Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa
File:                     f2ecdc2f-de93-3a39-9660-b320ace592e0.roa (raw, json)
Hash identifier:          jPNNRGayO58WZZTWFDz0zciGi/WPChXI+qctHT83JQk=
Subject key identifier:   70:74:D4:AD:ED:C3:90:F1:4A:73:D2:DD:7F:76:31:8D:B3:87:CE:05
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584CDB020FF3027CA62EA8F00900
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     209242
IP address blocks:        104.36.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0f:f3:02:7c:a6:2e:a8:f0:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=f73e2a6c-8c1c-459b-aa7e-23e58f737858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:95:cd:b2:94:03:36:70:15:15:7a:46:4a:e9:
                    8d:ad:37:23:73:dd:35:4e:b8:b5:45:46:1b:5b:8f:
                    ba:d8:7e:a2:4c:d7:a8:e3:d6:fd:41:fe:f9:b4:2c:
                    a6:19:89:a3:56:b9:e5:8c:eb:ff:15:ab:a7:c5:42:
                    bb:7e:4a:a2:3a:1c:60:67:29:46:3e:78:cd:1f:01:
                    09:e0:0d:7d:10:e2:13:18:f4:0b:b7:83:01:1e:f0:
                    f6:ca:02:e3:72:15:63:f3:72:db:d4:a6:77:d1:eb:
                    32:b2:6e:57:bd:a7:29:90:80:b6:46:d2:8c:9c:3a:
                    9d:cc:1c:7a:71:26:72:a7:d3:f7:0e:99:35:4e:fd:
                    0b:c9:c4:70:b1:e3:7e:f9:7f:ff:c0:c8:4b:15:5a:
                    3c:82:70:54:89:75:9e:74:e9:d5:fd:33:af:17:1b:
                    ed:f5:71:c7:e5:5f:93:29:f4:11:75:4b:62:ef:25:
                    2d:20:ba:34:39:6c:43:ed:43:67:7a:cf:b4:54:e9:
                    f7:c5:f9:67:f1:66:b2:fe:3e:7f:b1:95:de:be:ab:
                    f9:ca:45:cf:bc:98:ac:2b:1b:e1:f3:f1:21:41:48:
                    cb:dd:f3:33:43:ee:f9:01:73:a9:05:d7:50:52:b8:
                    19:d1:0b:40:03:0a:c9:74:67:4b:41:59:5d:d1:a1:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:D4:AD:ED:C3:90:F1:4A:73:D2:DD:7F:76:31:8D:B3:87:CE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:26:18:1a:b3:73:0c:a2:ab:2b:38:01:c2:06:85:93:4c:
         23:0d:03:83:79:92:6e:a7:e5:29:60:04:63:4f:fc:d7:9a:12:
         14:03:60:95:30:71:23:8d:f0:45:3d:6f:b7:24:86:9f:e6:da:
         d5:6a:b2:d6:df:5c:e6:0e:13:93:c8:10:22:22:d7:bb:31:51:
         54:44:48:07:d5:07:94:42:6f:83:31:e6:37:05:27:33:eb:56:
         65:39:a1:b2:75:22:ad:09:56:84:b1:c3:67:57:2c:ad:3b:8d:
         ea:02:e7:a8:79:9c:3e:9e:bf:b5:6e:06:af:e7:b1:d3:2d:05:
         05:4d:0f:4f:78:ab:65:59:e6:92:04:a1:be:5f:d7:c9:bc:c5:
         eb:ca:11:5f:03:e8:d6:7e:c8:6b:25:2e:93:97:ac:7a:0b:6c:
         76:68:21:6f:08:93:f6:43:5e:6b:8c:e3:0a:37:4d:71:35:88:
         25:07:d5:48:cc:6a:06:39:66:48:4f:04:ad:81:d0:84:74:e2:
         73:34:0e:2a:ac:3f:9b:f4:ec:b7:36:68:69:dd:1f:6b:c6:9d:
         e8:13:5c:0f:8c:2a:ed:cd:ba:0d:3c:fb:8e:6f:fa:67:6f:c4:
         3e:e4:93:c5:d8:9a:bb:0e:6f:cf:b2:69:78:5b:4e:3b:e0:8a:
         f6:2a:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:37:41 2026 by rpki-client