Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa
File:                     23814664-a1e4-3868-9364-a0796ad96515.roa (raw, json)
Hash identifier:          xhc0A/tdoBcb9xWErWWAHtmILbSYCdW/5viiP5dEYOA=
Subject key identifier:   10:EE:24:07:FC:E5:81:41:EB:60:D6:59:C3:23:47:98:C4:1A:56:7B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584D9A200E7D7FDF91D3EEAC9C80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     46261
IP address blocks:        104.251.80.0/24 maxlen: 24
                          104.251.85.0/24 maxlen: 24
                          104.251.89.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0e:7d:7f:df:91:d3:ee:ac:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d451e61b-0be2-42e4-8822-17ddd52fc0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:b8:70:5d:97:ce:29:02:29:2b:50:f7:b3:
                    d1:b0:d7:ab:10:cb:44:f0:a9:f5:25:43:fc:e0:3f:
                    52:e9:3f:4b:5b:a8:45:ce:80:52:13:6d:25:12:47:
                    28:46:dc:f6:8d:dd:4a:f0:32:6d:fc:90:fe:91:a9:
                    f0:7a:43:17:c3:a4:66:7a:3b:d2:20:d7:ba:3f:69:
                    7e:53:f9:f1:b2:d9:63:95:7d:ef:3c:44:8d:a8:67:
                    6c:30:45:9e:44:64:75:4a:eb:db:7f:4d:52:45:9c:
                    83:1f:44:07:d9:78:25:d9:3a:5f:4b:51:cb:93:33:
                    76:80:8a:d9:3d:9e:16:80:12:0b:9b:0e:40:ae:69:
                    e7:df:66:24:1d:75:3a:47:fd:36:63:5f:c3:44:78:
                    ed:cf:5f:81:59:d5:a7:02:c2:dc:d2:6e:a3:9f:18:
                    4f:cf:e9:02:46:f9:93:bc:67:32:6e:2a:21:ec:26:
                    74:5b:09:6a:fe:6c:45:44:b3:4d:2c:6a:04:c9:a3:
                    ce:8a:70:81:4f:93:84:05:77:95:c4:99:45:50:4e:
                    b1:75:96:aa:d7:c6:0e:25:81:a1:f9:d0:00:0c:96:
                    83:65:02:73:26:02:9b:d9:78:9a:a9:82:cc:a5:61:
                    b7:69:40:b0:d7:9a:d2:a9:ac:34:6f:bb:43:db:87:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:24:07:FC:E5:81:41:EB:60:D6:59:C3:23:47:98:C4:1A:56:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.80.0/24
                  104.251.85.0/24
                  104.251.89.0/24
                  104.251.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:82:40:cc:88:b2:c4:65:b6:d4:76:f2:86:d3:0b:5a:80:
         12:7a:8f:d6:1f:97:55:84:d2:1e:63:23:7b:eb:d6:22:6c:25:
         ca:7c:e4:fa:b4:27:e1:37:f9:60:a5:a2:c6:9d:4b:1b:05:c6:
         33:2a:a6:80:04:34:0e:52:fa:32:d7:59:0a:34:38:c2:29:1f:
         3a:f2:a7:31:6a:2c:3e:f6:67:e1:88:e4:b7:2b:de:98:b1:47:
         21:96:49:15:e9:76:5f:a7:62:18:62:32:5e:22:fe:53:2b:d2:
         a4:f4:91:cf:9f:f6:0c:b0:79:f8:fe:3a:24:f6:2a:35:8f:96:
         f2:5c:29:f3:07:3b:0b:a0:09:24:b4:58:56:d5:de:7c:9f:eb:
         31:fe:ca:74:db:e1:61:40:49:f8:64:f6:36:78:b5:53:7b:85:
         a6:ed:92:c8:83:a9:54:33:9e:aa:48:bd:ad:2e:42:5e:b3:be:
         45:ed:13:7c:c3:6a:fd:1f:16:65:d7:d6:0f:26:d3:ac:11:82:
         82:a5:b4:2e:86:56:7c:b1:4b:46:e6:e2:5c:19:a3:2a:67:9f:
         ad:02:4f:20:17:49:d7:58:a8:5a:88:8a:f2:b3:a0:6a:ca:33:
         00:5f:e6:3b:ca:88:0d:6b:36:79:b5:f9:e1:f5:95:aa:64:e1:
         81:26:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:32 2026 by rpki-client