Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa
File:                     5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa (raw, json)
Hash identifier:          HTHVXSX2ZvnF0XoFK8Et7qZhuv6QqylrAIm+SXJ5p98=
Subject key identifier:   F3:FA:BC:86:B0:35:44:C1:BA:F8:28:EF:AA:4D:EB:A6:8C:F1:01:60
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584D15A26BE0AC53E469D4D6BCC0
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     63201
IP address blocks:        104.193.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:6b:e0:ac:53:e4:69:d4:d6:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=d253c95e-bf45-4a3d-8c0e-f0f9b81f8a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:d2:96:d6:a7:b9:d8:f7:3a:fe:8b:56:2d:
                    e5:2b:c5:75:39:9a:53:c1:1f:3a:10:ea:e6:4e:22:
                    55:a3:24:1d:ba:e0:c6:e2:96:c0:42:e0:84:a0:a0:
                    a7:e7:f1:dc:20:8f:45:98:02:53:9f:5c:e6:fe:68:
                    a2:2a:dd:63:30:8e:2f:27:00:df:85:9b:b9:5b:98:
                    e0:e5:42:7e:81:7f:e5:26:7c:34:51:6e:74:89:51:
                    95:81:b4:9a:c1:9b:58:f4:9d:1a:61:32:f0:28:13:
                    44:97:ea:1a:3b:86:49:77:bb:cc:53:c5:00:b1:b6:
                    96:7f:d0:e9:dd:79:83:47:f9:10:f5:9a:bc:88:24:
                    d8:b1:53:10:49:d0:bd:1f:ac:2b:c7:00:74:b8:a3:
                    c8:67:ac:17:21:b9:76:57:23:36:90:6a:6e:54:18:
                    b1:6b:d9:28:1c:d8:e7:2c:71:3d:94:14:3c:c3:37:
                    0b:c8:28:32:1f:0f:1f:20:20:1e:65:e3:9d:60:b5:
                    40:27:21:1e:f6:2e:8d:b7:e6:50:43:72:bf:ec:5c:
                    1d:02:0b:06:f1:69:04:ca:6a:95:c8:4e:60:b3:95:
                    93:b3:04:6b:5d:8d:30:80:54:f0:47:3f:6c:cd:72:
                    e1:b4:56:7e:62:43:6c:36:57:7c:be:dc:8a:00:be:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:BC:86:B0:35:44:C1:BA:F8:28:EF:AA:4D:EB:A6:8C:F1:01:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:5e:5d:15:b3:33:30:54:e5:78:9d:c9:da:2f:63:bb:b9:eb:
         ae:e7:af:74:f4:80:9a:8c:d1:f9:c5:5a:16:a8:4c:11:c5:0b:
         c8:79:79:39:4b:dd:95:ec:af:75:c3:ab:76:1d:dc:df:6d:0c:
         a1:58:fe:85:3a:e3:97:15:33:f3:89:9a:af:d9:05:d7:b8:6b:
         bc:0e:3c:eb:ba:b3:95:4e:c9:c0:93:b3:1c:b3:3f:b7:c6:88:
         7e:c0:ee:ab:72:65:70:7d:53:e6:09:4c:34:50:7e:58:b1:aa:
         ca:ba:9b:5b:29:c8:62:59:77:57:26:91:81:89:5b:5a:ee:05:
         39:77:99:0b:b0:ed:dc:68:e8:79:77:a0:13:24:77:b8:8c:a9:
         74:ba:33:47:30:ba:de:e9:a9:6e:68:dd:d1:dc:77:b3:34:43:
         6d:31:fc:b2:67:65:29:68:61:19:39:e7:ff:f3:52:0e:81:8b:
         b0:c4:ff:96:c6:e9:29:98:a3:a1:f7:5e:d7:a1:07:bb:c2:0d:
         e5:36:79:2b:b0:d8:9c:4c:d4:17:31:e3:9c:f7:7f:34:0b:66:
         36:74:f9:f8:36:f9:47:30:aa:04:f4:97:6f:b1:14:bd:cb:c9:
         16:77:0a:aa:1f:c7:19:b1:1c:d4:77:80:88:34:eb:3a:f5:91:
         11:36:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:42 2026 by rpki-client