Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa
File:                     c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa (raw, json)
Hash identifier:          D9kAWyElgoora5nUpt0YLAUSyg52OY7zrLFOHaqsV+U=
Subject key identifier:   A9:0B:57:A1:CA:5F:8D:28:75:C7:D2:D5:C6:EB:90:BE:2C:0C:7D:E8
Certificate issuer:       /CN=11763f86-1681-42c2-95da-8df74d7e18ed
Certificate serial:       010D0C9F4328584E253EFEA1ECFA474A622DEE00
Authority key identifier: 31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     3223
IP address blocks:        104.152.44.0/24 maxlen: 24
                          104.152.45.0/24 maxlen: 24
                          104.152.46.0/24 maxlen: 24
                          104.152.47.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fe:a1:ec:fa:47:4a:62:2d:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11763f86-1681-42c2-95da-8df74d7e18ed
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=f2a1a5de-f7bf-438c-bf78-4c52487417b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:90:9a:aa:d0:d7:8d:b5:aa:e9:01:ca:02:
                    24:49:13:cd:f0:8e:7b:ac:a3:d8:91:86:b6:47:8f:
                    bb:91:2e:08:dd:fb:18:44:05:05:94:86:4b:78:0c:
                    cc:27:96:76:99:7f:a5:4b:ab:6b:f1:ea:00:4b:00:
                    6d:34:8d:fe:e7:67:de:ec:d2:25:eb:7a:74:62:83:
                    b2:b3:a0:a2:e1:5c:dc:6f:f3:49:fe:59:d2:da:f6:
                    13:4b:ea:67:8f:5e:ad:8c:32:65:16:d1:19:2b:55:
                    43:a4:f7:40:b2:79:bf:d1:97:ac:3b:13:3b:ac:69:
                    23:3c:ce:ae:49:e4:a2:aa:a4:0a:db:69:67:e1:87:
                    b2:8a:da:8b:fd:ee:7d:c8:30:d8:9a:40:33:4e:02:
                    b1:1d:a8:a3:1f:06:04:5d:a8:41:92:16:52:a8:85:
                    42:00:49:3c:d3:16:f6:85:18:63:99:59:54:c5:77:
                    8e:d6:2e:d4:de:a8:f1:97:28:87:50:4b:03:ae:21:
                    f2:ae:cc:3b:47:31:b3:22:87:80:9f:cd:6c:b6:4f:
                    43:82:81:22:21:06:d9:28:ac:0d:c8:f0:75:f5:2e:
                    50:e3:68:90:6f:02:1e:1a:b7:b1:09:6d:28:59:17:
                    5d:05:fa:8d:6f:44:4f:4e:43:3f:a6:31:61:22:af:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:57:A1:CA:5F:8D:28:75:C7:D2:D5:C6:EB:90:BE:2C:0C:7D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.crl

            X509v3 Authority Key Identifier:
                keyid:31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.44.0-104.152.47.31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:e9:70:19:2a:c9:ec:a1:d2:da:4e:06:01:da:55:63:93:
         53:2e:09:8f:e6:ab:2b:4a:6f:23:70:60:f9:f8:64:86:fa:df:
         d0:df:c7:fc:3c:c7:02:6f:60:24:c6:8e:56:1d:97:6a:2d:3b:
         87:a7:13:d1:93:b3:90:ca:c7:de:a6:13:7b:69:ed:e5:96:07:
         c1:7c:ad:4a:c0:b4:ed:42:ec:4f:95:d7:87:20:8a:f9:6e:d7:
         dc:f1:8c:f1:df:f0:a5:65:1d:85:4d:c0:35:a3:0e:a4:18:94:
         4e:0d:4b:57:13:91:d2:15:10:1d:7c:c4:77:ed:a5:e6:2c:8e:
         78:42:5b:b1:8e:a9:73:33:03:93:91:76:f8:c7:9a:0f:4f:fd:
         ef:0f:1c:35:5c:a7:78:5f:38:f8:03:c1:89:f7:16:5f:e1:ef:
         7f:71:66:51:bb:3c:b5:e3:e8:4b:c5:ac:5c:17:eb:be:38:7f:
         68:4c:3c:26:9c:a5:3b:ab:66:02:64:fc:a3:da:6c:8a:7b:eb:
         7b:79:be:c4:5e:87:0f:bb:20:f1:12:c6:a6:7d:18:67:5a:70:
         12:33:ee:52:79:4b:59:f4:fc:46:84:bb:43:c2:da:f6:41:28:
         2b:4f:a2:71:7f:09:a6:7f:16:d3:cb:d6:64:6b:c7:e2:74:98:
         91:33:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:24 2026 by rpki-client