Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa
File:                     8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json)
Hash identifier:          vDGR4DdWcOz1U3Whkcl8gceHiau0lrfDmWJmr6bmNAM=
Subject key identifier:   59:A7:F6:CB:AD:FD:7D:A7:93:49:EA:CB:BC:C2:88:AA:37:A6:45:C0
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584F4977501A8C14A0885618DD80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213122
IP address blocks:        104.249.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:50:1a:8c:14:a0:88:56:18:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=755d22ad-8414-4db7-8d6a-fcc53cd09a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:fa:bf:1d:71:35:a5:76:13:08:82:08:96:
                    60:04:b8:7e:ab:fb:29:20:e3:84:fb:e4:e8:1d:53:
                    fa:65:4d:db:c9:9b:5b:32:78:3b:aa:af:93:f3:78:
                    00:71:5c:ca:f0:ed:c5:83:fc:d9:c5:27:db:a7:19:
                    c9:d5:1c:02:64:e8:0e:66:46:6a:c8:92:5c:bf:5e:
                    43:60:0b:9c:41:41:ab:d4:20:07:46:f3:dc:b7:b8:
                    94:a3:1a:c1:69:08:02:77:fd:46:b6:cf:fc:43:f9:
                    6c:05:34:4e:46:c2:1e:6f:69:1f:89:1c:82:be:dc:
                    e2:1f:2b:ef:fe:4c:3f:3b:c5:32:49:38:07:d4:6d:
                    26:80:21:25:b7:5c:e7:5a:c6:04:33:ea:99:23:73:
                    81:89:d5:6c:e2:1e:ea:9d:3d:ba:c7:a9:59:bc:6a:
                    93:16:97:c5:62:34:02:02:03:3c:97:db:12:97:88:
                    b5:36:11:b5:cd:f2:60:70:46:3c:e8:40:54:af:ba:
                    57:49:83:10:b8:90:ab:ab:96:c8:11:4d:14:93:bb:
                    de:3a:77:60:62:3c:8a:20:78:20:ee:0d:b7:44:a7:
                    1c:02:96:6e:d1:44:13:df:6f:b8:f0:7d:72:0a:50:
                    3c:5b:64:94:0b:75:4a:3e:38:3c:6d:8e:3b:f3:21:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A7:F6:CB:AD:FD:7D:A7:93:49:EA:CB:BC:C2:88:AA:37:A6:45:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:d9:f6:03:dc:dd:f2:72:ad:04:36:2b:9e:a5:e4:3d:1f:
         81:16:78:b8:09:13:26:da:d7:4d:0a:3e:d5:a2:19:c2:90:6a:
         59:dd:b5:59:09:d9:aa:3c:bd:54:c9:a5:dd:80:19:8f:33:f5:
         0f:4a:12:47:a9:f5:11:4f:51:75:d6:8b:ff:fa:0a:02:3f:1e:
         ca:89:24:c7:60:5a:d3:f6:95:02:5c:8a:c3:70:ce:09:35:7a:
         f4:cc:ed:cd:bb:6c:5d:5f:10:73:02:94:a8:05:c7:ab:5b:70:
         cf:8d:dd:07:fc:8f:2e:26:2b:27:fe:f2:66:ed:8d:03:1a:c7:
         38:f1:97:b5:c7:be:e7:c4:e1:ce:da:f9:98:d2:f2:9a:9a:3d:
         99:b0:81:6c:eb:8d:8c:11:bc:d7:cd:bc:2d:f0:6f:9e:92:3c:
         0c:69:ad:ff:68:4c:5e:17:c5:dd:09:2d:52:70:0c:17:e7:cb:
         cf:2d:ca:53:7b:74:5f:69:04:ae:4d:52:67:65:00:03:b2:c4:
         80:3f:57:d0:ea:89:23:12:cc:f4:3a:03:e9:69:81:0c:4b:e3:
         dc:0f:6b:21:84:da:09:64:f0:76:3b:43:51:3a:68:c6:4c:3c:
         95:88:8b:83:d7:b1:55:45:03:ab:8c:64:51:46:0a:a3:27:49:
         52:7a:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:32:59 2026 by rpki-client