Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
File:                     d0d5c255-62d5-3841-a89f-c97638122db1.roa (raw, json)
Hash identifier:          Idx535Zpmsg3JtZdYgXDrUyMmAgNxSPZcIfGs3ebKRY=
Subject key identifier:   7C:B5:04:2E:CF:90:F2:05:BE:6F:3B:CA:DF:0C:B0:D8:B9:54:59:1E
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584D869548E2C74D39E943F33600
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     397373
IP address blocks:        104.152.222.0/23 maxlen: 24
                          104.255.168.0/21 maxlen: 24
                          155.254.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:48:e2:c7:4d:39:e9:43:f3:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=fbc798e0-917c-48a6-b91e-49bb35adf0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:48:59:1c:57:86:c1:8d:5b:d9:ee:c4:88:
                    51:b8:d1:6b:65:5b:34:6d:d6:00:18:3f:ae:d7:10:
                    1b:d5:63:b5:53:c7:94:c6:21:51:ce:bb:f1:22:a0:
                    6a:ef:79:bf:96:58:6a:79:8c:47:53:3e:30:ca:75:
                    b8:16:9a:45:58:b0:ec:ee:c6:14:95:c3:7c:3d:b1:
                    fa:4b:24:0b:e0:05:eb:3d:11:0a:ee:7b:f2:78:9e:
                    c0:bc:1d:b6:f9:ae:aa:43:68:16:b7:ee:4a:3e:51:
                    da:db:d4:fe:c2:5c:2a:88:0f:de:ca:c7:f5:ad:38:
                    a0:68:41:7a:b5:90:cb:35:da:8a:e3:10:fc:d5:11:
                    76:a3:74:0a:d9:4d:a9:6e:09:88:ea:ff:38:20:20:
                    cc:ce:3d:01:cd:46:60:e5:72:a5:ed:23:9a:6a:2d:
                    0d:d9:4a:6f:a0:4e:87:2a:74:ea:d4:1b:28:51:7d:
                    58:e6:4f:09:55:15:69:6d:78:cc:6c:d3:01:c2:5e:
                    43:10:39:11:53:57:af:0c:d4:ed:71:fa:9d:f2:0d:
                    54:16:04:cc:4a:a7:06:7e:71:e0:10:87:15:36:dc:
                    2e:00:1d:0d:0d:2b:75:df:aa:8f:e5:22:c0:c2:a1:
                    f4:1b:df:bb:2a:b3:27:10:b0:0f:4f:24:60:e2:70:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B5:04:2E:CF:90:F2:05:BE:6F:3B:CA:DF:0C:B0:D8:B9:54:59:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.222.0/23
                  104.255.168.0/21
                  155.254.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:2d:c8:06:95:76:97:38:cc:e2:1a:c5:44:90:89:09:c2:
         40:13:47:cf:21:4e:38:a0:3c:cf:af:d9:76:56:d1:75:ce:ff:
         8e:ff:f1:83:15:61:7a:3f:a9:12:85:62:98:20:e0:c0:74:87:
         73:50:e8:6a:d7:7d:b3:76:5b:a6:a5:9a:f1:fe:05:88:ee:ad:
         ca:dc:45:08:a3:81:69:9c:5a:32:ea:8b:5b:11:56:51:b8:51:
         d5:1d:64:a0:c4:93:5a:7d:a6:f8:f7:37:1a:58:9f:e6:a7:9d:
         a7:98:f7:34:d8:64:d7:36:f4:a2:4e:69:ed:11:14:68:59:fc:
         6c:1b:86:36:de:2d:2e:ae:83:83:ce:24:4b:ea:ce:d6:5e:40:
         19:31:e6:80:fc:dd:24:c3:1c:af:f8:80:b8:f5:9f:7f:58:94:
         12:a0:04:23:40:84:b1:09:e8:e8:8b:19:fb:32:9d:31:27:73:
         e9:ae:75:fb:04:72:15:e3:f8:e6:8d:3f:e9:92:8f:d7:4d:7a:
         15:07:70:9f:90:00:3c:1a:4b:53:5c:1e:a3:12:6d:8b:54:7b:
         16:79:25:5a:9b:50:a4:55:5f:35:37:56:19:e6:e8:0a:85:5e:
         58:7d:d3:b2:0b:b6:af:39:ed:f2:89:32:55:15:bb:ba:6f:01:
         3f:c9:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:47 2026 by rpki-client