Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa
File:                     cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa (raw, json)
Hash identifier:          Pl64OEk5oxmcX0UUXQkVSx/wG4n+eF9ny0nJbPf8v2c=
Subject key identifier:   04:D9:61:AD:0C:10:08:CD:F5:AC:75:94:40:79:DA:AA:58:D2:B9:37
Certificate issuer:       /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
Certificate serial:       010D0C9F4328584EE7BCBF37B4B73FAC9A6CC100
Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        104.243.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:bf:37:b4:b7:3f:ac:9a:6c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=b0aed4f1-a184-459c-b399-8a86ea264b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:44:f0:63:8c:a3:81:2b:03:ab:d3:7c:61:
                    e9:22:56:30:3e:35:ec:e4:d7:43:b7:e0:ae:9e:41:
                    b3:32:34:77:07:28:1d:4c:1e:be:27:77:13:63:06:
                    93:56:7f:15:75:f8:39:f9:af:bb:a8:7a:8e:1d:82:
                    21:41:5a:c2:4d:27:9a:28:f3:56:99:05:16:5e:35:
                    da:1b:bb:e6:7b:ee:fa:74:05:af:4c:ba:87:0f:96:
                    d2:fc:7a:68:18:23:28:36:1a:5d:85:b6:9d:5a:d0:
                    1e:c5:8a:13:0e:ca:4e:aa:13:ee:b5:b7:02:4d:20:
                    ab:d0:b6:1e:5d:5f:c7:82:a6:c3:ff:7b:5c:6c:47:
                    ec:e3:cc:18:01:27:a0:54:34:40:33:f2:cd:b2:8c:
                    12:cc:4a:e6:d3:b0:8f:1c:0d:f6:d4:95:ac:db:c1:
                    1f:78:07:d9:1b:3e:9f:6c:b0:be:74:ea:e9:63:3b:
                    68:ca:cb:2d:fb:4d:8e:f4:d9:bf:38:bc:28:d2:9c:
                    a5:ea:76:d9:db:6c:cb:a9:b4:61:9c:2d:4f:f8:f4:
                    95:85:05:dd:49:f9:3d:76:91:1b:25:b1:b0:7c:86:
                    3d:8f:c9:58:18:fc:b3:02:26:25:c5:dd:60:e1:37:
                    61:a7:18:bc:b6:88:6f:bf:66:b9:09:66:a1:37:37:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:61:AD:0C:10:08:CD:F5:AC:75:94:40:79:DA:AA:58:D2:B9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl

            X509v3 Authority Key Identifier:
                keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:6d:f5:67:8a:f8:98:b5:af:dc:b9:1e:36:b7:53:23:fe:0c:
         1d:91:2b:67:19:35:1d:c7:4a:11:df:02:ef:49:f2:71:b1:62:
         1b:38:a7:09:07:99:05:41:85:cb:f1:eb:90:40:fb:31:c2:62:
         14:bd:b4:b8:2c:f0:09:c9:70:2a:3b:36:06:7e:30:e6:78:86:
         11:8c:67:38:fd:e6:68:ad:7c:cd:19:be:85:67:30:ad:94:c3:
         39:2c:f7:e8:7b:85:85:62:02:a7:e0:3e:a5:7d:c1:19:42:2e:
         3f:d5:17:42:a9:75:ac:11:d5:0b:0d:c9:3c:6f:29:41:cb:4b:
         2d:d3:ed:03:f8:c3:c1:85:63:d3:f3:3a:4f:cb:67:aa:51:66:
         62:37:57:58:a0:f2:eb:cd:9c:fc:cd:9b:92:e6:a5:82:75:be:
         26:4e:80:b2:76:92:3f:8e:98:72:af:99:9b:4c:b2:fe:bb:48:
         8f:7d:62:f8:a9:90:6c:b8:30:14:60:44:84:0b:a9:94:d0:cd:
         e4:1c:4a:6d:27:be:d3:3e:b2:fb:01:d2:ba:ea:ca:b3:8f:7c:
         77:70:a2:fc:3a:1d:b5:e0:dd:04:80:57:9c:53:97:e1:ee:7a:
         8f:72:ab:87:4f:fe:d6:7b:d8:03:61:19:08:d2:8e:da:c0:26:
         fb:3f:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:27:42 2026 by rpki-client