Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6dce460d-5ea9-36da-98ba-e659920cb995.roa
File:                     6dce460d-5ea9-36da-98ba-e659920cb995.roa (raw, json)
Hash identifier:          YXkE6e2TnXsEtZRxO7YesAvYVpOi2BO2U5pg7F4FK0U=
Subject key identifier:   FD:69:69:D1:90:F9:F0:C4:C2:0D:3D:A8:4F:B1:19:E5:9F:2D:D6:35
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824981095EA5D5462C64A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6dce460d-5ea9-36da-98ba-e659920cb995.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.18.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:98:10:95:ea:5d:54:62:c6:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=07c19d67-1edd-4c36-af90-b5638e593966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:31:13:89:eb:08:1f:15:c2:ca:1f:04:0d:
                    7d:b5:d9:40:96:9c:a0:56:b3:df:5f:14:d3:5e:d8:
                    66:90:48:77:2a:2c:36:ea:17:f4:e3:85:72:53:0a:
                    1e:8e:82:29:9d:56:d1:8c:79:8e:e2:e6:4c:5f:f5:
                    60:13:8e:06:1b:87:6d:bf:e8:2e:79:2a:d3:b0:f7:
                    6c:62:3f:f3:0e:82:84:06:be:77:67:0f:93:ce:88:
                    f0:ac:6c:5b:62:62:15:c6:20:f3:0a:cd:4a:a6:eb:
                    16:0e:f1:52:76:b9:05:42:4f:fd:32:f5:73:b6:e1:
                    22:42:2c:19:24:6d:d2:fe:4d:b6:9e:fc:9d:4a:44:
                    af:4e:96:f0:e4:68:5e:ed:bf:5f:15:19:e9:a6:e7:
                    41:a8:da:f1:be:f5:01:5a:67:ac:bf:49:46:0e:7c:
                    dd:ad:83:3f:83:2c:0e:d6:c0:c8:2e:0a:e7:80:81:
                    92:57:11:01:5b:ca:cf:47:6b:71:46:58:b9:d7:13:
                    59:b8:35:94:fa:0c:10:8e:93:eb:a0:dd:ae:02:7c:
                    36:d4:c8:18:2d:cd:cc:15:64:67:40:97:2e:b2:d9:
                    2b:25:91:f6:54:c6:a4:8b:a3:2d:4e:c1:81:d6:19:
                    2c:dd:ba:40:30:d9:42:c7:74:ac:7b:73:e6:74:cf:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:69:D1:90:F9:F0:C4:C2:0D:3D:A8:4F:B1:19:E5:9F:2D:D6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6dce460d-5ea9-36da-98ba-e659920cb995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:4d:25:93:1a:95:3f:df:58:4f:29:9a:37:6c:c7:eb:7e:
         b5:7b:a0:b2:ff:33:81:0e:10:ba:86:36:af:24:a8:9d:c3:ce:
         42:f2:e7:47:20:08:37:85:d5:61:8e:42:a9:ee:78:ce:e8:af:
         93:c0:51:8e:41:0e:af:0b:2f:49:58:cc:bb:d6:8f:69:50:f1:
         44:6c:48:97:23:dd:68:c3:c1:68:69:5c:f4:31:71:88:31:3e:
         12:8e:20:73:de:5d:fa:a7:93:fa:2d:3f:c7:0b:82:93:f1:63:
         e4:68:fb:87:a9:62:1c:29:46:4d:1d:74:6f:38:03:75:37:2d:
         49:e3:6a:a7:7c:69:0a:8c:97:0a:17:8a:b0:3f:a8:0b:9a:07:
         5c:57:a9:13:79:66:f2:4b:58:48:05:cb:7f:80:7d:a1:34:34:
         92:70:fe:bb:45:17:83:ef:e7:d4:41:23:7a:12:27:4f:f1:76:
         5c:1d:58:73:af:c3:3d:6d:e9:36:9a:7d:b0:9a:74:7a:79:9b:
         5c:7d:97:29:5f:b1:62:a1:d3:81:9b:2a:c9:f4:bc:0f:90:c8:
         86:97:15:2b:0d:3c:52:f7:e6:dc:86:9b:b8:7a:3f:dd:80:bc:
         13:97:27:01:f2:1b:27:eb:8d:26:23:f9:a8:74:c7:dc:b9:cc:
         38:93:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:09 2026 by rpki-client