Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa
File:                     18307d49-fa73-3f26-966c-cec9e529ba9c.roa (raw, json)
Hash identifier:          ahSvDJHf/yIJZRjsiDfnQEMi/qtssLHBTZHud6EzDXE=
Subject key identifier:   5E:27:96:59:E1:FB:01:67:3D:06:6A:DF:8E:20:3A:00:47:D7:24:02
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DBA3AF658EB94F2574CE76C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        104.23.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f6:58:eb:94:f2:57:4c:e7:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=a5fcf1cf-6f0d-41af-95e2-b5a053fbb64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:c1:6a:bd:0f:9d:27:37:ba:61:5d:e9:a4:
                    01:56:58:e7:75:af:d1:f7:61:88:b4:ef:02:e6:73:
                    5d:f2:90:d8:c2:af:04:cf:50:89:32:27:e2:71:00:
                    9b:e3:ec:d6:a1:a9:41:33:9e:90:8d:1b:4d:a5:ba:
                    1c:cc:c8:f7:50:31:8e:67:ee:c0:bc:4a:bc:74:25:
                    53:63:77:bc:fb:8c:42:23:a3:98:5f:3d:13:8d:8a:
                    71:ad:ad:33:69:80:31:3f:1c:0f:13:78:b5:38:b5:
                    e4:bb:8b:5c:c8:9f:34:c4:c3:cc:f0:e2:79:a1:0a:
                    c7:87:6a:0b:d7:8c:25:8e:a1:1c:a8:b1:5f:a5:98:
                    f6:ca:dd:16:9c:19:8d:13:8d:de:cd:d1:f0:fd:48:
                    ab:cb:8a:68:19:4e:fe:9f:cf:55:3d:ab:c6:b4:bb:
                    7f:30:d4:a4:aa:d9:b0:04:cf:7a:51:21:58:4f:db:
                    94:ee:43:1e:72:d4:27:a6:24:eb:3d:15:4c:94:e8:
                    73:66:ff:86:dd:0e:c0:e0:ee:5d:2e:3c:bc:6c:26:
                    37:4b:c8:c5:1e:55:09:86:4e:ef:55:02:f2:2f:12:
                    bb:d5:28:5a:25:d5:55:36:35:55:46:f1:d7:33:3c:
                    7b:ca:d1:8b:4f:17:8f:e0:97:ca:e8:7f:27:4c:88:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:27:96:59:E1:FB:01:67:3D:06:6A:DF:8E:20:3A:00:47:D7:24:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:be:13:52:f7:50:b9:9e:c6:4c:2d:0c:c4:6b:45:3d:6e:5f:
         d6:88:5a:31:03:6b:3e:8e:e5:a8:99:92:bc:b5:d8:c1:df:c5:
         cb:9a:eb:79:ca:db:78:90:55:e3:63:9e:93:de:3e:a6:14:15:
         d3:ef:52:24:a7:39:47:18:17:1f:57:fc:09:dd:6f:cc:1a:8b:
         3e:2c:3f:3e:ab:4e:89:f5:d0:b9:0a:3d:9a:94:7a:ba:f3:1a:
         6d:69:61:f5:93:fe:c4:75:bd:f7:7b:e3:e8:ac:64:0e:91:b8:
         87:80:e5:ad:57:e5:d4:d5:64:38:cf:41:0e:b5:ca:3b:0f:aa:
         0b:77:3e:db:3b:8a:26:de:f3:7f:16:e8:b8:2f:02:0f:c5:3f:
         98:d5:50:15:9f:7d:6e:04:3c:8a:6d:69:a4:41:be:9b:b0:aa:
         e6:bc:7c:94:58:c3:ab:93:63:6b:9e:48:3a:5f:31:09:3f:9f:
         bc:ee:2d:5c:84:88:12:7f:dd:23:f8:a1:24:b2:b2:72:fe:75:
         16:ad:3c:53:a2:83:94:f8:5e:44:06:05:c2:6f:20:3f:13:01:
         15:70:7f:ab:fb:33:af:55:5c:a4:55:7d:8a:64:69:38:19:32:
         3e:ae:4f:47:2b:8a:f0:ba:d6:3b:dc:27:0c:57:08:77:78:79:
         70:b8:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:52 2026 by rpki-client