Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/80e3555c-a002-336a-9100-5b4a5ffc3a0c.roa
File:                     80e3555c-a002-336a-9100-5b4a5ffc3a0c.roa (raw, json)
Hash identifier:          vYC4HSH2YaX9pv78coRx4VQ8nbtLBjt+QaTUBdNsBUI=
Subject key identifier:   19:3B:62:4F:69:11:DB:21:2A:44:6C:EC:96:3A:56:B3:E2:08:1E:82
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584D3DFF96CE795F57EC54B4EE00
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/80e3555c-a002-336a-9100-5b4a5ffc3a0c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     399296
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:96:ce:79:5f:57:ec:54:b4:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=98e52a98-7b57-446b-82c9-1f1d50b91cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:83:6c:de:6f:10:04:27:21:92:4f:3f:86:
                    51:eb:0c:a5:98:f0:f0:68:7f:f0:0d:56:92:99:02:
                    b2:22:10:81:71:69:22:9b:cc:c8:03:98:64:2e:cd:
                    24:e7:c8:bb:0c:5d:ff:84:37:b1:6c:81:37:60:97:
                    83:18:99:df:7d:04:02:9f:68:44:e0:ab:08:d3:e0:
                    56:cd:a7:ec:c7:59:77:0a:b9:71:c8:de:3c:78:27:
                    4d:a2:bf:75:f2:6a:fe:d2:8a:e0:d7:20:77:d1:ba:
                    20:cf:5e:10:cb:42:d8:24:b9:02:86:31:90:9d:7a:
                    fd:85:38:a2:9a:43:72:6b:b0:5b:d6:0c:d0:6b:65:
                    e1:81:a3:90:66:a3:0f:75:05:b4:a7:82:72:ca:e4:
                    53:97:d3:26:02:77:44:28:a3:b7:ba:6f:d1:e2:00:
                    50:81:22:e3:ff:eb:aa:a9:04:f5:c2:78:7f:6c:8f:
                    78:c9:9c:cc:4e:0d:a9:8b:d1:a1:82:34:8f:b6:ea:
                    c3:46:36:86:d2:8b:b2:65:4a:67:fd:e3:ac:45:70:
                    10:f2:15:88:cd:a4:34:4d:f8:69:f3:66:39:0f:6d:
                    c2:a8:e7:62:de:b0:ec:72:49:7d:d9:33:47:28:5c:
                    d0:29:04:0c:9f:49:ec:18:84:0b:64:cc:68:ae:b1:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3B:62:4F:69:11:DB:21:2A:44:6C:EC:96:3A:56:B3:E2:08:1E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/80e3555c-a002-336a-9100-5b4a5ffc3a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:55:04:44:c2:0c:76:dc:04:77:2b:b6:c6:8e:00:e2:16:
         0a:bc:8f:c8:47:c1:7d:fa:1b:02:38:7e:45:1a:61:a9:db:9f:
         4c:66:cc:de:14:13:74:fc:15:6b:5d:e7:ee:df:a8:be:47:8e:
         db:5f:64:bb:16:04:3e:bf:6d:c4:97:de:e6:98:a9:68:3a:bf:
         7e:39:07:10:59:8f:ae:47:8c:e0:e0:fe:5d:2d:8c:52:cf:79:
         88:59:e6:8c:ec:87:72:22:d7:cf:8d:a4:32:a5:99:be:e7:78:
         55:c2:43:c2:1f:db:b1:6b:0e:f2:1e:9f:1d:ee:67:f1:8e:05:
         9e:1f:5a:05:6a:ae:97:b1:cb:ee:32:a7:53:1f:71:11:d7:08:
         03:c7:10:50:d7:28:9f:f5:53:85:1d:5d:5f:d2:db:9c:c4:a3:
         a2:25:68:b7:cc:ee:77:e1:e4:73:98:94:c0:b0:dd:78:5c:28:
         2a:f1:fb:22:cc:ad:0c:1c:41:15:39:bd:ba:41:a5:0e:31:77:
         9a:62:49:f7:4c:5c:48:f6:66:b6:7f:04:b3:d1:8e:1e:c2:70:
         a5:8b:18:2d:fc:42:20:2c:6d:04:99:3f:67:6d:8e:ce:ce:a8:
         20:34:c7:e1:af:1e:07:08:13:a0:8f:02:a7:6b:65:0a:5d:df:
         e5:53:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:41 2026 by rpki-client