Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/81467b18-bd9d-3771-a3dc-c47d1a428a3c.roa
File:                     81467b18-bd9d-3771-a3dc-c47d1a428a3c.roa (raw, json)
Hash identifier:          LTPYrx24+htn2GJDNWpTeAGSwpz99KXC+X/bzLXH4b8=
Subject key identifier:   3B:D0:A1:30:E4:C2:D1:F9:98:16:42:80:EB:E2:DF:37:9E:0F:EE:4A
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584DBA3AFB4068008A8ED07833D0
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/81467b18-bd9d-3771-a3dc-c47d1a428a3c.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     40788
IP address blocks:        104.193.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fb:40:68:00:8a:8e:d0:78:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=3fe3ee2e-0655-477d-a60e-7917eac8dbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:46:7b:0a:da:5d:28:82:09:ef:d8:6b:37:
                    ec:7f:c7:8e:2a:a3:70:15:6b:66:f5:c2:9c:3d:e7:
                    0d:7f:d2:40:7b:98:fc:3d:0f:1a:84:ca:00:fc:14:
                    b8:0a:72:12:19:15:d0:f0:c2:4d:1e:98:7b:e6:3e:
                    34:ad:ab:bb:8e:00:b1:c4:10:c0:c2:8b:49:f5:fa:
                    07:03:a4:df:01:b7:10:c1:be:c3:cb:5c:11:e1:16:
                    1d:74:47:49:27:d4:47:cf:00:7f:0f:bb:be:62:5f:
                    dd:c5:a6:d5:b1:48:d9:cb:6e:42:8b:f6:7d:59:55:
                    82:61:21:40:c4:52:a1:7c:c0:1d:34:c2:77:fc:c4:
                    13:5e:e3:a3:87:bd:e3:8d:99:de:ef:2a:09:9e:72:
                    ae:a3:57:79:12:15:24:82:4a:8c:b7:ce:99:79:6f:
                    f2:b2:8f:37:89:e9:74:b9:d9:86:bd:ac:d9:2b:c7:
                    03:e3:fa:9d:84:75:c8:05:7f:a1:47:92:91:6a:a9:
                    01:ef:57:5e:a8:5e:72:27:d7:14:7d:4f:94:ca:a5:
                    1b:46:a0:9a:1e:fd:6e:ab:42:65:5d:6f:d7:b7:9c:
                    2c:2a:54:64:c4:3b:24:00:d4:d9:c9:33:93:a2:dc:
                    24:43:fc:57:cb:e3:cb:04:d8:74:11:09:1d:cf:7b:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:A1:30:E4:C2:D1:F9:98:16:42:80:EB:E2:DF:37:9E:0F:EE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/81467b18-bd9d-3771-a3dc-c47d1a428a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:5c:58:42:1b:e1:09:21:6e:da:43:02:c0:4e:28:28:2f:
         e9:5a:67:d2:b4:83:58:f4:af:b8:70:b2:33:dd:0c:27:5a:11:
         78:24:a1:fc:37:b9:45:cf:d5:2f:fe:08:59:6d:db:81:0d:b4:
         ad:6b:8e:96:3d:03:06:b9:68:d6:86:2e:56:a1:7c:dd:02:f6:
         cf:1c:b6:ba:a9:c3:39:4a:d4:d3:98:f2:4a:f5:22:90:17:eb:
         32:b4:16:9c:4c:f3:12:89:b9:ac:83:4c:51:b5:5b:df:83:f9:
         4d:9e:66:c4:49:32:1a:6b:c7:64:0a:47:e6:61:16:55:49:b6:
         5b:73:08:60:8e:c6:58:62:73:b4:25:d2:2f:90:ae:39:55:10:
         88:b3:51:99:df:c9:ab:fb:58:47:ec:c6:e8:c1:85:2f:80:08:
         71:f3:e1:3a:51:e0:dc:d9:e1:b8:a2:39:97:04:e3:70:e1:6d:
         35:c0:80:53:72:dd:c6:d8:ae:1d:cb:a4:c6:27:3f:7b:2e:0a:
         43:31:ec:be:a3:ce:3a:40:fe:98:78:be:0f:d6:34:4d:8b:bc:
         21:3c:11:71:67:1b:d2:d1:0b:9c:d3:1b:46:e6:81:fa:bb:2b:
         9e:c9:16:da:c1:2c:76:8e:d2:ba:6b:0a:3c:e4:97:e3:02:b6:
         75:0e:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:16 2026 by rpki-client