Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa
File:                     80a25e7a-1a21-3f44-9f33-a1f575981051.roa (raw, json)
Hash identifier:          +lzQUm8G/jY84mZuzov2jQ1HCHCpXnolSZw2bM0EqeI=
Subject key identifier:   59:16:3F:00:ED:E5:77:99:04:F7:DF:EC:97:73:4F:5A:E3:68:64:42
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824A17B4E4438018EE0E900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.31.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a1:7b:4e:44:38:01:8e:e0:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=be263791-2581-4f17-8a07-b58a4305ded4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:96:ef:e5:08:ce:78:ee:13:36:23:99:62:
                    c4:fc:7e:b8:00:3a:35:0e:f4:2e:6c:94:11:db:96:
                    08:f1:d0:3b:35:d3:32:f1:0c:1f:72:38:8f:d2:94:
                    1d:68:14:89:c6:18:e1:70:88:22:0d:2b:58:4e:8a:
                    28:96:3e:10:48:d7:73:db:44:fa:75:7b:f6:97:7a:
                    70:57:92:bf:00:02:37:f5:23:69:f5:cc:fa:2c:57:
                    28:49:4a:d2:45:5f:15:b8:d6:27:3d:00:a1:14:af:
                    5f:3b:cf:08:86:a6:8d:d7:dd:2a:b9:0b:ab:ea:53:
                    ab:4f:b6:e3:29:71:8b:0a:e2:36:41:0c:4d:e4:fd:
                    31:e5:45:c8:70:07:f2:42:b5:3d:57:f7:56:4b:ce:
                    99:0c:d9:66:42:c1:24:38:b8:60:2d:b6:ad:18:f8:
                    ad:38:18:d2:53:25:c5:e3:6c:08:5c:2f:9d:f7:4b:
                    7b:c6:67:33:af:5b:f3:a9:68:eb:a5:fe:42:b6:7f:
                    12:e6:f6:72:03:12:cb:18:ff:d1:7e:23:31:21:38:
                    85:38:61:2b:77:ec:3c:db:2b:ce:7d:0d:c8:73:27:
                    27:d9:a4:b9:b0:5d:0e:07:7a:aa:13:7d:c8:54:b7:
                    8a:f8:7a:5a:27:ad:fd:50:9a:e5:f9:45:94:73:5d:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:3F:00:ED:E5:77:99:04:F7:DF:EC:97:73:4F:5A:E3:68:64:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80a25e7a-1a21-3f44-9f33-a1f575981051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:30:b7:5c:08:72:aa:8d:b9:0d:5d:08:30:ec:82:46:ee:
         47:f1:13:a8:61:af:34:ae:24:ea:55:75:00:1d:ad:ed:31:0a:
         6f:e9:62:fe:94:a3:34:7f:c7:8f:e0:26:c4:bf:d4:43:68:65:
         41:b0:b7:74:22:e3:b3:78:37:db:01:32:58:72:5e:ea:9e:7a:
         58:b6:24:0b:fd:22:6b:96:08:13:8a:68:99:17:58:8d:0e:89:
         8e:21:f3:6b:fa:cd:0c:16:23:b4:06:c5:70:66:e2:be:02:1d:
         8e:ef:47:e8:52:3c:25:04:51:d7:c1:a8:96:7e:f8:46:25:1d:
         c6:40:48:27:3f:0a:96:da:15:a6:ba:90:95:68:ad:1c:f6:59:
         cd:5a:65:79:e0:88:62:f7:8a:04:73:16:d9:c1:c6:ba:23:29:
         3e:3d:b1:e8:c2:b3:55:8d:04:28:4b:79:d5:a7:90:4e:44:e6:
         8e:4c:93:54:60:01:9b:15:12:bd:e2:d7:51:0c:66:2c:16:a3:
         2f:3a:45:aa:ee:89:a5:34:9a:ba:4a:d0:ef:5e:e0:29:9f:96:
         37:11:07:24:8b:fd:08:3d:08:84:47:37:d4:05:0e:06:0c:d1:
         67:c3:5d:9e:91:fd:0c:f5:a2:70:8d:a8:41:69:2d:d8:38:84:
         8f:fa:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:20 2026 by rpki-client