Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
File:                     a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa (raw, json)
Hash identifier:          pskjgq3HhrF81TNHM6UzLUYf3Lxb2nH0l/dFG2yO4sU=
Subject key identifier:   44:BA:4F:11:4D:41:49:1D:9B:F4:28:3E:11:57:B3:A8:4B:A6:B9:AC
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F4328584E7A64DE0771EF20BF130AB480
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     393227
IP address blocks:        104.218.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:de:07:71:ef:20:bf:13:0a:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=2d366543-366a-48f6-b292-05dc9b243879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:d2:30:09:1c:51:69:91:95:9f:63:e8:e9:
                    c9:bd:99:37:17:eb:9f:e3:73:ff:3b:49:09:b7:d6:
                    e0:69:b0:94:97:77:97:52:d7:d5:0b:6c:ab:61:98:
                    df:11:35:e1:09:21:5f:a0:3b:2f:a1:15:e6:dd:d1:
                    86:cb:85:c2:08:52:ac:ba:17:33:12:b5:11:0c:9d:
                    bb:1d:55:aa:68:a9:e3:58:65:bf:99:f4:c2:d8:eb:
                    1f:81:e6:03:74:65:bf:e6:64:e3:95:a2:10:0c:d0:
                    36:ab:e9:d6:9b:64:b6:8f:83:b2:2e:f8:39:f4:f5:
                    af:3d:e2:11:ec:e5:59:80:4d:a4:06:33:fd:c3:b5:
                    97:f5:40:5a:4a:58:ee:7a:a6:f3:43:af:4d:4b:76:
                    40:f1:36:26:81:94:fc:f6:50:70:5c:2a:9e:29:95:
                    7c:3c:b5:f5:41:6a:be:f1:1e:97:bd:dd:e4:c5:d7:
                    4b:86:bf:60:89:24:b9:ee:5a:21:0a:f2:ba:ed:0d:
                    e8:35:92:03:05:0a:62:d6:b9:99:b9:9e:cd:f5:1b:
                    40:99:83:2b:37:33:b5:3c:fc:00:a0:8d:77:12:00:
                    8f:c5:04:d0:7d:77:e0:24:6f:fb:84:bf:5c:c1:7a:
                    97:89:75:6f:1f:e7:2b:83:e4:fe:96:69:22:86:eb:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:4F:11:4D:41:49:1D:9B:F4:28:3E:11:57:B3:A8:4B:A6:B9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:b8:ea:a4:57:52:01:e2:eb:12:ba:01:c1:0c:9e:d7:12:
         83:b6:ec:51:93:88:a8:7b:c2:22:5c:17:af:74:d9:e2:d8:33:
         ae:13:ca:f3:ae:34:b0:4d:7a:e0:09:14:91:4c:ac:58:d7:69:
         39:40:ec:6c:86:20:da:9a:f0:18:f7:bc:a2:ad:a2:27:1a:03:
         f6:6f:28:a0:44:67:c5:87:e9:d1:20:a7:e0:ad:6d:fa:b8:f5:
         a6:30:e2:16:c0:32:43:7d:52:e4:c0:ce:a1:d4:14:c2:7d:cf:
         4d:ed:9c:7e:89:02:4d:c3:4f:55:74:8a:e3:fd:c0:3b:b2:c5:
         e2:9d:ef:c5:15:23:86:19:4b:de:7a:bf:17:c4:50:5a:29:2a:
         d6:fc:b9:42:22:f4:6e:6d:74:15:d6:fd:3c:90:4a:f1:c0:60:
         b7:91:41:a4:f7:f3:24:39:13:25:18:68:30:c9:49:92:2c:04:
         07:74:87:14:96:6a:c5:34:08:7f:4d:33:38:1d:d3:07:dd:c5:
         6e:e6:7c:76:4b:d7:83:14:13:74:33:62:e3:ee:db:09:36:33:
         eb:2b:71:22:95:58:d0:65:ad:78:98:4e:c1:8a:6e:60:05:5d:
         85:bc:fb:b5:71:f6:df:00:02:bf:2e:9d:0b:67:1d:0f:5a:69:
         2b:6d:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:26 2026 by rpki-client