Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/69fccfe3-bfd8-302c-a898-4ea7117b22db.roa
File:                     69fccfe3-bfd8-302c-a898-4ea7117b22db.roa (raw, json)
Hash identifier:          xaeFEOBEeR+ArL5JLS2OgC2OcfWQgWQ0dltOBgAmSLE=
Subject key identifier:   2D:8A:4B:D4:75:EE:0E:FC:35:6F:19:1A:2F:48:11:F2:92:63:00:91
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584DBD059939FE25F7ADD3FAF800
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/69fccfe3-bfd8-302c-a898-4ea7117b22db.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     152900
IP address blocks:        104.250.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:99:39:fe:25:f7:ad:d3:fa:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=146361bf-55e7-418b-8245-8708fb4c3cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:1c:75:cf:00:f1:b1:72:c2:a9:a7:70:9f:
                    73:c0:fb:3d:16:7c:43:88:e0:15:f7:79:39:ae:ee:
                    8f:d8:c9:ed:22:b7:90:b8:7c:51:b9:b8:21:07:84:
                    b6:7b:dd:72:c2:9e:dc:41:06:49:9c:7b:0e:9a:a8:
                    f6:63:63:af:87:01:7f:43:43:af:4a:e2:60:09:39:
                    28:58:2a:83:f5:27:3d:ba:95:a6:b5:2a:75:d6:80:
                    2f:78:c4:dd:49:ae:96:c9:f8:94:b6:d7:72:3e:a2:
                    8c:a6:2a:e6:e5:7b:96:41:a5:6f:6a:64:53:a1:bf:
                    39:be:17:85:a2:c6:58:c6:d5:71:7e:e9:0f:91:94:
                    8b:e7:40:63:0d:64:63:77:8c:58:07:cf:f5:cd:9c:
                    6e:b9:de:34:a5:82:e6:2c:75:50:bf:31:6c:a4:81:
                    bd:7c:7d:98:dd:5a:fd:d1:82:17:ad:ec:19:ad:f2:
                    a0:0b:07:6f:41:1c:0b:fe:a8:8f:e3:19:98:34:4f:
                    45:a1:6c:b9:73:c9:95:74:69:e0:57:a8:7f:d3:d5:
                    60:bd:c9:84:d7:2e:1b:f8:e9:6f:0a:e5:07:b9:31:
                    38:a2:c6:c0:7e:c2:65:c2:47:b0:79:63:ff:36:33:
                    68:07:eb:36:4e:cc:3f:0a:cd:1a:87:82:82:fb:1e:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8A:4B:D4:75:EE:0E:FC:35:6F:19:1A:2F:48:11:F2:92:63:00:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/69fccfe3-bfd8-302c-a898-4ea7117b22db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:38:58:7b:a8:8b:5f:5f:23:ce:b1:ad:ad:a5:ce:34:d8:8a:
         49:0c:9f:1e:18:f7:0d:1a:40:96:ba:3f:a2:97:8d:19:45:ea:
         0d:e4:cc:8c:22:16:38:ed:ec:a0:ba:84:e1:5f:c1:70:ac:da:
         f6:4b:92:eb:ef:c7:23:a5:9d:64:7e:bb:60:6b:26:d6:3f:17:
         59:fb:b4:56:ee:d2:90:6f:96:76:5f:53:9c:3e:d9:c5:47:de:
         1c:3f:a3:1d:c3:1b:d8:ec:8f:78:8a:55:51:df:87:da:74:f8:
         f2:44:31:76:11:cc:65:03:28:b9:da:3c:26:bd:5b:cb:47:f8:
         29:d5:aa:a5:9a:c3:b6:88:98:5d:01:5b:01:bc:e3:c6:a6:c9:
         91:18:79:cc:3a:0f:60:2a:69:83:cd:2c:1e:4f:ed:6e:20:bf:
         f8:43:3a:6a:51:6b:81:00:22:6f:10:43:e5:50:09:92:b4:81:
         29:a8:ab:c9:59:b9:2d:bb:6a:a1:73:67:3d:90:a8:15:bb:a3:
         77:ad:ca:6f:27:3d:ee:5d:67:93:00:7c:ba:2c:d1:56:81:7d:
         57:53:c7:b2:29:52:2c:0e:57:41:df:bc:c5:ac:bf:c9:e4:f7:
         f7:8e:94:f8:e1:af:7e:9c:34:5f:29:76:f3:b9:ef:9f:06:fe:
         c8:98:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:23 2026 by rpki-client