Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa
File:                     2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa (raw, json)
Hash identifier:          vuqT+AhMxB7Enz5wIwDGgVfp7nOfkVC6erPhlVgVAE8=
Subject key identifier:   63:F7:5E:E5:F4:7A:2C:BF:B1:74:94:61:F2:2D:C7:57:8D:F7:54:97
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584F2957C679FEAC58FB385813E0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     4922
IP address blocks:        104.251.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c6:79:fe:ac:58:fb:38:58:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=6748d77b-6383-4d91-a6ec-ea287783cb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:a6:d2:9f:0c:e9:93:5b:e4:be:9d:e0:6b:
                    fd:56:45:63:9e:47:ea:2b:75:1c:e1:d5:ea:34:e6:
                    f7:f7:6c:a0:80:52:c0:42:0c:e7:b4:ce:fe:e5:af:
                    f7:f5:d4:39:cc:d3:44:cf:33:e7:d3:00:d1:0b:79:
                    aa:e6:ed:e7:83:b6:0f:f6:2e:3d:41:40:bf:27:7c:
                    99:b8:9b:c1:71:47:a2:26:4a:5a:56:f8:64:5e:6c:
                    3c:a9:39:25:19:17:ac:f8:19:9b:80:2c:87:d7:e4:
                    29:b2:62:de:53:02:c1:d3:0b:9b:cb:b0:ce:b1:40:
                    2f:35:85:e8:ff:de:da:5a:d4:0d:6f:0b:0d:b0:13:
                    7d:f0:c5:3d:ac:eb:b2:0f:0b:f6:2c:82:ec:c6:87:
                    f2:8a:74:34:9a:76:87:ba:a1:9f:40:df:ea:e8:96:
                    c9:a8:bb:73:8c:dc:49:ce:be:01:ec:d3:7a:86:f8:
                    b9:cd:9f:69:52:94:1b:a6:45:38:80:9b:d6:71:36:
                    46:04:f4:aa:39:a3:33:4f:17:f6:34:ca:b4:94:41:
                    f4:6b:41:5d:c0:2c:6f:90:42:54:32:20:7f:e4:a3:
                    76:99:f8:ae:e8:69:1c:56:b2:32:c9:ae:db:8f:b5:
                    7f:f5:83:d4:69:48:7d:df:89:13:41:de:40:90:be:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:5E:E5:F4:7A:2C:BF:B1:74:94:61:F2:2D:C7:57:8D:F7:54:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2b6d9459-3dc4-3ee9-b6e5-4f38967f3ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:08:9e:29:cf:85:f2:aa:ed:d4:fb:87:2a:4d:85:e3:b2:
         7c:80:12:09:5a:e0:25:5c:67:e6:13:4e:a6:c1:94:5d:8e:23:
         ce:9e:96:c6:ad:f4:72:23:32:f9:ed:50:7e:51:21:aa:22:f1:
         05:9c:96:09:39:ec:47:37:34:10:87:ea:11:27:90:e4:64:3b:
         72:13:2a:93:80:1d:bf:d4:d3:6e:98:73:99:87:77:af:60:88:
         a3:93:47:8c:40:a4:44:1c:50:95:d4:1d:7e:38:5a:8e:2a:ce:
         78:92:0c:ee:ae:c7:77:92:4c:f6:51:6c:9f:e6:1b:9e:8f:60:
         42:fb:78:08:b4:0f:bc:8b:97:5e:fa:29:85:b0:54:8a:c4:13:
         b6:e9:fd:65:16:32:7b:cd:9c:b4:a8:f7:c3:8e:d4:c4:7f:8d:
         ab:77:42:2d:08:21:60:9a:b3:27:6b:39:7d:c4:7c:59:dc:0b:
         9d:75:88:b0:01:98:87:29:ab:5a:4c:76:9b:35:7e:30:4c:e9:
         7a:44:37:aa:99:cd:db:bf:5b:67:06:52:66:18:f6:08:ad:23:
         0e:b4:2e:fe:d4:74:f0:2e:8e:39:1d:a9:78:9b:0c:25:95:f6:
         c0:3c:e0:2d:59:14:0d:bb:ad:fa:25:8a:fe:71:ae:5a:9a:69:
         1f:af:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:31:38 2026 by rpki-client