Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04d4f0b4-36f9-36b5-89d9-aafa3454c961.roa
File:                     04d4f0b4-36f9-36b5-89d9-aafa3454c961.roa (raw, json)
Hash identifier:          +7pJIIZ8fzeb5dZqGWR12uTo+Mkf+yF878r/kv6BVKw=
Subject key identifier:   40:C1:22:75:F0:1B:DC:AC:46:B1:36:44:E4:5C:F3:B7:A5:59:2E:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DB4A5B6B12A0F2C6AC9521F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04d4f0b4-36f9-36b5-89d9-aafa3454c961.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        104.22.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b6:b1:2a:0f:2c:6a:c9:52:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=7db2277e-6b70-4898-8b44-b27f546b0d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:82:7f:1f:81:47:5d:29:21:37:79:b1:73:
                    25:50:1f:6f:ec:ba:e6:db:bb:27:f2:cc:82:ef:87:
                    df:22:c5:a8:47:0e:5e:4f:f3:68:21:b8:e1:f2:16:
                    dc:a7:01:b6:b5:59:79:dc:f9:ad:66:0d:e8:ad:bf:
                    77:78:b5:11:0e:d5:a6:61:37:d0:c7:0a:09:61:b1:
                    8f:bd:38:06:13:2c:28:1b:c3:9d:3c:be:7c:1e:b0:
                    a2:05:f2:cc:31:e2:28:cd:bd:c8:40:95:bd:bf:6c:
                    45:6d:29:69:1e:1f:87:45:ed:d6:78:0a:8d:6e:4f:
                    d7:62:fe:4f:38:40:04:bb:e6:6c:09:56:d9:3a:e1:
                    01:cd:bb:ad:27:32:27:a9:49:ac:e9:ee:be:a8:e0:
                    64:64:d5:c4:5a:c8:c7:06:d0:e8:66:cc:ac:12:23:
                    23:54:fe:32:09:9e:1f:4a:85:02:43:f9:1f:d8:c3:
                    a6:16:66:18:68:2e:e2:a3:7d:f1:04:36:f6:28:59:
                    1b:30:11:57:e6:19:7a:50:c0:81:10:f2:00:14:37:
                    a9:93:9d:38:06:47:2f:ac:2d:f0:3b:f2:23:c4:77:
                    fa:c4:57:55:50:d1:1a:85:a0:e0:ee:19:22:2a:17:
                    3c:1f:02:e3:bd:ce:c4:7b:fd:e3:d5:68:9d:d6:58:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:22:75:F0:1B:DC:AC:46:B1:36:44:E4:5C:F3:B7:A5:59:2E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04d4f0b4-36f9-36b5-89d9-aafa3454c961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:d5:8e:cc:a1:31:13:79:d8:5c:96:69:68:e6:e4:de:65:
         6e:38:38:1d:b4:7f:f9:03:06:4c:8d:5c:9c:94:40:6c:3c:0b:
         eb:ec:07:93:cb:d0:9b:b8:a4:49:82:5d:16:ff:ad:75:49:d9:
         a6:49:0f:26:84:2c:3d:c3:e9:09:b9:01:e7:20:63:26:01:76:
         be:db:95:dd:5f:47:6e:9b:f1:fa:0e:cf:33:16:95:7b:5f:d6:
         31:1a:88:62:4d:d5:c2:40:51:69:7b:d7:75:8c:0b:f9:2c:cd:
         0a:83:17:76:79:c7:f0:a1:e7:69:80:33:b0:8d:0d:43:d4:bd:
         aa:f5:23:42:a2:86:27:6d:d2:5d:43:74:e7:c8:db:c6:25:0e:
         65:a0:31:e7:42:35:97:79:80:76:d8:ae:76:0f:30:38:7d:cc:
         2c:3c:1d:64:b3:27:cd:96:f0:9e:01:cd:a1:1c:93:f8:4a:68:
         01:51:4f:e0:db:69:5e:9f:76:e7:97:59:30:75:6e:b7:10:af:
         e2:6a:44:bd:59:5f:86:58:e7:bf:2f:71:8e:eb:59:08:a7:f8:
         22:f9:a1:05:79:2c:73:18:84:14:c7:57:1d:27:72:b7:1e:a9:
         61:82:36:54:05:6c:ac:c5:43:e6:ee:d0:f3:91:20:92:43:58:
         9a:45:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:45 2026 by rpki-client