Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa
File:                     ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa (raw, json)
Hash identifier:          fMqzVY7i79XGDuRGEnbLQv689+28S+y3mBYQCcfZf+Y=
Subject key identifier:   F0:A4:FE:FE:EC:1A:24:9F:1D:60:84:E9:CC:5A:DE:A2:2C:6F:3A:C8
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584C9ACC358868FAE4C311B2D280
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     20205
IP address blocks:        104.37.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:35:88:68:fa:e4:c3:11:b2:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=99bd51c4-4222-4854-a4e6-92507a8c0475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:88:47:98:d8:b8:4a:d3:a9:fc:81:b9:60:
                    f3:c4:96:3e:e1:f5:60:8e:c0:c9:12:6d:0b:f3:06:
                    3f:71:82:f6:71:79:54:45:ca:5c:ea:5f:f4:ee:25:
                    01:81:30:08:12:f5:8b:6d:bd:d1:cb:68:8b:3e:2d:
                    92:94:c9:ce:94:63:1c:ac:3d:76:5c:6c:dd:ba:a2:
                    ab:b3:5d:65:cd:fe:10:f8:2a:5d:c4:72:9a:52:bb:
                    04:eb:bd:5e:91:76:75:7a:50:1e:ca:89:56:7e:8b:
                    6e:05:49:b3:79:aa:87:4a:05:7e:5f:ff:71:d4:5b:
                    62:75:2e:27:93:bb:8c:90:81:b0:a4:e7:0e:98:4b:
                    0e:6e:50:29:fd:34:fc:22:ce:26:20:1d:5f:77:38:
                    7d:d3:08:d8:e4:dd:ba:1c:37:e0:4d:b7:58:7f:77:
                    fc:b6:fc:60:f5:af:2d:bd:4b:a9:2c:7b:eb:8e:3d:
                    3d:74:cf:83:bc:9b:40:49:91:34:34:55:ed:40:ad:
                    92:7b:6e:e1:f2:1b:c6:25:25:22:81:c3:9b:a4:03:
                    50:9c:a2:c7:69:2c:c7:66:e6:37:dc:c4:cb:50:94:
                    0a:c9:71:14:94:0c:7e:6a:47:df:e8:e0:2e:ed:bf:
                    bc:fb:8a:7b:ee:ff:9a:0b:e7:8b:bd:ed:81:66:2c:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A4:FE:FE:EC:1A:24:9F:1D:60:84:E9:CC:5A:DE:A2:2C:6F:3A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:10:10:58:f4:bb:39:4c:09:b2:f5:54:11:21:14:8c:43:
         f4:d8:ba:0d:ad:81:94:16:f2:9b:b3:71:9c:d9:8e:b0:c2:02:
         d2:12:13:48:bc:ac:5c:5a:e0:18:ee:49:bc:7f:7f:c3:83:ca:
         63:55:6d:85:d8:d8:4b:d4:6c:5b:f8:dd:66:22:11:92:33:54:
         6b:83:99:ce:47:3e:f7:55:c8:2b:d9:13:f5:bc:15:7d:cb:01:
         1a:00:12:aa:6b:2b:f2:40:52:cc:25:b3:9e:ea:0e:64:20:0c:
         1d:57:7b:4b:af:01:e5:12:a9:e7:6a:67:d6:51:3f:13:2a:36:
         32:7e:e6:9b:66:47:c1:51:3e:36:09:a8:b3:27:9b:54:7c:4b:
         57:1d:93:ed:3d:d1:51:4b:50:19:33:f3:04:cb:06:d5:c2:90:
         d2:e2:c0:ac:94:55:c3:90:b3:29:c5:58:29:f5:c4:76:c8:8b:
         f3:45:39:b5:ff:c1:33:71:e7:f2:f8:43:3d:c6:07:79:42:2c:
         f6:fb:84:69:6a:d3:f8:dc:96:fe:c1:40:e3:1a:c2:9f:f0:91:
         87:8c:c3:29:54:0d:c7:3a:19:19:ca:a0:e6:b8:9a:1e:73:1c:
         f6:e5:fe:1f:9b:6c:d5:6b:cd:30:13:29:29:fc:17:83:f2:c6:
         77:0f:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:47 2026 by rpki-client