Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa
File:                     5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa (raw, json)
Hash identifier:          oSsEvJQXIrtod9/eZmJ0mquMlKJgZu7m1UPrqLiqT3Q=
Subject key identifier:   35:5D:6C:B8:82:C6:8D:34:E0:A1:BE:38:42:ED:4E:AE:4E:33:10:13
Certificate issuer:       /CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
Certificate serial:       010D0C9F4328584F63F812AA3E0137B0F0957D80
Authority key identifier: 3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     55066
IP address blocks:        104.194.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:12:aa:3e:01:37:b0:f0:95:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=9c8d3127-230d-48ed-8925-afabc9e51fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:e7:16:4a:04:25:81:a5:67:c1:0f:e5:0e:
                    27:fe:68:03:6c:f9:ea:9a:b4:8a:f7:fe:9c:38:a5:
                    ec:f8:1e:aa:df:ec:72:33:5b:a2:a3:5b:a4:2c:01:
                    6b:2b:ab:07:24:24:36:cb:5f:b3:12:35:7e:d5:ef:
                    52:cb:a5:6c:ad:90:05:15:05:6f:42:02:1c:88:f9:
                    c8:d3:fe:f2:68:cb:1a:ce:f0:17:f5:b4:9f:20:ad:
                    68:65:75:68:b2:d2:91:f5:8e:45:07:0c:20:cb:c3:
                    97:b6:0b:53:3b:95:bf:e5:42:a7:a6:93:a0:c9:e8:
                    e2:ef:5e:62:89:72:3c:b6:bd:23:d9:83:49:88:ef:
                    32:be:93:e9:7e:5a:e2:ef:f9:c3:c9:a6:df:c6:cd:
                    d8:9a:94:46:ce:33:5b:31:16:7b:4f:3f:fb:2f:94:
                    50:a7:cb:c2:09:98:0b:6a:8d:9f:22:c0:46:bf:12:
                    76:37:c7:44:78:0e:54:ce:6a:0f:2e:b7:25:32:48:
                    c5:ab:a9:4e:fd:d5:45:85:ee:aa:d3:ec:9c:40:11:
                    6b:5b:5c:f4:64:a6:2b:a2:b0:67:6a:64:87:b7:58:
                    b5:bf:65:32:65:0f:65:22:9f:f0:aa:ad:1a:01:3c:
                    bd:4a:cd:6d:31:98:16:f8:5d:2c:20:b4:67:11:f7:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:6C:B8:82:C6:8D:34:E0:A1:BE:38:42:ED:4E:AE:4E:33:10:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5547a980-ddde-35ac-93e9-2ec1b1d6570d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl

            X509v3 Authority Key Identifier:
                keyid:3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:1a:94:70:4b:a3:a8:eb:e0:f8:fb:bd:10:b6:4d:19:4d:c2:
         b7:e1:f2:1f:73:7c:a7:92:23:65:8d:ea:74:a4:95:8d:b3:35:
         65:62:fd:1d:79:46:61:5a:61:6c:85:05:f5:02:0e:02:ed:c3:
         c0:ca:fd:67:93:0d:70:f6:b4:cc:52:bb:41:7c:4e:33:f1:fb:
         09:b8:17:fc:a3:18:e6:cc:ad:52:2e:11:d8:5a:bd:be:b8:a9:
         e4:b5:20:a0:f3:4a:6a:bb:9a:24:9f:e8:46:79:1a:79:ab:0d:
         ad:b6:ad:b1:3b:17:08:14:51:19:1e:07:de:07:a0:6e:07:0e:
         fa:87:64:93:53:25:42:53:05:76:64:99:77:d1:e8:57:6e:11:
         53:cc:63:f7:4a:e5:2c:2b:f6:e9:72:4f:dd:ca:9b:24:76:fc:
         5e:6a:06:fc:66:e3:96:8c:da:fe:62:52:70:73:3c:5e:d3:ce:
         34:59:0f:93:fc:9d:78:b7:ea:71:91:4d:19:51:6f:15:e2:ee:
         03:11:6f:c9:95:28:b7:1c:22:59:42:aa:0c:c7:02:29:78:a3:
         f9:39:56:14:49:9c:98:60:d1:c6:37:42:be:f9:a8:c9:94:29:
         ee:bd:24:5f:59:d2:b7:38:0d:67:69:49:3c:71:de:98:88:db:
         07:8e:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:29:11 2026 by rpki-client