Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1633197c-231c-3d55-bd9b-e072eb56e4dc.roa
File:                     1633197c-231c-3d55-bd9b-e072eb56e4dc.roa (raw, json)
Hash identifier:          Fbw+0bukImFGo9PcQAWaxDmUVS6SSDYOVy/hoP6s5W4=
Subject key identifier:   3F:22:C7:62:E9:CB:A1:9B:BF:5F:1B:5B:06:AD:CC:0F:F3:CC:B7:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB74B5E770579A878CB38C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1633197c-231c-3d55-bd9b-e072eb56e4dc.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        104.22.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:4b:5e:77:05:79:a8:78:cb:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=5f8352bf-4d69-42bd-b0be-47cb6c0adbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:ca:58:fd:a2:6b:19:53:d3:90:ff:01:ec:
                    34:63:ec:0d:e2:b0:97:3a:de:ba:cf:b1:b5:9f:37:
                    be:90:ff:46:66:22:17:ee:af:2b:6f:a8:05:92:8f:
                    f5:97:c6:f9:af:37:ae:ec:d0:a4:98:d3:4a:e2:d8:
                    bb:a5:18:be:53:cf:fd:de:07:d9:55:6d:1e:84:05:
                    d7:d3:b3:29:42:75:9c:97:f2:94:c7:5a:f2:3e:f9:
                    44:b7:06:fd:8d:3a:23:c2:dc:f1:cf:56:12:c0:ef:
                    9e:7a:53:75:78:6d:54:15:1b:8a:d2:2a:6e:87:63:
                    f7:28:af:78:04:93:18:12:c4:8a:99:f1:c2:8b:80:
                    af:3b:b1:00:6e:1a:76:a2:8e:1b:36:43:9d:c0:23:
                    48:8b:7e:af:d3:6a:be:c6:0a:12:48:d6:de:5a:94:
                    03:84:04:99:89:d9:70:39:04:62:e4:db:b7:dc:7c:
                    d2:fd:b7:aa:be:dc:e8:4f:18:a8:e4:2c:f5:b9:ce:
                    79:97:92:34:08:e3:34:3a:15:03:39:5e:23:20:ab:
                    a0:17:8e:50:72:45:53:36:db:40:34:00:10:60:37:
                    97:56:e0:2e:32:65:03:e6:0f:e3:6e:4a:28:02:b8:
                    db:2e:80:c9:b4:54:70:52:a3:32:ae:8e:e6:7d:92:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:C7:62:E9:CB:A1:9B:BF:5F:1B:5B:06:AD:CC:0F:F3:CC:B7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1633197c-231c-3d55-bd9b-e072eb56e4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:90:29:65:7b:52:76:ce:9d:20:fc:43:6e:84:cc:70:f8:
         27:40:52:8d:6e:8d:66:06:0c:c2:93:06:67:f2:5d:04:62:4e:
         53:9f:f5:ae:98:5f:31:12:81:8f:d6:49:7c:ce:14:ce:ba:28:
         b8:50:18:7f:9f:b1:d0:e7:e2:92:e2:f5:aa:bb:1d:5f:01:25:
         c9:1d:18:5e:64:8d:5f:ba:92:f6:a1:2e:a5:3e:93:93:f1:5a:
         2a:a0:3a:4f:f0:45:d4:99:0e:c7:9c:9c:eb:28:a9:3b:a9:94:
         3c:cb:49:32:c0:d6:58:fe:a7:61:5b:7d:cd:bf:c7:63:8c:89:
         28:72:23:39:d2:e6:d1:a5:31:5d:5e:cb:23:31:c8:df:d9:0a:
         20:1d:d3:f2:a6:da:77:f0:52:dc:05:32:1b:be:c2:bc:ea:9a:
         e0:8d:15:2d:72:93:63:23:98:84:fa:ae:43:0b:ee:13:cf:5b:
         cf:bf:76:44:1b:af:7b:80:b1:18:12:99:11:06:c1:84:42:06:
         f3:99:1a:70:43:2d:81:6f:c9:5e:fc:91:13:5c:1e:16:d8:80:
         98:7c:a1:14:de:3f:17:d3:62:6c:eb:ac:dc:ef:36:eb:d4:ca:
         6e:46:3e:75:24:4f:3d:81:d9:b9:66:fb:d2:17:64:46:96:9e:
         34:38:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:12 2026 by rpki-client