Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45d812a4-dbc8-3aa3-97b0-049fb3fb0fac.roa
File:                     45d812a4-dbc8-3aa3-97b0-049fb3fb0fac.roa (raw, json)
Hash identifier:          h/ZBuNCjCTuYidxuuV6HW3Wu64aoSp5Xem68z7heWDs=
Subject key identifier:   1A:9B:0C:AD:6E:3D:EA:F0:0A:34:31:04:A4:04:BF:C6:C4:78:F8:AB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F70881E65AEE41627C7B47980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45d812a4-dbc8-3aa3-97b0-049fb3fb0fac.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     13335
IP address blocks:        104.22.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:1e:65:ae:e4:16:27:c7:b4:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=0a8f36ec-c0a2-4a09-bcbc-5fa7ab3a748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:fd:cd:b9:90:f1:5b:01:ca:62:33:10:33:
                    77:7b:3b:e4:a8:c2:ac:b6:7d:5b:b1:39:54:45:12:
                    34:a5:59:38:ec:f0:c2:e3:0f:91:6e:0a:aa:f2:36:
                    bb:28:5f:c1:2b:8b:09:0c:c9:fb:db:c1:1e:06:4b:
                    06:4e:35:0c:33:1b:8f:69:31:cb:b8:5f:b5:d0:69:
                    50:5c:03:6b:2d:23:b5:5c:f9:17:68:81:b8:fd:49:
                    e2:55:1c:13:c7:8f:6e:4f:70:9c:63:a9:15:66:ad:
                    2d:4f:5d:41:58:14:29:bc:68:26:67:78:bb:ff:49:
                    da:44:82:c5:77:59:a1:87:7c:16:a7:72:90:6b:ff:
                    58:b0:c5:7d:35:40:5a:a7:86:ee:51:2d:72:cc:74:
                    3e:25:b8:dc:de:c3:ff:0f:07:9f:fa:e3:58:3c:36:
                    54:43:9b:f1:b7:fe:14:38:59:0c:32:53:f4:e4:01:
                    09:5f:cd:16:4f:1c:41:2e:8d:67:ef:83:34:3b:0b:
                    59:c7:01:67:39:15:15:d4:27:3c:43:98:8e:af:9a:
                    18:67:06:54:1a:bf:d7:62:8d:31:a2:a6:0e:6d:10:
                    69:04:9d:1e:88:1b:f2:ad:f8:5e:eb:b2:dd:b2:94:
                    0b:b4:38:be:05:4f:2a:97:00:d3:02:bd:ee:11:92:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9B:0C:AD:6E:3D:EA:F0:0A:34:31:04:A4:04:BF:C6:C4:78:F8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/45d812a4-dbc8-3aa3-97b0-049fb3fb0fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:36:76:b1:e8:b0:55:56:df:ab:8c:e7:12:35:57:a8:43:14:
         fd:40:49:75:b2:2d:46:a2:46:40:84:f6:b5:81:b6:eb:8f:2f:
         25:ab:c3:8f:1e:5e:00:e5:bc:9a:11:88:af:64:e4:be:4e:b8:
         7d:51:d6:59:45:a1:96:d2:48:ae:c9:fb:91:80:79:44:38:51:
         2b:89:cb:c3:1c:c8:ab:5a:7a:64:12:d2:40:c7:89:c7:07:75:
         17:87:13:4c:00:84:84:f4:8a:05:b7:d3:47:91:2a:78:00:96:
         34:93:f5:83:15:ac:c1:8a:37:90:54:a6:f9:12:e0:b6:7f:4b:
         16:af:47:5c:a9:8c:04:a4:bb:54:f3:2a:b0:38:51:88:e6:89:
         48:43:c7:c8:50:46:51:f8:b2:64:46:4d:2d:dc:94:6b:99:47:
         46:dd:f6:ef:ca:83:83:f4:0e:1b:37:ef:8e:55:d5:78:91:35:
         19:98:96:fb:0c:58:72:e7:4a:d2:da:31:15:f8:96:60:60:47:
         ef:ba:2c:df:32:00:47:ec:4d:82:73:20:ff:34:4a:05:08:26:
         20:74:e3:c6:2c:7e:bd:47:2d:d3:2b:8a:13:d8:da:1e:15:54:
         df:bf:ff:d3:11:81:e9:a6:a3:53:a9:c2:af:fb:9d:f3:c8:fc:
         55:c0:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:38:50 2026 by rpki-client