Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
File:                     58ad2792-dfe9-39d9-8e32-bb768e23741b.roa (raw, json)
Hash identifier:          qiFeNSNGu0/h2SkSHNpnWaTgX2QMU86GlUEgy8dnHW0=
Subject key identifier:   17:D4:85:98:ED:49:65:BF:F4:67:81:45:9E:53:F0:27:77:6C:AF:0A
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584DEDE0970E03E64A43EDB40980
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     63267
IP address blocks:        104.171.208.0/24 maxlen: 24
                          104.171.209.0/24 maxlen: 24
                          104.171.210.0/24 maxlen: 24
                          104.171.211.0/24 maxlen: 24
                          104.171.212.0/24 maxlen: 24
                          104.171.213.0/24 maxlen: 24
                          104.171.214.0/24 maxlen: 24
                          104.171.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:97:0e:03:e6:4a:43:ed:b4:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=7032b822-11ae-46d1-8909-7c32fe17e153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:1c:2f:eb:65:9d:88:30:4d:e4:94:31:dc:
                    ce:63:79:0e:3e:a6:90:8b:45:49:62:85:53:72:e3:
                    09:e4:a6:31:70:a7:0f:a6:4d:e2:5a:85:35:eb:e2:
                    11:1c:4e:29:81:1c:d5:d3:6d:c7:fa:5b:70:af:08:
                    9b:c2:b8:22:92:94:cc:57:cc:80:a0:94:9e:af:d1:
                    aa:1b:9d:80:57:77:df:fc:85:52:21:65:8d:f7:fc:
                    0e:57:d6:ad:89:a8:1a:b0:03:28:6d:bd:c2:0b:f2:
                    2c:93:1f:0b:b6:2c:a5:7c:00:f4:00:a8:33:b5:cc:
                    c7:80:24:00:79:4a:aa:0c:16:c6:17:40:14:91:d6:
                    47:b6:76:5a:16:b5:d5:08:38:5b:c6:b1:14:13:ca:
                    9d:1f:3f:10:75:d7:1d:f6:07:5b:5c:c4:c1:76:08:
                    55:e7:ab:95:68:20:94:10:b3:cc:1c:e7:f3:92:6e:
                    93:22:c1:93:8a:33:94:26:d4:bb:14:69:7c:72:e0:
                    d2:59:ad:74:ff:1a:18:92:51:39:5d:38:31:e0:e5:
                    e8:8e:42:32:52:2a:57:3f:e7:42:35:92:fd:bc:06:
                    96:b9:7b:5d:eb:53:ac:52:db:5a:60:a9:a3:35:43:
                    4d:b7:12:b7:59:32:0f:cb:4e:53:95:7a:52:b5:ca:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:85:98:ED:49:65:BF:F4:67:81:45:9E:53:F0:27:77:6C:AF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:d7:df:53:7f:a0:da:85:ad:68:54:93:5b:b7:20:c6:f4:
         d4:f9:78:91:c3:2f:50:4a:45:3a:ff:05:7e:0b:15:29:ab:1e:
         9b:68:69:45:d2:a4:70:fa:2d:48:a5:d4:4f:e0:e8:7b:8a:57:
         0c:12:e2:29:62:3b:7f:9f:cb:8a:2b:74:3f:8c:ce:85:6d:14:
         a1:ae:ef:56:fc:96:0d:42:5f:5e:02:2c:0a:fb:33:e0:62:05:
         c9:2d:af:61:e9:ec:86:12:aa:c2:ec:cc:61:e5:b5:0e:90:8c:
         36:bd:de:0d:02:59:cf:ae:9d:18:fd:23:87:c8:f1:0f:ac:56:
         e2:23:81:1d:6c:2a:26:eb:db:a6:e0:89:71:c7:d0:a9:d0:87:
         55:b4:a1:48:10:35:e8:bb:ce:f0:49:a1:76:44:7f:04:84:17:
         02:72:36:1c:67:8c:8a:d2:7c:53:c3:2c:4f:26:9f:26:39:01:
         fc:0e:a7:72:44:d1:4a:3b:b0:e7:90:12:ec:2c:61:c7:02:12:
         da:92:38:07:c4:ca:b5:12:5a:c5:3c:3d:46:6c:6f:c1:ca:dc:
         1d:b6:01:59:08:1f:65:92:2a:01:aa:ab:2c:27:a1:34:f5:cf:
         ba:b2:dc:79:3c:82:88:45:e5:5a:0f:31:f2:8c:f2:8d:3c:3b:
         10:e3:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 16:05:02 2026 by rpki-client