Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/350857a4-dcd6-3b35-9d3e-d4b3d6eacf11.roa
File:                     350857a4-dcd6-3b35-9d3e-d4b3d6eacf11.roa (raw, json)
Hash identifier:          7Szj6litS+NleXAaBYcSFzE73GgHpbw10WImEZVVn9Y=
Subject key identifier:   5B:76:E5:77:FF:E9:37:1C:1D:FD:56:50:5D:CD:EB:F7:53:25:EF:99
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F43DD307F6EF94C2B89F8D780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/350857a4-dcd6-3b35-9d3e-d4b3d6eacf11.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        104.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:30:7f:6e:f9:4c:2b:89:f8:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=4c83d97c-08b8-430b-b466-8bdb612f7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:0d:e0:5c:e0:2b:82:39:c4:2f:df:e0:8e:
                    c7:74:9f:81:13:81:dc:b5:36:68:37:c2:5f:55:ec:
                    e2:8b:89:c1:92:6d:6d:53:fc:93:32:9a:ef:5f:a9:
                    7a:4c:09:ee:8c:61:9e:22:0a:24:33:0d:57:91:23:
                    fb:c5:02:64:a0:59:58:ea:56:26:f9:e8:5a:f5:f3:
                    e1:f9:87:c3:fd:5b:ef:1e:2c:aa:55:90:74:88:09:
                    91:22:64:42:68:9f:df:40:12:2d:7e:8e:7b:75:45:
                    04:ff:02:f8:84:55:8d:f3:b0:90:ac:83:62:d2:fd:
                    9d:c4:17:6b:a1:c2:b6:e6:d0:5c:1b:26:06:a6:62:
                    bb:06:19:fe:35:62:4e:ec:42:87:e8:7c:a4:39:a2:
                    9b:ec:66:b1:69:f7:58:c0:72:64:03:7a:64:41:e6:
                    8e:94:16:1e:26:08:46:56:a5:3b:6e:a1:0c:ca:0e:
                    19:f7:e5:2f:39:ab:a7:06:55:75:66:24:7f:4b:28:
                    07:1b:97:0c:76:b4:98:b5:d3:c2:65:86:f4:32:8c:
                    bc:19:95:bd:0c:f9:8e:31:35:7f:e7:a5:1d:29:02:
                    5d:76:35:b8:ba:2c:fe:93:c5:86:10:ff:a3:8c:40:
                    b2:ed:7d:2a:5d:f9:07:00:cc:66:31:d4:73:c5:20:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:E5:77:FF:E9:37:1C:1D:FD:56:50:5D:CD:EB:F7:53:25:EF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/350857a4-dcd6-3b35-9d3e-d4b3d6eacf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:8a:37:23:ed:56:cf:c5:79:67:5e:ef:c6:bc:8c:ed:94:
         b2:ea:54:bd:a6:18:6b:23:30:94:be:39:71:b8:06:31:ee:62:
         2a:ec:aa:b8:e1:d6:36:64:71:d4:8f:2a:5e:43:82:53:27:7c:
         7c:d7:82:35:ba:c2:16:c7:0c:4d:9b:e7:c8:f1:b3:eb:38:e5:
         51:98:37:c0:75:24:ae:a1:7b:4e:ab:8d:52:8f:c2:c5:ba:c4:
         b6:0c:a8:84:ac:88:01:6e:a8:63:08:be:10:9b:d6:ba:34:54:
         d6:6e:92:9d:94:33:d7:ae:9b:6f:d9:72:4c:62:df:17:c9:0e:
         c5:22:e7:76:42:d5:21:c9:ad:03:bf:5c:f4:da:a6:e2:f0:47:
         ac:88:7d:25:56:a1:23:11:60:6e:c2:95:2d:a6:cd:10:fa:e1:
         09:be:11:64:77:c3:8b:91:46:13:ef:49:55:63:21:d2:57:83:
         cc:08:f6:fd:5a:a6:d1:bc:79:94:a8:87:f9:16:93:d6:08:fb:
         01:47:71:57:f1:74:8a:32:bf:93:ca:9c:83:f2:29:ec:f2:fe:
         5f:cc:b8:da:36:42:db:0d:b3:fc:95:7f:84:d0:00:35:92:23:
         cc:d2:3e:a4:6f:2c:d0:ff:be:e4:00:87:e4:77:d4:5a:03:30:
         c5:bf:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:52 2026 by rpki-client