Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edb3202a-12ea-3500-ab6c-5603fbdf506d.roa
File:                     edb3202a-12ea-3500-ab6c-5603fbdf506d.roa (raw, json)
Hash identifier:          Pue16UV8HYiaHljL23VRZ2vZHtS2BfqcNcodRF/YzRY=
Subject key identifier:   C2:D1:6D:31:47:90:99:B2:A9:FC:81:95:33:9D:DA:10:10:8E:A0:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DD0907204A5F2D42B41B222C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edb3202a-12ea-3500-ab6c-5603fbdf506d.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        104.23.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:72:04:a5:f2:d4:2b:41:b2:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=fb0769b8-239a-40ee-9951-86b5f727bd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:85:00:97:c0:bd:e2:70:8d:36:9a:aa:fb:be:
                    ad:f6:9f:a0:f1:1c:6b:6d:df:b4:ff:ee:9e:0e:37:
                    d5:2c:20:9b:35:57:23:1f:ac:c1:ba:34:46:ab:7a:
                    7d:1c:40:2c:a2:59:fd:cd:97:6c:0b:89:b8:af:2b:
                    95:db:7e:17:78:c1:22:a2:70:68:d4:d3:97:3f:3b:
                    88:62:fa:87:51:ea:df:b7:0a:b2:e8:58:39:4c:71:
                    24:04:17:99:1c:ff:04:9b:1e:32:f7:e9:19:a5:03:
                    4e:72:8f:94:f7:da:75:95:b8:e3:bb:8b:d0:a1:d2:
                    83:3f:23:c1:67:ba:a8:2a:cb:0d:4d:cf:1d:3e:ad:
                    e4:7b:fa:9c:b4:30:b6:cc:88:ad:cc:f6:9e:bd:6d:
                    e7:47:ea:17:32:f3:47:2b:71:0e:c7:bf:ec:40:23:
                    11:11:9d:48:05:9b:3a:e6:70:87:7b:37:78:be:a3:
                    be:0e:1d:5a:2d:02:dd:4d:a1:a0:4f:e3:61:11:1f:
                    38:84:77:16:bb:c6:b2:ee:1a:f0:0f:1c:43:73:bb:
                    1f:79:1e:e6:16:83:b5:91:75:a4:a4:69:96:33:41:
                    f3:e5:31:69:9f:e1:70:89:5a:29:0c:f6:1b:09:17:
                    e0:d3:c5:20:9d:d3:23:f1:ca:8f:63:62:c9:9c:29:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D1:6D:31:47:90:99:B2:A9:FC:81:95:33:9D:DA:10:10:8E:A0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edb3202a-12ea-3500-ab6c-5603fbdf506d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:13:62:f2:ca:7a:33:29:93:03:c8:0a:a5:59:a8:ed:6a:cc:
         fb:d4:57:6c:03:ab:26:2e:83:f4:9a:d0:d1:6a:a7:1e:ae:eb:
         a4:dd:a3:3d:b0:bd:ac:3d:fe:d0:c9:45:7c:97:1f:3a:91:6c:
         d7:61:31:f4:e9:bc:44:b6:c5:13:54:cb:b9:5c:0a:45:df:39:
         f5:2e:6c:81:b5:b2:a9:92:7b:ac:3a:87:79:1c:af:e5:74:25:
         74:d1:45:55:02:61:c6:be:93:46:a5:46:0d:bb:f9:5e:52:ba:
         ce:81:66:55:a2:f3:7b:e5:40:7d:06:75:af:40:29:6e:3b:63:
         18:d1:06:71:dd:89:eb:ab:21:bd:30:f1:d4:f7:57:5d:34:38:
         a6:c6:4b:0c:fa:b5:0b:e3:90:c3:ca:52:d4:ea:34:a6:f9:6e:
         b7:b7:88:69:06:a5:42:73:27:72:f1:87:3f:0b:db:55:ef:b3:
         d5:c5:4b:73:f3:18:cf:c1:dc:39:50:b1:b5:64:4a:22:aa:d5:
         3f:4a:f5:d1:90:65:ad:00:4b:a5:7f:3e:0d:f1:6d:eb:0b:a5:
         01:75:3c:19:85:ee:7c:e4:8d:74:98:42:bd:8a:9c:b3:d0:ca:
         ba:69:6f:48:cb:da:22:65:0a:ee:fb:90:96:6c:f5:81:ad:a1:
         df:00:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:45 2026 by rpki-client