ff:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:61:6F:A0:2C:FC:BE:EE:65:B6:CB:D4:86:F9:BC:D9:C9:31:55:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5846edab-0650-3c94-acc8-bcb993d9bf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:dc:a0:0f:73:08:e8:1b:6e:96:ce:a9:52:cd:43:6f:83:
         b5:1f:66:63:36:ab:a0:f8:d4:36:77:ad:29:54:a8:75:84:e8:
         6a:62:75:af:d3:8f:79:f1:4b:b6:f9:8f:39:43:94:7a:ad:75:
         0b:a3:f8:aa:61:67:2c:f9:15:cd:98:2a:4a:c1:22:89:bf:2c:
         50:3d:2a:ed:f2:dc:9c:f6:f7:7e:18:32:4a:54:44:32:ba:28:
         5f:1f:fb:9c:24:f5:7d:d6:d1:5b:68:6c:73:b0:08:14:31:4c:
         66:8a:d4:7f:38:f8:56:27:ca:b5:51:80:3c:cc:3b:4a:06:ee:
         26:e5:9b:5e:e5:59:c0:cb:8f:6f:7d:6c:89:85:e6:35:0c:29:
         89:a1:f0:8a:1d:ae:2b:7f:99:08:c3:76:d5:b6:fa:d4:c1:19:
         27:a1:44:05:11:71:31:54:45:a8:c0:9d:49:18:80:18:da:d9:
         91:75:ba:31:1a:c1:70:37:5a:db:54:91:d0:2a:6e:79:fb:4b:
         d8:a1:b3:3e:48:1b:25:4e:a2:ae:12:7b:5c:64:ea:20:63:44:
         e7:3d:46:63:0d:86:39:ee:e4:c2:16:ab:c5:5b:2a:1e:cf:ab:
         88:a1:99:67:46:1d:30:70:6b:23:1f:2e:2f:e8:37:72:ae:e9:
         b1:b0:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:27 2026 by rpki-client