Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
File:                     b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json)
Hash identifier:          z6EaHIhnPy77RjPre1zL8lVvP3wM/60q8qa4NuSzn1g=
Subject key identifier:   AE:4F:FC:01:84:E0:46:95:E1:76:CE:80:D1:86:2D:6C:D7:7D:89:9D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA76B43E165DE90D8AC66C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        104.220.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:6b:43:e1:65:de:90:d8:ac:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=9f28e088-c70c-403f-80c6-fd7b405616b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:c3:df:66:fb:be:07:71:80:e7:02:95:5e:
                    d8:17:24:e6:f5:db:64:0b:b6:24:6c:e5:51:38:57:
                    35:b1:06:cd:f3:9a:29:0f:5a:90:9b:a2:79:2a:cc:
                    3f:68:a1:50:b6:7c:dd:6a:b6:0c:8f:63:bf:db:0b:
                    3d:8e:15:64:25:17:38:79:d3:f5:bf:85:b0:56:40:
                    b3:9a:b3:be:bc:d2:30:c8:7b:fe:a4:4a:6d:f6:fd:
                    97:90:3e:db:b4:74:ed:b9:68:a6:8f:42:ce:73:79:
                    7b:af:20:59:4d:22:a4:6a:04:1a:0c:33:0c:8f:5c:
                    a1:67:7f:09:6a:6b:70:96:26:99:40:7d:55:0e:fe:
                    68:79:10:e3:8b:01:99:c4:0c:6b:14:87:90:85:71:
                    6f:62:ce:55:81:7e:a0:c0:fa:10:25:65:d7:03:46:
                    da:ea:b8:33:83:f7:2d:6c:a1:c0:dd:c7:c6:f3:b1:
                    88:2b:57:eb:4a:8f:b7:f5:8c:bc:69:99:01:b8:92:
                    05:2a:75:fa:f5:9d:63:fc:d7:a5:fa:35:70:d0:a4:
                    25:9e:4c:58:97:45:38:19:c6:bb:0f:9d:55:af:67:
                    92:6f:cd:ae:29:d6:06:b6:5a:1b:c2:8d:70:e2:42:
                    99:92:b7:6b:6d:a8:7c:9f:5a:47:c3:2b:b7:2f:58:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:FC:01:84:E0:46:95:E1:76:CE:80:D1:86:2D:6C:D7:7D:89:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:35:8d:34:7e:bf:c0:83:cd:42:cd:99:b3:12:07:9a:77:34:
         7e:d5:2e:11:26:8b:f0:29:c2:71:c4:39:62:57:2a:5a:2f:5c:
         08:83:6b:2d:de:27:36:16:ce:5c:5f:a1:2e:87:03:22:7a:8a:
         85:c3:8f:2b:3f:bb:59:81:3a:15:a5:9a:03:9c:40:ae:5a:e6:
         a9:2f:a6:c8:ac:d3:23:a8:84:94:79:1a:44:4f:20:51:cb:67:
         98:9c:93:f4:b0:3d:b3:9a:6b:5e:a8:52:16:c5:f2:3b:52:b9:
         03:51:40:cb:be:aa:d7:0f:30:74:47:29:44:15:0b:45:83:bc:
         3c:33:b5:92:61:9c:be:8f:b3:36:bd:24:b3:cb:90:b0:34:84:
         35:5d:bf:33:0c:fe:10:52:44:d9:e7:19:db:52:1d:c9:a7:10:
         51:af:bd:13:3d:a0:c7:8d:e9:d7:b4:d7:5e:35:c1:6c:e2:11:
         e3:04:51:cf:81:e4:3f:98:16:c1:c1:9c:7d:e7:43:6f:cf:30:
         30:7c:66:a1:3c:34:c9:4e:a3:e3:5c:c4:9f:11:d8:9e:19:96:
         8b:c8:93:85:4b:09:06:a6:c9:d8:de:f9:d2:4e:0e:f7:44:a5:
         8b:11:ed:6f:d3:5b:0f:02:c4:6d:7d:84:7f:68:8d:13:91:82:
         77:cb:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:52 2026 by rpki-client