Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7633694e-613b-3387-85de-5c16e47af0ce.roa
File:                     7633694e-613b-3387-85de-5c16e47af0ce.roa (raw, json)
Hash identifier:          NwnvkNH5S77OOSSe2+MLL+aqZXr8ROlhtbvYSZb6Pu0=
Subject key identifier:   CB:2C:4A:91:37:0D:32:F5:41:1F:A3:8C:9B:EA:BD:45:66:1D:DB:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F2957D2A71906FF492DE6AD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7633694e-613b-3387-85de-5c16e47af0ce.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13335
IP address blocks:        104.22.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:d2:a7:19:06:ff:49:2d:e6:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e2371189-7e13-424a-9de7-497de6edc5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:5c:c0:ec:87:09:1e:bc:35:fb:4f:15:88:
                    a2:2c:ca:a2:3b:fc:85:d3:99:4b:87:62:b2:f8:af:
                    48:d7:0a:51:ee:c0:88:68:fa:38:ac:8d:b1:f8:53:
                    d9:4e:7f:5a:5d:70:52:60:3c:a4:c5:2f:86:e3:0b:
                    14:1c:44:c4:a8:73:8d:69:c1:e2:9c:b0:fb:a9:a7:
                    61:53:e2:65:74:03:02:b4:db:4d:92:09:6f:bf:4b:
                    c0:5a:d9:c3:16:10:d8:50:2b:30:ec:f2:29:0e:3a:
                    75:cb:78:98:be:78:44:06:16:95:f5:67:ec:b7:cc:
                    d7:4d:25:fe:e2:63:f2:0c:5d:b5:b6:e2:cc:49:9f:
                    d0:9f:b5:fd:63:40:5f:64:8f:51:d3:d8:45:fd:1f:
                    da:04:44:7f:ce:cf:f9:02:1c:cf:b3:92:5f:fb:32:
                    c1:1b:e9:c6:af:4b:46:6d:71:e8:a0:d4:8b:a2:5b:
                    28:0a:8e:9e:26:76:23:48:16:b7:5e:14:b3:db:8b:
                    63:50:a0:a9:a8:73:10:1d:96:79:a9:7f:df:20:77:
                    7a:27:f1:7e:26:e4:69:60:f5:d4:a6:e2:b5:8f:dc:
                    ff:51:d4:ea:1c:69:25:c8:19:14:39:66:c3:22:b0:
                    37:f1:7a:0b:6b:6b:15:85:54:f7:c3:66:67:c7:d6:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:4A:91:37:0D:32:F5:41:1F:A3:8C:9B:EA:BD:45:66:1D:DB:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7633694e-613b-3387-85de-5c16e47af0ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:12:04:cf:98:eb:94:9b:e9:24:cc:31:61:e3:3d:70:df:d3:
         9f:7b:80:96:a1:c5:bb:fa:37:06:45:a2:89:f1:44:c3:76:90:
         ec:4c:9f:6d:0d:d4:b1:cf:17:11:bd:b8:ba:76:d4:7f:d7:d4:
         c8:87:92:3f:9d:d4:3b:c1:33:53:07:6c:95:d9:35:a2:3f:e0:
         47:07:bf:d4:25:15:9e:3e:9c:2a:19:da:c1:70:0f:1f:06:90:
         f2:99:3c:11:5f:29:21:18:9e:c5:d0:d4:0b:94:04:67:81:db:
         c6:be:a4:72:e8:27:f0:a9:cb:ef:ac:8c:73:75:a5:f0:4a:9d:
         80:af:73:51:55:19:6f:fb:47:af:0b:81:f8:82:1d:b0:86:d5:
         51:6e:bb:3f:37:ea:e6:ab:b2:d2:c1:de:a6:da:92:df:2b:2e:
         f3:4d:c6:c6:b6:d3:08:eb:93:ca:0d:3b:1c:a1:dd:0d:4c:8b:
         55:21:16:74:b7:03:b1:28:f2:8e:2d:42:a1:47:42:6b:eb:66:
         4a:6b:c7:e8:41:2f:68:14:ff:96:a7:e9:81:b8:6b:36:ae:35:
         18:84:ae:b2:72:06:78:b3:9b:28:3c:b8:81:d7:2a:07:2d:8c:
         0a:05:46:a0:d1:bf:c6:7d:18:d7:ed:f5:d1:5b:8a:d6:6c:43:
         fd:c6:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:37:06 2026 by rpki-client