Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
File:                     58ad2792-dfe9-39d9-8e32-bb768e23741b.roa (raw, json)
Hash identifier:          ILnv4/raEv9RtItnPK1/MeF/l929feIa4YWFox30AKk=
Subject key identifier:   48:07:F8:97:3F:2B:17:22:97:12:5A:07:77:E8:CC:28:89:ED:5D:AF
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584EA79414B549E00DFA301AD080
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63267
IP address blocks:        104.171.208.0/24 maxlen: 24
                          104.171.209.0/24 maxlen: 24
                          104.171.210.0/24 maxlen: 24
                          104.171.211.0/24 maxlen: 24
                          104.171.212.0/24 maxlen: 24
                          104.171.213.0/24 maxlen: 24
                          104.171.214.0/24 maxlen: 24
                          104.171.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:14:b5:49:e0:0d:fa:30:1a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c0e3ffe-d11a-44cf-b95f-c05ef29c907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:36:7f:3b:9f:1e:79:19:cb:f0:12:67:81:
                    63:cf:e9:87:7f:03:e2:5b:c9:56:27:df:32:93:3b:
                    ad:2f:ab:d2:c5:d5:39:1b:4a:d9:d3:2c:26:28:4a:
                    8e:42:92:31:61:98:fa:59:69:fb:e8:d2:32:8e:7d:
                    29:22:da:2e:53:1d:d6:09:c8:6b:7d:b1:f5:62:d7:
                    90:40:d8:48:52:cd:23:09:2c:ac:ef:e3:d3:dd:26:
                    ed:16:04:34:1f:55:4f:64:22:2f:bc:d9:73:38:ca:
                    49:ca:86:31:fe:76:d6:da:5a:a2:f1:21:24:b6:7a:
                    6e:21:35:d9:9c:86:48:90:44:72:ff:a4:ec:29:62:
                    79:d9:8b:59:13:e9:b2:0f:06:91:79:78:01:02:ac:
                    ea:85:62:35:99:c6:34:eb:de:52:3e:6a:2d:4c:19:
                    bb:e9:b3:e0:af:4b:7f:41:59:55:82:81:d1:3f:76:
                    58:a6:ec:57:d4:ca:8f:54:d7:de:76:22:09:26:79:
                    2f:da:0a:b2:bb:b0:13:4c:16:af:31:aa:55:97:7c:
                    d9:34:bc:93:11:75:e3:14:43:01:4c:00:99:50:db:
                    99:b6:7c:96:79:86:4a:81:9a:18:e0:0c:d3:81:6d:
                    f8:95:af:6d:0a:0c:d5:15:9f:78:42:67:fb:46:18:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:07:F8:97:3F:2B:17:22:97:12:5A:07:77:E8:CC:28:89:ED:5D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:bc:65:38:3b:0c:6a:ae:2a:1c:01:54:cc:0d:94:15:d7:
         b4:8e:b1:53:40:0c:1c:14:2a:d0:c8:ff:44:e9:18:c5:d6:82:
         5d:28:34:ed:4b:a4:2f:c6:a4:00:9d:43:cf:69:e6:75:04:22:
         8a:d9:d5:b8:ab:90:c0:19:44:1e:49:d3:88:3f:99:e4:21:1c:
         61:59:8c:39:7e:e3:5e:53:65:53:8d:18:a1:b0:23:91:7a:1c:
         a5:d2:03:00:a5:63:19:74:20:97:fa:34:b5:a4:b9:11:99:49:
         ba:23:16:22:40:6e:59:29:1d:b0:04:ab:9d:e4:2f:31:e0:00:
         72:d1:eb:77:f3:23:f9:6c:ff:ca:cb:ad:57:c0:56:c7:3f:2c:
         e5:07:6d:41:24:5b:2b:f0:fc:a6:80:5e:ab:0f:3a:ca:ed:69:
         bb:c5:57:21:ca:86:0a:2a:73:54:51:94:51:79:a5:e5:aa:86:
         45:28:b0:4f:2f:96:6f:ef:41:04:39:1b:51:0b:ff:19:ee:aa:
         24:6b:55:2e:d3:c4:bd:62:cb:41:b1:4e:95:d2:b6:aa:66:9a:
         bf:6b:46:4c:4c:0a:b1:ed:a9:ac:78:78:57:e3:ad:d5:a6:57:
         1b:09:12:b8:7d:fe:7f:f5:a1:9c:c1:2e:cb:13:77:61:d8:6f:
         c1:8c:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:44:09 2026 by rpki-client