Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa
File:                     ea531581-8c50-3d46-ab67-9ccc9a438885.roa (raw, json)
Hash identifier:          Uc8vfTH2LUWkh1gFCifDCLCbS1XrbQb2f9+GvaJD6c4=
Subject key identifier:   28:F3:F1:A2:DB:86:E6:FD:60:AC:7E:7D:4D:F6:09:05:F0:6D:3C:2D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F498C10EDE1F0DF4DC11A6E3E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.23.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:10:ed:e1:f0:df:4d:c1:1a:6e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=091f51d8-49b3-4f8c-a102-98d143e2ccf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:aa:46:a9:23:e2:c1:ad:06:84:fa:5a:00:
                    cd:84:14:1d:db:6c:e1:60:24:5a:c1:e2:40:30:21:
                    bc:6f:ac:87:86:97:7c:76:a5:fb:cd:ac:a3:ca:b0:
                    00:70:a9:05:4f:11:d2:7a:99:9e:33:de:ae:9a:ce:
                    74:94:53:bc:42:0e:53:2f:36:2a:c7:af:8a:08:0b:
                    75:69:4a:11:7f:d7:e3:1e:ee:9d:74:6c:6d:45:d5:
                    cd:21:54:b9:1c:fa:88:2a:68:25:10:06:23:3c:16:
                    07:60:5f:2d:e0:0f:09:0a:64:31:a5:5f:dc:3d:11:
                    bf:2b:9f:2a:ec:cf:7e:52:e4:90:5d:39:b7:e4:da:
                    28:de:c9:28:e5:8a:da:fd:5e:08:4d:fe:e6:11:34:
                    cc:4c:84:cd:8d:32:ad:d0:69:bb:3d:9f:c4:06:d8:
                    55:87:f5:d3:ee:c7:22:70:95:37:a2:a8:4a:b0:d2:
                    ec:a2:a5:36:96:04:e2:f7:f6:5a:de:c0:1c:e0:ff:
                    50:92:4b:4f:41:c3:ba:a8:8e:a3:f4:d0:f9:ae:9e:
                    41:ef:03:41:6c:0b:7f:f4:d3:b2:6a:a1:49:3f:0a:
                    52:2a:7d:97:2d:2e:9b:a7:7f:48:fe:a3:c3:9f:2b:
                    5e:d1:06:c4:15:9b:7d:3a:81:7d:1d:8e:75:2e:67:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:F1:A2:DB:86:E6:FD:60:AC:7E:7D:4D:F6:09:05:F0:6D:3C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:e4:20:7e:41:d4:29:49:85:78:9f:02:73:dc:f3:53:a7:
         24:e6:c6:77:b9:f9:9f:90:60:3d:97:6d:0c:f7:c6:78:41:76:
         0e:c5:9d:77:8a:75:3a:4e:97:90:2f:f9:a5:a5:a9:5a:50:4d:
         4d:ae:ac:a8:9b:15:bd:58:3c:6d:a8:62:b2:10:13:0b:46:9c:
         6e:8f:5b:4a:be:ac:01:fe:a1:71:a1:57:6e:0b:9e:63:ea:da:
         6d:93:08:72:35:6a:24:51:a9:52:bc:11:b8:51:bf:4f:8e:60:
         47:f2:0a:eb:d1:ab:a8:82:46:89:08:ab:95:a9:22:7a:d8:6f:
         d1:aa:6a:e0:3a:8f:b4:03:3a:ad:7d:04:3f:76:3f:37:05:3e:
         6c:c3:37:d6:b0:52:e1:d4:0e:eb:05:c0:c4:00:ed:14:e3:b7:
         db:3a:5a:f9:ae:96:65:82:83:cf:89:0a:4c:a7:d4:45:0d:b1:
         c1:73:6e:4b:2b:0a:b2:8f:34:46:98:47:cb:c0:f3:b7:a7:e5:
         c6:4b:12:24:33:56:a3:80:59:12:4a:6b:22:70:02:c5:de:59:
         7a:65:5b:c6:25:32:6d:e2:b4:37:31:4e:34:ac:bf:3a:86:eb:
         dc:cc:5d:2d:d4:d0:3e:22:b4:c2:da:cd:97:f9:b4:05:40:96:
         26:98:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:06:52 2026 by rpki-client