Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
File:                     d42ae873-ebf2-30f4-b018-8470ff7c2590.roa (raw, json)
Hash identifier:          1RbIEWHFH7hiBrPFB96bza7a38wChruDf77nhO9P2mk=
Subject key identifier:   5C:50:09:FD:4F:12:16:F0:10:40:FD:95:D4:0E:68:6E:47:52:FD:1B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F4986C12D427962038386C180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.30.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c1:2d:42:79:62:03:83:86:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=22ed6059-5b8c-480c-95b2-95ebba9e877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:fd:01:7c:ff:6e:74:92:c4:8d:53:1e:ea:
                    d7:4a:81:14:fb:2d:49:4b:9f:1a:3c:2c:3b:77:66:
                    48:c2:00:5f:6d:d2:0c:f2:de:8c:f5:23:5f:e8:f8:
                    1d:a0:f3:f8:c9:55:1e:a4:77:61:5d:f4:b6:e7:db:
                    b0:29:76:ca:d9:9a:f8:96:4e:dc:79:c3:e1:1b:18:
                    0a:ba:c2:93:40:8f:28:4d:1d:4f:05:06:e3:f7:c9:
                    f6:a6:4a:01:f2:8c:5d:3c:47:94:b9:c3:8b:15:8e:
                    37:b5:5f:5b:bf:37:04:92:aa:aa:31:02:7d:42:26:
                    4b:8e:78:18:8f:3c:17:68:9d:64:13:fb:e3:44:27:
                    c2:8c:cb:e1:b3:8f:68:c2:77:3b:ea:35:79:ca:24:
                    44:7d:25:a3:9e:8b:ad:2d:79:1f:b7:0e:f0:e5:c5:
                    e0:5a:01:2e:55:2b:30:c6:7c:9e:8b:9c:c8:2b:29:
                    4c:d5:f6:ca:09:6e:61:20:31:36:7b:a1:17:19:d0:
                    9b:a7:2b:4b:52:16:d3:d9:18:ff:08:b9:1d:a0:1d:
                    f1:27:d6:97:38:4d:f0:83:bb:81:6d:2a:b8:d6:d7:
                    00:b7:4c:a5:69:aa:5e:dd:ec:5f:dc:4b:52:1d:f6:
                    b7:87:37:c3:5e:3c:12:8a:06:dc:e6:72:4a:7a:ef:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:09:FD:4F:12:16:F0:10:40:FD:95:D4:0E:68:6E:47:52:FD:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d42ae873-ebf2-30f4-b018-8470ff7c2590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:df:98:5e:f8:61:10:71:92:8e:33:63:e3:a2:6d:b2:e4:bc:
         02:09:e4:26:b6:3e:85:00:e6:26:5e:3f:44:bd:ca:77:5b:ba:
         5b:14:0c:2f:e3:44:a9:a3:b1:40:02:4e:35:c7:82:07:91:10:
         39:99:5f:39:45:86:15:30:2f:39:c1:ca:85:b5:44:12:e1:b1:
         c8:a4:d1:6f:ef:1a:ff:b1:0d:e6:f6:17:dc:b1:39:cb:09:07:
         7f:84:da:4e:0e:f9:c9:10:1a:f7:d9:0c:45:6d:14:d7:c3:5b:
         e2:9e:59:b0:dc:af:52:33:6d:ca:b5:c3:ad:4b:d0:5a:14:8a:
         7e:50:29:34:09:5d:e8:80:3f:45:93:a5:a2:de:2f:b9:e4:32:
         74:3e:cc:30:36:b0:1e:cf:d1:3d:4c:39:0d:13:8e:b4:e4:89:
         8c:53:ff:f1:0c:7e:30:99:26:cf:77:9c:71:c8:ef:41:3c:dd:
         25:47:c0:09:87:00:76:f8:a0:82:11:7b:1f:40:bc:db:aa:ea:
         e3:43:94:c9:71:58:1f:0c:67:ac:23:fd:63:bb:1d:4e:2d:ce:
         f4:dd:c6:7b:03:fe:c1:cd:d1:da:d6:1b:bf:37:1e:b4:4a:40:
         95:f3:ff:16:07:cf:f2:fb:67:e8:e3:d4:66:ea:0f:23:84:e5:
         15:17:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:11:31 2026 by rpki-client