Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
File:                     58f3b9ab-ee81-3efb-90a1-932f6856911c.roa (raw, json)
Hash identifier:          NhCTYbmF25MOhJdfSM7kaRYCacQ7YHcJeEOo3fVfPCc=
Subject key identifier:   6E:C9:74:E7:23:42:E4:7D:0D:95:DB:2E:A0:A5:F4:81:CB:32:5D:E4
Certificate issuer:       /CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
Certificate serial:       010D0C9F4328584EC20C6228F5459C3CA96D0000
Authority key identifier: 5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     393431
IP address blocks:        104.219.100.0/22 maxlen: 22
                          2620:80:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:62:28:f5:45:9c:3c:a9:6d:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=a6756532-4d72-4df1-aafb-758381e8c2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:c1:4a:92:b1:0a:26:05:af:1b:09:cf:37:
                    70:e3:a8:a9:47:fd:dd:86:69:72:e7:8a:65:90:bb:
                    1c:59:61:55:47:0a:e0:0c:c3:dd:47:a1:ca:6f:8f:
                    40:3b:d8:1d:13:37:c2:d2:05:40:85:d2:b3:60:f0:
                    ab:4b:22:67:dd:d8:e2:c5:8c:e2:3e:87:7e:ef:a4:
                    7f:d6:6b:7d:32:a4:c7:d6:4c:00:ba:29:8a:e8:c0:
                    93:70:06:d2:03:bd:0f:b7:4c:67:21:23:dd:fb:4f:
                    34:66:ab:69:87:30:65:80:31:fc:ab:17:3d:1c:a6:
                    a8:52:e4:b6:96:04:55:35:20:58:53:f8:63:32:fc:
                    7d:43:16:78:dc:0e:ee:85:ab:ba:ff:5c:1b:90:0f:
                    43:e7:b2:ba:6b:0d:e5:f9:d8:bb:9b:34:b7:ae:52:
                    ee:9c:cc:dc:60:a9:83:03:e5:d4:c7:dd:4d:da:22:
                    88:2f:66:3b:85:45:ea:8b:eb:bb:05:b2:37:dd:f1:
                    cf:c5:83:bf:5c:d5:2b:0a:29:2f:f0:c6:7e:81:63:
                    9c:dc:17:51:20:5b:c0:2f:4f:73:9b:a5:e6:6b:8e:
                    f0:80:79:78:48:49:5c:11:e5:76:a0:7a:e7:ba:a6:
                    2f:cd:1d:63:18:1f:db:e0:98:bc:fc:7a:35:35:90:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:74:E7:23:42:E4:7D:0D:95:DB:2E:A0:A5:F4:81:CB:32:5D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl

            X509v3 Authority Key Identifier:
                keyid:5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.100.0/22
                IPv6:
                  2620:80:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:39:82:af:de:25:37:8d:ce:5b:97:4d:db:ed:4b:8f:73:e2:
         cf:23:6b:46:ba:9c:8e:bb:de:c2:c4:94:70:5c:8a:52:6c:36:
         2d:cf:1c:f5:22:b0:0e:b4:52:be:99:9a:23:a4:04:04:23:de:
         88:b0:a8:df:50:04:00:ca:fc:a3:7e:07:a9:7a:65:00:c1:9d:
         16:97:88:06:db:f7:3e:42:b0:86:48:d7:09:f2:85:9f:9a:af:
         ff:47:19:74:b7:9b:ea:37:4b:6a:59:ff:47:02:9f:77:2a:32:
         3f:10:e0:27:07:70:3b:35:ec:b9:72:15:af:26:89:dd:58:b7:
         9c:ee:a1:23:57:5f:15:15:79:a0:ff:42:73:53:5c:69:e2:ba:
         11:82:58:bd:62:b9:f0:2d:50:d2:61:54:8a:c7:4b:30:60:fc:
         80:c9:a9:7b:ef:43:2d:f3:92:d5:50:71:62:01:c4:80:f2:c6:
         3e:05:05:3f:70:9b:2c:2a:cf:cd:8b:69:86:c4:a0:ef:cc:dc:
         c9:2b:d9:13:6f:5c:c5:54:47:b5:35:3e:66:13:99:5f:6a:fa:
         f0:9c:a7:37:52:07:99:d6:11:3d:41:90:a3:ad:6b:52:9b:05:
         f5:d9:60:7a:56:eb:22:3d:28:1e:ef:ab:19:e2:74:ba:99:de:
         4c:f2:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:27:34 2026 by rpki-client