Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          RWFtZlVXAywtZz0fvmBWFsrPNCABRKRiBPIACX7PLDs=
Subject key identifier:   E6:EC:CC:69:E4:00:92:34:19:C4:A1:79:09:DA:A1:3A:B9:8B:75:26
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584EED521B6E3E8CC4A707EA88C0
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14397
IP address blocks:        104.251.115.0/24 maxlen: 24
                          104.251.116.0/24 maxlen: 24
                          104.251.117.0/24 maxlen: 24
                          104.251.118.0/24 maxlen: 24
                          104.251.121.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1b:6e:3e:8c:c4:a7:07:ea:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=8237e0e3-2fbf-4957-b98c-09e78c8d95c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:7a:9e:a8:8c:95:34:e6:35:c9:b4:d0:6d:
                    cd:0d:c8:40:76:f7:94:8c:1e:15:a5:34:f6:d5:9f:
                    61:04:c4:55:ef:08:c3:4a:f7:75:98:07:d6:be:81:
                    d3:64:b8:f0:73:5f:4d:89:e2:59:d8:1c:29:21:78:
                    34:a1:0c:40:b8:31:b8:7c:6e:12:17:13:bf:24:fe:
                    bf:f0:ae:20:e3:5e:81:bc:a3:b4:6a:c2:9b:22:bd:
                    5b:20:7d:95:09:11:99:f3:12:00:c2:6b:42:54:90:
                    2c:25:3f:e1:2b:79:0f:80:72:3c:39:0a:0a:98:05:
                    22:37:e9:75:38:0a:06:e5:76:50:f6:e0:24:0c:37:
                    3c:60:c3:29:43:d0:90:c2:93:46:bd:2a:f5:38:e2:
                    73:7e:2d:64:90:9d:69:e4:b3:aa:ae:f7:c4:6b:37:
                    50:a5:fb:b2:b2:32:89:9d:80:82:1c:26:f6:89:12:
                    a7:d1:26:8f:f2:28:53:d9:d8:b2:14:da:e5:ed:13:
                    0c:4a:30:e9:98:98:d5:4c:a3:02:89:7f:4f:99:c4:
                    59:d3:86:49:a0:a8:fa:e7:f1:a8:e0:e5:c5:ce:59:
                    64:18:74:38:18:9d:39:a4:64:9d:4b:18:fb:a5:ca:
                    16:a4:d8:a6:f8:e7:fa:52:c2:f9:41:24:d5:ff:d1:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:CC:69:E4:00:92:34:19:C4:A1:79:09:DA:A1:3A:B9:8B:75:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.115.0-104.251.118.255
                  104.251.121.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:7e:b6:ff:f1:ba:a1:d7:5d:93:dd:c1:58:3e:5e:84:23:
         13:d5:ad:b7:21:cf:f3:08:90:9c:a8:6d:cb:48:9f:f5:3e:fd:
         5f:89:96:b8:dc:2a:6e:47:f9:e4:c8:f0:88:e2:5b:a1:26:25:
         c9:94:3e:c6:97:1c:24:64:c3:d8:12:27:f7:b7:91:01:2e:e5:
         b4:9a:a0:c6:99:fe:63:c7:23:3d:ad:67:ea:2b:7f:bf:38:da:
         2b:64:af:56:7a:cc:9c:c7:2f:95:b7:3d:59:a5:fa:33:62:38:
         cb:3a:88:a8:83:33:01:05:6e:94:06:e0:d0:c8:9d:98:ac:63:
         f0:3e:8b:6d:7c:ef:3c:e8:be:49:94:67:80:16:c6:33:5c:4c:
         80:c7:b8:f0:12:93:d2:1b:30:1f:93:13:61:da:b0:e8:a3:4d:
         08:77:4b:1d:a7:32:9f:e5:e2:60:cc:1a:1d:cf:e8:f0:99:e8:
         fb:96:c6:e1:45:c8:b8:fc:7a:7a:48:7d:28:14:2a:48:62:45:
         83:04:27:24:55:39:d8:bc:15:f0:19:4c:a9:81:03:21:6e:85:
         ab:f3:4d:75:75:6e:31:f7:68:ef:7c:3f:5d:6c:55:d5:fa:60:
         41:4d:66:db:b1:bb:a6:3c:c4:9c:8a:17:07:35:63:a3:4a:dd:
         61:9e:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:29:10 2026 by rpki-client