Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa
File:                     22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa (raw, json)
Hash identifier:          lbeKp7v1tAEjuo4yL4p8VJQSQzNcyDGKpVIdvWZbgos=
Subject key identifier:   29:97:68:D2:66:A2:37:F2:93:17:AA:4E:9A:F2:D5:DC:F5:62:36:60
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584CB121BDC12493F31E0B5A07C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     46261
IP address blocks:        104.218.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:bd:c1:24:93:f3:1e:0b:5a:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=7481d62b-d11d-4526-95ec-0e65c6ed5871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:98:00:b4:3b:d8:bf:f1:ea:7b:87:d1:9d:
                    d9:fd:ca:f8:97:b2:cc:29:ea:56:e2:b1:de:67:5f:
                    57:3c:41:80:26:f8:46:4e:f1:54:75:0c:51:db:4c:
                    b1:bd:fc:ca:67:30:06:28:6e:f4:c4:ce:55:ea:2d:
                    2e:fa:ae:08:96:79:3e:05:d2:e7:93:14:c1:68:01:
                    18:87:62:6d:fa:46:74:49:82:05:ea:e0:e3:92:2a:
                    ac:e0:e7:f4:93:bb:d4:35:fa:62:2e:83:4f:c8:13:
                    5d:d1:7f:93:ef:73:8a:9b:09:19:b1:3f:57:86:71:
                    df:4f:16:4a:1a:59:4c:16:e9:f6:ce:07:cd:db:57:
                    8d:5f:e7:e8:22:80:53:1b:46:10:37:38:84:f9:e9:
                    71:58:f7:e8:db:69:90:7f:23:4e:e3:5d:81:f6:02:
                    dc:5a:05:94:9c:83:d8:ea:3f:1e:48:01:6c:8e:81:
                    ed:f6:15:84:b0:ca:2e:2c:5e:fd:ca:10:e2:e9:be:
                    19:9c:3f:3a:7a:f6:23:8b:7c:d1:f7:02:c4:94:1c:
                    06:29:85:d3:99:0d:e3:12:c6:af:4e:1a:ee:f5:8d:
                    54:73:90:64:6b:11:ea:42:e6:dd:7c:e2:92:f7:cb:
                    e2:88:f9:b1:f6:69:9b:75:4b:62:a9:f6:8a:1e:01:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:97:68:D2:66:A2:37:F2:93:17:AA:4E:9A:F2:D5:DC:F5:62:36:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/22dd761e-d0b2-3c61-b3d2-b8617c0fa2c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1b:2a:7b:9c:c2:7b:f8:db:a8:04:bc:e3:e9:6c:78:11:a6:
         3c:d2:dd:d9:30:bb:58:50:43:23:91:78:60:90:7a:c0:76:ba:
         c3:f9:3f:fa:58:e9:09:04:21:cd:57:be:87:2a:e7:57:1b:1c:
         80:7e:d3:67:a2:6f:00:16:ba:dd:7e:b7:76:9e:ec:8f:52:79:
         6a:32:ab:d3:3b:2a:19:df:d8:03:dc:8e:0e:f6:0d:81:b7:63:
         9e:16:7a:30:ee:5b:11:81:62:15:7e:56:63:50:7c:76:dd:18:
         0f:af:df:58:8a:22:0c:a4:61:55:33:ac:80:45:07:f4:d2:a9:
         40:e8:ee:8c:14:9c:d8:57:fe:3f:01:0f:d4:11:56:3b:c4:66:
         f9:ca:78:15:68:d8:a4:46:ee:bb:84:06:47:68:62:c4:48:bb:
         19:ea:46:64:13:ec:0b:f2:c1:86:62:ab:b2:34:b3:22:d1:f6:
         60:0d:c1:80:93:87:27:85:66:39:69:4a:0f:56:41:1d:78:6c:
         ef:21:10:a2:cd:ad:cd:64:f0:2e:db:f5:6d:f6:a9:bb:92:6a:
         49:90:3e:33:60:1d:25:7a:f1:7f:59:57:bf:1b:e0:90:79:a2:
         a2:59:8b:5a:e1:89:2d:78:d9:73:6f:aa:41:86:83:a2:78:a2:
         9d:b0:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:08 2026 by rpki-client