Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
File:                     309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json)
Hash identifier:          W93MxY4Z68wqc3RNqpiMF2lT7Ys0USJZxFTV+eXJgPs=
Subject key identifier:   38:57:57:FC:1B:37:DD:E7:34:DC:2A:57:69:0D:C9:A4:C6:74:4E:17
Certificate issuer:       /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial:       010D0C9F4328584ED001DEA0E6D963C0333B89E0
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     63362
IP address blocks:        104.254.204.0/22 maxlen: 22
                          104.254.204.0/23 maxlen: 23
                          104.254.206.0/24 maxlen: 24
                          104.254.207.0/24 maxlen: 24
                          205.143.40.0/22 maxlen: 22
                          205.143.40.0/23 maxlen: 23
                          205.143.42.0/23 maxlen: 23
                          205.143.42.0/24 maxlen: 24
                          205.143.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:de:a0:e6:d9:63:c0:33:3b:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=3b7e1030-7483-4ae7-9519-630150e09c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:24:c3:8c:48:e2:27:41:c6:c4:04:f0:ed:
                    e4:03:e6:3f:c5:b3:9e:66:4a:a8:31:50:ae:f3:c5:
                    e1:3e:89:74:1a:c5:59:86:0e:84:e1:9d:f4:d0:9d:
                    bb:fe:e9:27:d4:0d:dd:17:d6:8d:4f:a2:e8:0d:bf:
                    5b:60:3f:05:f1:6b:00:ae:fe:19:f2:d4:d2:99:4b:
                    49:ea:ac:8b:e1:86:6d:8c:c0:ea:05:9e:58:a4:29:
                    64:4f:74:4f:c3:7a:d5:14:35:f9:eb:08:7b:77:fe:
                    b9:50:28:b4:2c:75:e6:fc:d4:c3:87:cb:a2:5d:21:
                    cf:52:65:e7:3b:7c:97:db:88:7a:a2:10:cc:66:ad:
                    a4:43:6a:78:11:ed:99:b0:08:3b:87:e7:07:7d:c7:
                    64:cb:0e:02:88:df:d7:a2:2a:9d:c7:ca:96:e3:ac:
                    a4:09:98:f5:0a:70:ed:5a:79:e1:cb:1d:8c:32:98:
                    40:98:7c:04:21:08:d4:a2:1f:b7:9e:61:b9:77:4a:
                    60:c9:1b:10:fe:1a:19:00:37:59:27:4c:a6:e0:3f:
                    01:f1:57:4a:28:16:3c:95:66:7b:78:67:e7:66:9f:
                    a9:e0:20:af:13:5f:37:0a:b9:f3:63:9f:7e:1d:8e:
                    82:8e:20:19:6d:be:8c:f6:8d:7e:87:14:5c:ce:3e:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:57:FC:1B:37:DD:E7:34:DC:2A:57:69:0D:C9:A4:C6:74:4E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22
                  205.143.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:68:7b:39:38:24:c7:0d:12:78:70:fa:8b:d8:d7:dc:b4:07:
         e3:9f:1e:2b:55:d1:50:e9:02:6f:88:92:73:ea:0e:5a:96:18:
         3c:fd:fe:d5:12:5d:1b:58:7d:56:d8:f1:05:f6:4b:63:6e:aa:
         5b:d3:26:db:ea:f9:77:b4:78:8f:fe:98:8c:87:3c:10:8f:87:
         69:58:c2:b8:c4:25:38:80:ce:fa:88:1a:b0:46:9c:08:d7:ab:
         c0:d2:df:d2:1f:72:5e:72:9f:09:f2:41:bf:94:69:eb:06:1a:
         d4:34:5c:aa:2f:30:d9:4f:2e:ad:f0:40:21:ce:2c:d7:1f:1f:
         84:be:8a:b1:c5:14:b9:ed:e2:11:16:55:ea:e4:bc:00:cb:3b:
         bf:70:ac:5d:67:3a:43:de:fd:85:fc:5c:69:d1:9d:a5:12:76:
         d2:9e:85:13:6e:b0:30:1e:c0:bb:bf:f9:70:f7:44:71:6a:43:
         73:ce:7e:05:6c:83:74:bf:41:e2:36:75:e5:76:d6:ae:5d:cf:
         20:fc:33:6a:ea:38:76:9e:df:ee:11:40:bd:5c:58:87:fb:5c:
         ad:0e:ab:7a:95:21:f9:2a:7e:ce:08:95:d1:68:a5:22:1b:cb:
         9c:ea:f4:ea:6c:73:5b:6c:8b:bb:59:ec:f3:4f:f0:2a:76:d1:
         99:2c:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:05:58 2026 by rpki-client