Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/317f1134-28b7-3f98-bcae-bf64e87bb219.roa
File:                     317f1134-28b7-3f98-bcae-bf64e87bb219.roa (raw, json)
Hash identifier:          iQzmf+BtY9UWS18A+73YVE0Ii9i7jar2osjkzm1NO3Y=
Subject key identifier:   CC:5D:7A:EC:50:A9:A4:DA:FA:5F:18:B8:60:6F:67:65:5F:65:CE:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F024216BDE2DB88A837BB9B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/317f1134-28b7-3f98-bcae-bf64e87bb219.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     13335
IP address blocks:        104.22.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:16:bd:e2:db:88:a8:37:bb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=8af0b47a-ba14-4c65-820f-ddbc5b1935f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:06:61:83:77:44:34:ec:ff:10:e5:3c:d0:
                    cc:b8:94:ce:ee:bd:64:06:11:4a:51:4f:22:b3:a9:
                    9f:49:68:81:e7:90:39:34:1b:51:bb:f8:5d:c2:a1:
                    8d:08:56:b9:19:51:e6:92:21:1b:fe:5c:1a:3c:41:
                    91:c0:da:54:fe:d7:50:2e:a9:a8:a7:7a:09:6e:2d:
                    7b:1b:14:d1:01:cc:b8:2a:b7:6f:24:e8:1a:48:15:
                    8e:bc:8d:d7:df:25:58:07:a9:0f:1e:ac:03:26:62:
                    0f:6c:2c:1e:81:3b:7e:20:c0:2a:71:e2:56:6d:84:
                    77:b0:46:20:c6:1c:93:90:02:c2:53:89:3c:87:0d:
                    c4:c4:7d:6c:c4:cf:9a:d3:be:c3:79:3b:00:2f:05:
                    d6:d7:80:dd:55:ca:10:8f:e5:2d:dc:03:ff:b6:28:
                    a9:27:02:15:22:51:08:69:49:0d:0f:95:54:c2:0d:
                    2c:e4:ca:52:dc:b4:80:d2:f0:6d:82:7a:9a:72:77:
                    d1:3d:67:3f:b3:a5:8f:ca:7d:9d:ce:bc:56:83:11:
                    06:f0:25:36:0c:21:19:7a:85:46:e0:5f:54:2a:37:
                    d3:21:8b:88:53:bf:79:34:50:07:1d:a8:27:e0:3b:
                    79:cb:17:e3:b7:67:c8:97:e9:89:a9:80:37:9f:13:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:7A:EC:50:A9:A4:DA:FA:5F:18:B8:60:6F:67:65:5F:65:CE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/317f1134-28b7-3f98-bcae-bf64e87bb219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:7a:d5:2a:d8:df:36:9c:37:d7:e3:d1:c6:21:97:76:a9:
         20:8a:8c:fc:16:2c:2b:c2:c9:be:ff:19:a9:79:94:c1:62:e5:
         77:27:5c:5a:fa:70:c9:a1:8c:e8:6c:bf:92:72:fd:e8:ae:d0:
         35:da:8b:92:54:77:a2:ff:2c:be:a5:7a:9b:df:04:3a:54:93:
         84:d4:f7:42:7c:69:da:ef:c9:b8:d8:17:ea:8c:37:c0:f1:16:
         6a:7a:8a:e6:91:f5:a1:e7:91:44:10:ac:12:75:b0:32:31:eb:
         a5:6d:24:f1:82:86:b5:18:c2:8b:8a:18:64:9f:d1:49:2d:de:
         00:6a:05:fa:4f:96:70:a2:4d:88:6a:2b:60:2f:36:13:82:63:
         3f:47:b7:95:62:5d:24:22:5d:89:d9:01:64:fc:03:85:49:f4:
         42:63:79:96:c8:c7:13:3e:53:88:10:d9:ab:b4:e7:f4:26:45:
         50:ad:12:9c:3c:0d:dd:d0:75:44:7d:91:a4:bf:b8:7c:19:c1:
         4e:72:b8:29:33:95:14:71:6c:1d:7b:42:5c:52:91:9d:f9:39:
         64:25:26:63:3d:ac:78:c8:db:d5:83:c3:dc:d6:94:73:00:20:
         f6:e0:86:67:c9:e6:ab:13:24:c6:d4:97:80:31:62:a7:c8:37:
         59:fb:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:06 2026 by rpki-client