Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13c2afe0-6622-3b47-b726-f845f765f26e.roa
File:                     13c2afe0-6622-3b47-b726-f845f765f26e.roa (raw, json)
Hash identifier:          tI/8ZpocCos8QSVLyCyd/9nOvINpvWc9KsbXqnXuDks=
Subject key identifier:   7B:33:FF:F4:A5:E9:53:53:B7:94:DE:60:51:DB:79:24:79:C8:E9:05
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73CE461C659EC6A3BA980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13c2afe0-6622-3b47-b726-f845f765f26e.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        104.129.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3c:e4:61:c6:59:ec:6a:3b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=6ecf87e8-bf57-4303-b926-0073d18096cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:55:a7:a8:42:bd:4f:ea:2c:84:9f:31:9e:
                    df:dc:63:7e:d8:14:a5:b5:7c:ec:06:d8:b9:99:4a:
                    23:66:cf:f7:60:e4:57:c8:46:a0:c4:30:6c:65:12:
                    12:ec:72:cf:f6:4e:94:b6:97:27:95:97:dd:4a:30:
                    3b:e6:44:29:58:34:ce:35:b1:34:a5:1e:d4:c4:57:
                    ab:bc:0b:cd:12:29:d1:74:94:3e:34:a5:5a:4f:dd:
                    7f:79:33:02:07:28:42:0e:06:da:08:64:a5:64:28:
                    d3:c7:15:bc:78:9b:96:8f:38:c3:8c:37:0d:7e:d3:
                    c7:37:f1:f7:a7:52:29:19:b6:2c:38:8a:4a:9b:f8:
                    4c:1e:7c:22:43:bf:6e:d3:d7:44:8a:52:0b:83:1a:
                    a9:5d:bc:bd:1f:37:65:78:b7:9a:76:45:3a:04:bc:
                    28:04:09:06:ac:a2:29:92:9c:48:5e:26:dd:35:e5:
                    1c:9c:45:78:d3:c2:51:5b:3c:46:b7:7c:17:87:10:
                    26:7d:1a:8b:07:a8:e2:0d:26:ae:60:14:42:02:d2:
                    43:bc:e0:f6:9f:ac:13:9b:11:61:76:7f:c4:01:28:
                    5d:3b:f7:a6:91:d7:a6:e4:93:4a:2c:3c:94:90:4e:
                    46:ea:b4:29:6c:e7:1c:c3:fa:d1:32:bd:b6:6a:ab:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:FF:F4:A5:E9:53:53:B7:94:DE:60:51:DB:79:24:79:C8:E9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/13c2afe0-6622-3b47-b726-f845f765f26e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ea:41:2d:09:e2:1e:76:ae:9e:ca:92:93:87:22:45:41:0f:
         1c:83:81:95:da:79:98:d1:ea:7e:f9:d7:f0:cf:ba:7f:6a:5b:
         1f:68:9b:89:3e:81:98:80:2c:1b:77:49:da:63:c9:80:7c:f0:
         17:cf:4a:4f:91:4e:ed:8f:42:53:be:13:f4:cd:4f:f9:16:37:
         0c:3c:18:8c:f7:3b:7d:7a:2b:91:dd:a3:ae:4d:75:5c:74:92:
         cd:ce:95:06:3d:2c:d7:53:34:de:ab:43:83:c8:5b:21:6f:fe:
         96:8c:aa:1b:83:95:cd:a8:1f:9b:d1:16:2d:70:24:41:05:99:
         36:3f:e9:e7:9f:87:44:1b:2f:ea:0f:5c:37:a0:4a:f4:a6:32:
         0b:25:73:2a:2f:26:1b:0e:89:5e:6b:4d:c3:2a:fa:08:a0:b6:
         1f:60:92:ed:c5:e3:4f:42:21:07:3c:9c:01:a2:7d:5a:30:ad:
         78:28:3b:5d:ad:6c:7f:7f:de:b6:6d:bb:4e:63:7a:db:ab:e1:
         16:aa:3b:64:c0:88:d3:a2:17:04:c8:e9:01:f0:ce:05:ad:45:
         48:ce:7e:d2:75:01:b1:7c:22:a2:01:14:b3:27:82:8c:cc:0a:
         6b:d9:02:db:ad:66:ff:04:56:cd:e6:68:f2:87:ea:66:7c:bd:
         37:31:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:37 2026 by rpki-client