Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa
File:                     1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa (raw, json)
Hash identifier:          SJDtesT/KQPgOL0x3D/1VGFAMhdCJQGBnBB4WJvSBcI=
Subject key identifier:   AC:31:EE:AB:8B:12:69:34:6B:E3:A1:7E:83:1A:05:31:C3:71:FE:A0
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584DF6E9F31CB1A1DAB292E31DD0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa
Signing time:             Tue 26 May 2026 18:41:49 +0000
ROA not before:           Tue 26 May 2026 18:41:49 +0000
ROA not after:            Mon 24 Aug 2026 18:41:49 +0000
asID:                     198949
IP address blocks:        104.254.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:e9:f3:1c:b1:a1:da:b2:92:e3:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: May 26 18:41:49 2026 GMT
            Not After : Aug 24 18:41:49 2026 GMT
        Subject: CN=7c77682e-da64-4368-a14a-9ff6cc15e601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:00:02:43:47:f8:81:07:37:71:c9:5b:26:
                    4b:78:59:be:1d:9a:3d:61:24:a1:3c:68:68:04:22:
                    5c:5e:42:4b:48:15:48:de:34:20:c6:1f:c6:6a:af:
                    30:83:6a:43:31:2c:82:3a:2d:50:d2:10:dc:ed:5b:
                    e2:42:13:45:33:9e:5e:17:82:fd:37:f0:5f:9c:08:
                    9e:bd:47:ce:12:d5:36:a7:c7:62:d2:d9:96:e8:0e:
                    7a:5c:a8:9c:a8:1e:87:4a:bc:3c:cc:25:21:c5:16:
                    d6:11:3e:cc:46:ba:fb:1f:78:08:a2:0e:25:ab:f0:
                    96:7c:09:ef:8c:35:19:82:56:b8:a2:52:8b:87:50:
                    7c:86:bf:b4:a7:01:b0:9b:87:b8:6a:5f:fa:60:ae:
                    31:9a:d8:3f:d9:2b:86:13:39:bf:a7:7a:6a:cd:7e:
                    f1:09:02:e8:58:43:00:21:1f:7e:0c:d7:ac:ed:ba:
                    20:8c:d8:98:18:69:0d:56:84:a3:3c:69:70:1c:e3:
                    47:f4:c1:3a:a2:d1:46:99:eb:2a:20:8a:b2:4f:b6:
                    70:14:45:35:cb:d6:6d:de:4e:05:90:5d:54:60:ae:
                    cc:12:8b:28:57:b7:55:9f:dc:df:f2:56:c3:bb:fa:
                    5a:91:c0:df:36:77:8d:4d:92:0b:5b:d3:e1:c4:26:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:EE:AB:8B:12:69:34:6B:E3:A1:7E:83:1A:05:31:C3:71:FE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:67:5c:10:b5:54:67:8e:fe:6b:19:e9:68:6c:f0:57:87:0a:
         4e:5b:9e:31:ab:c0:fb:95:fd:e9:09:95:3d:05:46:99:4b:e8:
         7d:81:ef:c1:b8:27:2d:09:0f:1d:74:ed:f0:61:d2:28:6a:7f:
         9a:6e:f7:e7:30:ae:90:67:e6:4f:d1:6c:06:df:b0:d4:55:2b:
         14:81:35:35:ed:fe:d9:c8:9a:db:78:d9:d8:87:57:60:a9:00:
         94:b3:a5:9e:ea:6d:ab:c6:d7:8a:de:21:7b:67:06:e4:9e:3e:
         0b:c4:36:37:d9:51:be:30:bc:a9:98:85:bd:52:d5:1b:ae:7f:
         25:78:a4:68:78:5f:ff:fd:a7:7b:d5:ed:34:3a:7d:41:02:69:
         96:1e:0e:7a:b7:ab:b4:2a:62:de:be:a6:1b:10:76:d0:75:5a:
         6d:40:81:bf:68:1e:75:41:6d:0f:5d:fd:b8:73:b1:16:0d:80:
         f3:98:75:97:35:58:fd:0b:9a:7a:69:cd:b3:8b:a9:00:38:bf:
         10:d5:b4:ce:8d:2a:ab:c8:fa:f1:8f:43:5a:a0:4b:69:b9:31:
         da:e0:69:e1:b2:1a:c9:d6:c0:63:06:d1:6f:dc:c0:ec:03:a6:
         e3:a2:f5:6c:98:dc:8e:cb:fa:f3:30:35:13:59:df:bd:4f:e6:
         2a:eb:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:08:17 2026 by rpki-client