Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
File:                     3e73c06b-902f-3599-accc-26c4dac8766a.roa (raw, json)
Hash identifier:          iMED0wOJPAVGVtERkWUcP2DEZYvDUxXN/dcmTW2GttE=
Subject key identifier:   17:77:BB:CA:77:F7:15:D5:B4:C0:39:40:3B:8F:A0:AB:9C:35:F1:EF
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584DCF2B0BF0045E6FFF4C1E6740
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     40342
IP address blocks:        104.200.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0b:f0:04:5e:6f:ff:4c:1e:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=fe243e80-f526-4ab2-af81-7f90ce74168a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:a2:d6:7e:79:61:6a:41:bf:e3:94:4b:3b:
                    9d:8a:6b:14:a5:ed:ad:3f:2f:0b:eb:c4:84:27:37:
                    04:68:51:2e:c8:80:32:0c:66:fc:b4:75:e2:0f:e3:
                    1b:b9:ba:9c:f6:d7:48:ca:12:b2:f5:9e:c5:7f:33:
                    df:7e:28:cf:9a:85:9f:c6:b2:06:79:70:6c:68:1c:
                    36:fb:ca:1f:e8:b4:7a:c6:c2:46:a5:f2:9f:28:ad:
                    cd:1f:e2:ac:3c:2b:b1:a8:ee:4b:14:3c:29:af:a2:
                    0a:cb:58:bf:97:ff:4b:2f:ab:7c:34:51:d6:5a:64:
                    b3:56:05:de:9e:ae:77:7a:78:af:5f:c1:95:3f:8d:
                    3e:2b:1d:a5:ce:c0:24:32:25:db:8e:e3:a3:0f:3d:
                    ac:a5:c1:e2:1a:d1:21:b9:39:fc:f9:5d:7b:9f:cb:
                    c0:c5:26:74:88:4b:c9:dc:2c:36:ed:2d:49:72:7a:
                    ad:b4:e6:87:86:33:ff:74:fe:c7:57:e2:ff:49:59:
                    ca:1c:ca:31:7b:ac:3e:f4:f7:e2:f2:d7:6d:47:8c:
                    f1:75:3d:ad:b7:8e:43:9f:13:95:63:44:d8:05:7c:
                    36:49:9d:8d:a1:4c:79:99:cc:6b:4c:bd:c6:e7:e4:
                    6c:3c:ed:ae:89:c6:ee:6a:a7:b9:64:6c:f3:50:cd:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:77:BB:CA:77:F7:15:D5:B4:C0:39:40:3B:8F:A0:AB:9C:35:F1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:5c:bb:7c:1d:29:3f:a2:1f:09:b2:03:2e:b2:21:b7:7d:
         57:d9:59:ef:b9:7c:71:10:c2:c5:54:ff:0b:d2:87:ad:c4:82:
         04:d9:39:4c:53:b6:5f:ff:e1:5b:a1:91:24:9f:ab:3e:62:d0:
         63:0d:8d:b5:9f:c3:5a:28:22:4f:24:0c:cc:21:c3:82:06:f8:
         9f:de:de:31:a6:f5:a9:39:15:a3:fb:27:06:a0:1b:75:e2:7d:
         dd:bf:42:c7:51:6e:8a:a5:ae:91:92:cb:01:a1:9e:44:b7:38:
         7d:bb:63:d3:15:a3:fb:fd:0a:54:f2:6f:aa:ed:b2:17:ec:2c:
         ec:10:f1:2d:5d:87:7b:a3:7f:3d:6d:96:45:17:3e:bb:03:ef:
         9e:41:1a:cc:b0:1f:48:7c:17:56:c9:94:86:ef:48:f8:e2:fa:
         7e:12:7b:8b:1a:c9:e3:2a:38:ce:bd:e1:05:64:06:17:00:de:
         3f:05:74:53:41:62:d8:65:4b:73:f0:1b:c1:a1:df:34:a3:ef:
         91:f3:27:b6:af:8c:f5:35:ed:50:2a:67:43:d9:67:13:8f:14:
         21:83:7c:9d:52:72:56:de:75:72:0d:57:59:0f:c3:96:70:4f:
         0d:77:72:ec:06:2c:fb:9d:ca:e4:1b:0f:f1:29:7e:f0:c6:be:
         39:6b:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:13 2026 by rpki-client