Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
File:                     12457d9b-1b73-3fa3-9936-55d404c83c78.roa (raw, json)
Hash identifier:          Pu2Ar3nt1A5rGsYvAC7VmM8GHljchVoXgdKfbkGZxtQ=
Subject key identifier:   5D:4A:FA:F3:88:E8:5D:EA:BC:47:56:2E:6B:56:FC:E8:55:2D:6D:59
Certificate issuer:       /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial:       010D0C9F4328584CB981C9CF84A1DD611EB04280
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     203020
IP address blocks:        104.247.113.0/24 maxlen: 24
                          104.247.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c9:cf:84:a1:dd:61:1e:b0:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=f0e60947-7d81-4a0c-ae97-03b67da99827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:7f:65:96:e9:a7:bb:06:d2:de:2b:f7:0e:
                    25:ad:82:0d:8d:08:e8:4f:3d:60:ff:0c:b3:71:e8:
                    bd:a6:e7:b7:99:4b:f8:cc:ed:97:1c:41:eb:52:ea:
                    90:27:b7:07:8b:7e:b8:09:84:95:2a:28:b0:45:73:
                    8e:27:1d:19:c5:32:8f:85:d5:8a:b8:a8:b0:b6:fb:
                    b8:63:fd:0e:bb:33:83:ed:d0:8e:cf:92:3d:a2:bd:
                    df:23:92:37:0e:58:c6:d1:f7:54:e8:09:d6:70:e4:
                    bd:61:95:67:0a:70:47:ad:c6:6b:c9:0c:f5:79:5d:
                    b8:11:87:62:4c:a8:66:4c:fb:f8:b9:37:39:12:d1:
                    72:62:d8:99:e8:aa:b5:85:6c:7a:12:83:68:37:19:
                    ec:73:a5:44:fc:17:c2:eb:f3:b5:fc:de:c9:4e:14:
                    bd:29:f8:7a:a7:21:4e:7d:ee:10:1e:32:98:1a:08:
                    dd:ad:bf:38:03:f6:eb:3b:3e:d5:30:97:7c:05:75:
                    2c:a1:2e:fe:ad:70:1c:49:d3:3a:cc:b0:2c:f2:40:
                    cb:82:20:24:ea:fa:ee:cb:15:d9:66:38:42:6e:8d:
                    85:22:93:23:af:eb:a9:26:84:bb:0d:16:59:44:b1:
                    ed:28:89:3d:0a:c4:ef:b3:47:4c:a9:e3:1f:8c:75:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4A:FA:F3:88:E8:5D:EA:BC:47:56:2E:6B:56:FC:E8:55:2D:6D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl

            X509v3 Authority Key Identifier:
                keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.113.0/24
                  104.247.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:86:f4:8b:44:e9:5a:4e:ef:5a:18:29:d2:87:91:cd:c5:
         07:91:d9:56:91:00:bd:74:5a:4d:20:10:8b:be:81:2b:93:18:
         16:81:79:8f:9a:0e:44:2e:41:81:d3:99:5c:39:c1:3f:eb:4e:
         7d:17:12:73:a4:2f:ba:1c:fd:68:1a:ff:ed:8b:9f:a9:71:db:
         6c:e7:45:16:ba:d1:2a:f5:c7:3e:1c:c5:d9:0e:06:38:fc:ff:
         80:f6:ee:ce:1e:63:8f:18:b9:c1:01:12:6a:65:bc:19:56:0d:
         cf:37:81:7c:94:8f:a6:ef:f9:3f:6f:d1:23:db:1f:56:ac:d3:
         48:27:9d:82:a5:62:09:e4:57:34:3c:6c:be:ed:22:9f:b7:ab:
         86:e3:bb:19:30:51:0a:77:2f:ee:39:88:b7:5d:43:73:ce:f8:
         e6:92:5d:69:b5:fd:79:f2:aa:1b:e6:8d:22:85:10:99:a4:66:
         7c:a9:25:5c:6a:6e:7c:19:d5:94:d7:2a:21:46:47:36:f3:ac:
         f2:1f:3e:64:a9:5f:5e:8c:48:0b:04:8c:d8:0b:cb:86:60:55:
         4b:19:93:76:cc:bd:f8:b7:b4:df:56:c2:3f:e3:d2:b5:8f:8f:
         93:d8:9a:ca:e0:11:60:e6:e3:4a:15:bb:79:b7:ce:62:58:72:
         96:d7:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:29 2026 by rpki-client