Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
File:                     8a7366dd-e22b-3889-8006-d4eb02fd6707.roa (raw, json)
Hash identifier:          n6LvjpgLT4PEzVtDVFPdA5EfDWn1aD6P2wvaVonrGsU=
Subject key identifier:   2C:C4:09:98:FB:5C:E2:E4:45:ED:79:E6:08:FE:26:13:9B:B7:02:AE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824A19D761AFB3E5D2D7DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.31.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a1:9d:76:1a:fb:3e:5d:2d:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=94b7804b-73eb-4924-b600-9dc574f83cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:67:50:5b:df:c7:e4:a1:31:3b:b7:1c:55:
                    7a:2a:e5:13:d3:72:5c:a9:f7:23:b2:ad:bd:50:65:
                    3a:8e:c2:dc:1e:5f:e4:8b:59:64:53:4a:fa:b9:c8:
                    d5:59:e3:c5:dd:a4:8d:8d:65:17:9c:58:ae:49:85:
                    c6:26:30:d8:8c:7f:ca:17:6b:d9:db:44:99:de:bd:
                    82:d1:9d:7e:ff:f3:ea:c3:45:b2:aa:69:59:d9:2d:
                    8b:39:63:a8:a6:f6:58:ba:6f:4e:01:c9:04:3c:9b:
                    73:d3:04:ac:d0:df:8e:8e:c8:a6:5e:39:a4:ed:d2:
                    86:06:ce:18:2b:d0:96:14:1e:0c:74:20:b2:86:cd:
                    b4:1a:3b:cb:d7:97:f1:7b:fb:66:2f:4c:05:49:dc:
                    7c:e4:a9:51:27:f5:15:e7:ba:31:36:f7:e7:5a:34:
                    92:66:c3:84:d6:27:7f:41:dc:e6:5d:0c:1a:0f:4d:
                    bc:35:28:0d:c4:03:63:9e:c0:f2:66:64:fc:5b:6a:
                    d2:67:27:5c:8a:f9:87:70:fa:e5:f4:c9:8d:dd:18:
                    e2:96:57:5a:2e:42:e9:76:12:5a:3b:6c:41:8d:7b:
                    58:29:9e:89:40:99:69:25:a4:d3:33:74:c6:af:d9:
                    c7:e4:67:da:80:ed:0f:25:93:eb:27:9b:1b:8d:9a:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C4:09:98:FB:5C:E2:E4:45:ED:79:E6:08:FE:26:13:9B:B7:02:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a9:71:41:14:2a:c7:20:e6:17:f5:72:2a:fb:75:eb:61:d2:
         98:3f:37:00:96:66:12:7c:d9:1d:5f:89:80:14:5e:91:fa:bd:
         75:d8:66:68:55:e4:be:04:63:2e:cc:ad:c6:02:af:a4:22:eb:
         4c:86:89:37:d7:3c:f2:40:bd:22:4c:29:27:47:e9:2f:a6:2a:
         6b:09:e0:5b:b6:df:20:05:48:70:e9:1b:cc:d6:e7:35:c6:04:
         cb:20:1c:d8:9a:ac:82:b3:ee:ea:a8:88:1b:7e:b2:cc:2a:15:
         17:30:80:0b:a6:0f:62:8d:4c:34:6e:32:46:f4:df:f8:a5:20:
         da:f3:0b:a6:ef:ca:bd:94:68:2b:5f:11:fe:42:5c:96:c4:da:
         89:38:a6:da:2a:8e:17:cb:42:e9:ce:7a:00:ef:b6:29:16:8f:
         da:8e:c1:55:07:b9:26:4d:34:74:d0:4f:0f:51:f0:26:8f:84:
         23:3f:2b:61:2d:99:cd:5d:1b:b9:ca:b7:80:7c:85:31:35:c8:
         12:aa:78:4e:22:c3:9f:3d:e7:54:24:a4:f5:92:c6:3a:e8:ae:
         f2:5d:55:b8:c0:2b:17:8d:fc:5e:3a:91:12:05:c9:8f:8b:1f:
         67:b3:70:fa:ab:8a:ad:8f:75:a1:42:e0:aa:f0:35:3a:c8:48:
         16:b1:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:33:28 2026 by rpki-client