Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/9d1ae828-6200-3652-b0ff-6119325e2088.roa
File:                     9d1ae828-6200-3652-b0ff-6119325e2088.roa (raw, json)
Hash identifier:          IuHVxfcJTZlH9zUPXqj+MIimd9eQRu981ScXauSPAZg=
Subject key identifier:   5C:30:AF:9C:31:BC:92:7A:4B:6E:81:5F:CB:3F:69:CA:60:58:63:A2
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584F0D4A90D35C8392B53930A780
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/9d1ae828-6200-3652-b0ff-6119325e2088.roa
Signing time:             Thu 03 Sep 2026 11:51:12 +0000
ROA not before:           Thu 03 Sep 2026 11:51:12 +0000
ROA not after:            Wed 02 Dec 2026 12:51:12 +0000
asID:                     393406
IP address blocks:        104.224.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:4a:90:d3:5c:83:92:b5:39:30:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Sep  3 11:51:12 2026 GMT
            Not After : Dec  2 12:51:12 2026 GMT
        Subject: CN=f3fb4f21-d0de-404e-b4f3-07f23562d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:ad:63:bf:95:b4:73:ab:0f:f3:a2:28:f7:
                    af:83:33:f7:47:da:4d:d8:61:39:90:fc:12:d9:e1:
                    86:98:6c:0d:d6:ee:59:dc:da:02:59:21:e2:7d:60:
                    10:54:88:3d:8c:e7:77:51:42:aa:9c:53:04:4b:9e:
                    65:af:fe:54:b3:8e:95:66:17:3d:27:89:34:5b:1a:
                    8d:50:69:79:01:8a:97:77:00:98:29:74:b9:8d:ea:
                    e2:6d:bf:6e:e5:20:0f:17:0a:67:2e:bd:bd:0d:c2:
                    30:4d:1d:8a:ed:76:b0:cf:ee:ef:8d:c0:7b:c3:ee:
                    10:dc:65:67:f3:9b:36:98:ae:23:52:10:5e:c8:a6:
                    b6:1e:86:c1:28:6e:91:83:40:a8:2e:15:a8:5d:2b:
                    fc:8c:f1:91:d0:5f:f6:73:8d:0e:f5:b8:7d:26:16:
                    63:48:13:43:42:49:1d:bc:bd:40:3e:6b:b5:6e:11:
                    bb:36:91:b0:1e:6c:8f:c0:1b:f2:f9:8b:fb:ee:6b:
                    14:38:b6:39:f8:88:f8:35:db:f8:1e:8b:e9:ec:3d:
                    e5:6c:43:33:c3:29:5f:ef:aa:be:cb:ac:7a:dc:a3:
                    53:1f:f2:21:af:0d:40:75:af:6f:52:57:e3:eb:81:
                    f0:71:12:27:88:50:21:f8:f8:9d:3b:5f:ce:ea:a4:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:AF:9C:31:BC:92:7A:4B:6E:81:5F:CB:3F:69:CA:60:58:63:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/9d1ae828-6200-3652-b0ff-6119325e2088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:63:49:04:91:a4:23:44:b0:11:0c:b2:26:b0:15:f5:59:
         17:16:d6:56:e4:00:b7:22:3c:2f:a2:f8:20:ee:94:94:93:19:
         11:42:1f:ef:c4:e6:80:6f:a7:c2:d7:c6:1f:48:64:2f:eb:eb:
         1a:81:f1:41:bc:8c:71:76:ae:54:bb:75:60:27:1e:4d:a7:14:
         d8:df:6d:57:7c:bf:d7:21:e1:c6:85:2e:5d:02:e4:ec:35:2b:
         7c:e0:11:32:12:91:32:dd:37:ff:25:dd:82:8d:25:66:1a:0a:
         67:b0:13:b7:9b:e9:02:a4:2a:4c:ac:ce:7b:49:55:1d:14:e8:
         a3:bc:a3:6d:08:3d:1b:a5:26:89:c8:0c:2b:9f:db:59:ff:db:
         a4:d3:72:c9:e7:51:28:73:b0:8f:cc:01:d1:eb:c4:21:0a:7d:
         20:4f:4a:1d:6e:6a:ac:0b:cf:69:47:03:7f:9e:1e:a7:34:a8:
         ed:d7:65:9c:0d:4d:5b:a0:81:d4:6c:ae:4b:d2:f4:c9:86:19:
         60:c1:56:9e:d2:c6:08:24:6a:3c:4c:af:2a:59:86:7e:81:a8:
         eb:a8:05:fd:bc:b5:5a:e7:bf:de:e9:5d:4c:30:82:92:8f:18:
         0d:46:ce:5f:05:26:1b:68:1d:9a:30:4c:fa:e4:7e:b2:68:6a:
         65:f2:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:42 2026 by rpki-client