Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/9303fea7-f90f-3344-ab13-9ff8632c6daf.roa
File:                     9303fea7-f90f-3344-ab13-9ff8632c6daf.roa (raw, json)
Hash identifier:          2tnewG27ArEhzxUKXvxWYG94SSi9HcndRxFK+uhslv0=
Subject key identifier:   5A:F9:BD:AD:64:54:30:88:D2:14:18:DC:86:5F:51:E4:A1:90:A5:06
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F34E24E6C4E232E72D85AF480
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/9303fea7-f90f-3344-ab13-9ff8632c6daf.roa
Signing time:             Thu 17 Sep 2026 16:13:28 +0000
ROA not before:           Thu 17 Sep 2026 16:13:28 +0000
ROA not after:            Wed 16 Dec 2026 17:13:28 +0000
asID:                     22611
IP address blocks:        104.244.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:e2:4e:6c:4e:23:2e:72:d8:5a:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 17 16:13:28 2026 GMT
            Not After : Dec 16 17:13:28 2026 GMT
        Subject: CN=a8649233-5397-499d-8ef6-2d475b013eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:7f:72:04:e2:6d:56:e3:97:ac:fd:c6:4f:
                    fe:be:fd:e3:94:a3:54:00:78:3e:af:6d:61:84:01:
                    c6:aa:77:4c:3d:64:46:b0:0c:43:39:2a:63:4c:a0:
                    ca:06:24:25:4b:da:c4:e0:c8:2a:c5:55:34:cc:ae:
                    84:34:1b:9c:04:e9:cd:67:e0:b5:44:c2:1c:ec:81:
                    35:dc:0f:c1:5c:29:8c:4a:e6:90:7e:c3:9c:8c:58:
                    64:83:77:71:06:ba:e0:49:3c:69:ef:1e:27:e5:fb:
                    0f:64:80:55:38:f6:e5:77:ec:ae:89:ec:a8:1f:91:
                    15:94:aa:a1:67:a7:f4:1a:eb:ff:ad:83:1e:46:f8:
                    86:87:93:65:dc:55:79:f8:30:92:b9:17:c5:20:81:
                    47:67:94:21:76:af:d1:ec:04:52:b1:84:00:b8:97:
                    80:be:65:f8:85:1b:48:0a:75:6e:d6:05:94:46:20:
                    c1:75:4d:1f:f7:5b:fa:09:77:fd:fa:06:7a:bf:a4:
                    a2:4b:1f:91:47:51:9f:df:6f:e1:d2:82:77:09:65:
                    a5:d5:78:c4:2d:53:ac:79:dc:1c:87:2b:58:97:d1:
                    a5:ef:65:6f:69:91:98:29:cd:47:2d:9c:2e:2a:86:
                    80:33:f5:88:a3:da:01:1c:5e:65:dd:cd:34:9d:10:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:BD:AD:64:54:30:88:D2:14:18:DC:86:5F:51:E4:A1:90:A5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/9303fea7-f90f-3344-ab13-9ff8632c6daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:34:fe:7b:b2:c2:d8:54:51:89:15:49:31:8c:2e:da:1b:
         a9:56:77:e0:28:5d:27:0c:a5:84:8a:de:19:ec:88:4f:6b:87:
         3a:7a:95:36:fd:9a:38:52:03:c6:d3:54:1d:42:5f:56:86:b7:
         b4:a0:17:17:09:74:18:5c:7e:5d:76:11:3e:fd:70:8b:2c:a0:
         bb:3e:d4:73:95:53:a3:af:77:8e:11:bd:23:e0:de:9d:e8:1e:
         f5:c8:16:ca:72:38:66:37:bf:dc:c8:07:a4:1d:b5:df:6f:64:
         70:16:ce:41:3a:3b:fb:ff:21:04:99:4b:a0:ca:de:7d:81:0f:
         2e:1f:7a:ac:a2:f6:4f:55:d1:9d:c4:de:cf:60:01:40:6f:a8:
         e5:0f:f7:9b:66:cf:1c:f0:a4:c9:0f:ab:88:58:c4:8e:6c:f3:
         a2:8b:65:95:ce:b7:a1:3a:5d:9f:ca:c8:8e:3b:de:d7:8b:4c:
         3d:c2:94:6c:60:ac:68:8e:c9:2f:d3:bf:f2:82:2f:99:a9:19:
         cf:6f:7d:c0:64:94:bc:86:4e:e4:60:40:85:0a:18:8b:93:64:
         85:f1:4d:aa:8b:63:46:b3:7e:b5:db:aa:47:cb:62:59:5c:73:
         ba:5a:20:e1:5e:a0:af:dd:c3:31:b2:1d:3f:1e:4c:38:c2:6d:
         7b:ec:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:39:21 2026 by rpki-client