Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d396dfa-f561-3c54-ab1f-a13fa06512ac.roa
File:                     2d396dfa-f561-3c54-ab1f-a13fa06512ac.roa (raw, json)
Hash identifier:          ZMQE4+aLcwX8iCTjQcPy4M+A+KCSzB6J7WOFguy47Es=
Subject key identifier:   C8:6C:9D:96:24:70:BE:08:4A:07:0E:94:70:34:2C:50:21:07:B6:FF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F5E62F8ACCEB6964BB9C50340
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d396dfa-f561-3c54-ab1f-a13fa06512ac.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     23473
IP address blocks:        104.145.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f8:ac:ce:b6:96:4b:b9:c5:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9c502c8f-6b51-4d77-8b3e-fd8be224b7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:ba:e1:a8:8b:83:df:0d:4a:45:89:a0:82:
                    6c:6d:9e:49:3c:70:b5:33:4c:4f:65:07:8a:ec:5e:
                    7e:d1:47:11:47:3e:7a:86:ef:56:51:34:9f:3c:07:
                    f9:ef:b4:84:50:8a:8d:17:b3:74:8b:db:9d:7a:d9:
                    26:26:6f:55:42:e9:27:df:97:ca:93:70:fb:97:0e:
                    08:c9:a8:9f:25:3e:dc:33:60:85:3e:57:3f:68:2d:
                    f0:80:f8:ab:03:af:31:37:8e:d4:d8:84:90:80:0b:
                    d9:01:7d:96:7e:74:19:40:d2:21:bb:96:56:bd:3e:
                    bb:7f:d9:e5:fe:f3:1e:43:2b:c9:de:5b:e7:1a:fa:
                    bb:be:2a:75:8b:2c:48:1a:4b:0a:a2:d3:63:bb:88:
                    bd:c1:c3:dc:07:83:f1:17:a6:a2:fd:ff:bd:a9:f2:
                    4e:d8:6d:79:9b:02:ac:9f:43:00:18:86:5d:85:8c:
                    89:c1:d9:ca:74:d7:2a:97:ef:88:07:68:73:7d:94:
                    a4:70:0d:3e:d9:dc:cd:7e:52:ad:f0:11:d7:76:63:
                    5b:5b:fe:f6:4e:91:d5:2a:57:f9:73:50:76:85:79:
                    12:ec:39:11:b3:db:12:cf:19:ad:7e:5d:68:67:4a:
                    45:13:3e:bc:a1:75:aa:21:f7:07:66:07:e0:58:ad:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6C:9D:96:24:70:BE:08:4A:07:0E:94:70:34:2C:50:21:07:B6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d396dfa-f561-3c54-ab1f-a13fa06512ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:9a:6e:9b:69:fa:13:c7:10:28:ee:d8:ee:38:60:a8:6f:
         40:0b:ab:40:f3:80:c6:4c:27:14:f2:bb:45:79:94:7e:80:7c:
         15:57:fc:d8:3a:32:dc:7f:2d:8b:fa:91:c7:83:c3:29:33:0a:
         27:7b:3e:b6:f7:42:3c:03:30:7a:b3:c1:b4:47:36:04:9d:5c:
         37:4a:2f:1f:e6:4f:fa:a6:97:7f:e3:a1:b9:b0:e7:2b:b6:f3:
         89:d3:60:2c:0f:80:87:4a:7c:e8:54:2b:53:de:2a:27:e2:70:
         10:4a:a4:ed:40:23:e4:c6:a6:9b:f6:3f:11:5d:cc:93:31:67:
         0b:04:89:29:9c:ea:a1:45:43:45:18:f8:27:e1:8a:66:57:38:
         16:ce:ea:22:0c:9a:37:5a:db:66:66:42:5a:fc:93:2e:fc:f3:
         9e:86:de:52:6b:62:b7:0f:2b:b5:63:3e:28:1f:87:cd:84:e7:
         b5:45:fb:06:2b:b3:d9:7e:57:75:c2:e6:d5:12:dc:e3:fe:9c:
         86:f4:4f:af:ef:2f:2b:90:92:ff:37:27:e6:af:a9:2c:e5:58:
         82:12:78:5c:89:84:ef:7f:f4:b3:24:9f:55:79:3f:8f:bf:76:
         27:2b:6f:70:65:f7:54:69:b7:7b:89:56:18:dd:3c:6c:05:5f:
         a5:bc:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:14:30 2026 by rpki-client