Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ea9fd10-2630-35d0-b9fc-6ed1da1000bd.roa
File:                     1ea9fd10-2630-35d0-b9fc-6ed1da1000bd.roa (raw, json)
Hash identifier:          oefCKlbRW5KmxdZ58P/Cn5zlz/6CACTmUxrgdF91TkU=
Subject key identifier:   8D:15:B2:72:AF:80:C9:62:23:1C:26:C6:08:A6:D9:3D:4A:01:7C:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DCF2AFF2166ACB46274670A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ea9fd10-2630-35d0-b9fc-6ed1da1000bd.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        104.23.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2a:ff:21:66:ac:b4:62:74:67:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=c4f57a17-6ada-4516-972b-9d777caccaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:b6:58:2a:cf:94:b1:6b:55:8d:57:f7:37:
                    31:86:d6:19:f1:ce:d5:d4:ba:2c:4f:4e:f1:a0:f1:
                    36:62:71:e0:78:7e:bd:a4:9c:e8:d1:5f:54:b4:e3:
                    32:3b:00:77:78:31:eb:2a:1f:71:73:a5:f0:43:47:
                    da:c4:c6:3d:75:f8:3a:72:40:c0:89:9d:4e:02:fc:
                    92:39:b5:6e:de:42:58:24:06:cd:30:dd:fa:f5:a0:
                    d0:f3:2a:bb:f7:ae:19:91:37:e3:2b:b6:f7:2b:54:
                    26:1c:25:bc:b1:eb:d6:73:03:51:79:fc:f4:77:03:
                    af:99:f3:dd:a0:4e:8c:c5:25:f2:61:81:c1:fb:2b:
                    15:2d:5c:1e:59:f9:87:20:30:bf:f0:a3:c4:4c:58:
                    17:fd:e6:6e:cb:14:a7:cf:e1:ed:76:3a:44:61:bd:
                    9d:d6:fc:b4:3d:fb:7a:5c:03:58:e5:d0:00:2a:d9:
                    6a:04:fc:37:90:34:4f:14:15:16:12:74:92:3a:60:
                    d1:85:e8:b4:cb:ea:20:48:25:34:73:f0:63:2e:27:
                    4e:bc:d1:b7:d7:81:9d:de:a0:ba:30:ea:e5:48:85:
                    50:07:11:90:9b:9f:be:51:33:a1:f2:d0:d4:1f:94:
                    e9:13:8d:f5:85:92:5b:ae:94:1c:38:83:d4:cf:c6:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:B2:72:AF:80:C9:62:23:1C:26:C6:08:A6:D9:3D:4A:01:7C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ea9fd10-2630-35d0-b9fc-6ed1da1000bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:45:0d:5b:7c:c2:e9:ce:bc:9f:17:cf:1d:60:b3:d9:ea:32:
         55:a5:67:43:6a:68:08:81:f2:bb:40:f6:98:fd:bc:b9:8f:46:
         7b:50:cf:6b:61:3e:68:12:5e:8e:20:f5:29:7a:93:08:78:a3:
         29:42:44:41:5f:11:b1:80:63:f4:84:b2:ac:1b:9c:71:05:b9:
         14:f1:6b:6b:42:b7:f9:54:ce:61:0a:1e:31:0c:35:54:40:34:
         55:6a:bb:87:6d:af:d3:4d:d8:e9:56:88:db:1c:78:5d:4f:86:
         f2:fe:db:b5:03:31:53:2d:8b:19:68:cc:03:dd:6b:a0:bc:a6:
         d6:29:14:07:ba:45:33:10:83:a8:17:01:80:e3:7b:ee:08:0e:
         a5:d5:6b:ed:05:26:14:84:e9:8a:42:d9:36:12:9b:06:4d:99:
         99:40:29:ff:b7:8d:0e:51:4b:3c:ec:bc:18:3f:1f:a0:c1:c5:
         08:cf:20:25:0b:7e:af:a3:20:ac:fd:4d:e4:f2:72:a5:79:dc:
         71:44:63:ba:2e:b3:71:43:02:bf:1c:34:7f:a6:11:ac:38:4c:
         cd:9e:5c:30:33:e9:28:38:fd:45:5d:f5:03:dd:f4:16:14:f6:
         34:02:5b:c2:62:5c:40:7c:ac:2f:6c:8e:39:1a:b0:81:96:b1:
         40:3c:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:16 2026 by rpki-client