Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
File:                     a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json)
Hash identifier:          5/ZlF/h+rgRpit8dQUrlfQwzsF7+AC9hBaLL/hu/IhA=
Subject key identifier:   4F:CD:E4:FD:BE:EC:CB:EC:FB:71:04:58:E9:FB:BE:89:A8:7C:C7:50
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584E94EA5D32CC0679873E5A4AC0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     140042
IP address blocks:        104.251.224.0/20 maxlen: 24
                          172.81.102.0/23 maxlen: 24
                          172.81.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5d:32:cc:06:79:87:3e:5a:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=096679d1-2f85-4df5-a403-510d214761b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:65:d3:03:ae:44:ca:a3:b6:3b:fc:29:6f:
                    f7:a5:f6:6f:aa:ac:2e:18:bd:e9:70:17:59:2a:19:
                    82:30:ba:cb:15:0b:c1:80:70:d5:f9:0a:56:2b:90:
                    20:9f:86:c3:fd:b5:34:7e:2b:6a:db:c3:33:02:e1:
                    40:59:ad:6a:1c:12:3c:c3:c7:f1:0e:8d:f9:cd:ce:
                    fd:9d:ad:58:10:5c:ed:3a:b5:fa:e9:51:27:b2:e7:
                    6c:d5:e0:f4:cd:dd:a9:38:0a:38:35:b6:a6:3d:f6:
                    f3:f9:ae:05:78:9b:c3:43:06:97:41:7e:71:7c:fe:
                    de:dd:02:01:c7:ce:e1:68:c0:9c:ab:24:b1:50:fe:
                    7a:a2:0b:96:40:34:64:8b:61:d1:fd:54:0f:35:26:
                    4f:4c:3e:fb:50:e8:45:c2:ec:b3:8a:75:c8:9f:a8:
                    c0:80:84:2a:23:51:49:f2:ff:78:da:40:4c:9d:6d:
                    7c:d0:b3:19:01:6f:6b:66:6d:b9:1d:d6:75:52:af:
                    cc:c7:ed:b0:62:ce:02:9c:a7:d6:c8:80:44:1f:3d:
                    09:da:ab:7f:30:29:9f:d5:ee:70:7c:f4:07:97:41:
                    06:b1:e8:e6:c9:e5:16:fb:4e:b9:f4:28:18:36:c2:
                    0a:55:7a:cf:88:69:03:cf:57:62:58:8f:26:f2:7e:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CD:E4:FD:BE:EC:CB:EC:FB:71:04:58:E9:FB:BE:89:A8:7C:C7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.224.0/20
                  172.81.102.0-172.81.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:3f:d0:d1:ba:ae:7d:f9:71:b7:ed:c8:fd:8d:27:85:e5:
         3c:f0:d5:bf:16:23:63:92:3a:45:bc:00:4f:8f:3e:1c:95:67:
         48:c9:86:03:10:e9:ac:ac:7c:23:be:43:ae:c1:67:a1:44:9c:
         55:6a:f9:d2:a4:4f:95:33:32:fe:b3:43:8c:ce:95:32:2b:61:
         dd:76:7e:b5:03:97:62:5f:77:85:3e:ac:45:12:df:1a:3d:70:
         94:83:f2:29:21:03:01:b9:8f:10:ed:8c:38:db:7f:30:3b:dc:
         5f:35:eb:d9:43:86:eb:37:0f:99:64:01:66:55:6d:4c:65:bd:
         59:93:ba:4c:38:6f:9d:71:5b:d1:f2:b5:10:98:d5:9b:50:ad:
         2e:3a:13:43:91:bb:25:42:ad:1b:35:8b:2e:2f:10:9e:90:3c:
         f7:1f:dd:34:5c:1e:9a:94:48:dc:45:2e:88:a5:d1:d0:30:dd:
         81:07:bf:f4:3d:1d:ab:8d:37:d2:c2:78:1f:e0:ca:d5:4a:f7:
         7f:7d:bd:1c:f1:1a:fc:01:46:24:9d:d2:ff:74:7d:ec:19:98:
         d7:4a:f3:8d:0a:a8:f7:d8:28:66:eb:91:14:db:aa:ce:b1:c1:
         67:ae:bb:e5:1a:b3:39:34:e3:54:3c:70:45:60:07:91:b7:bf:
         f2:d4:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:22 2026 by rpki-client