Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa
File:                     811e6a88-0d78-38d1-8165-7cff3dcc8978.roa (raw, json)
Hash identifier:          uEx9NLNqXNcPt7sVOBfenmgRRuqtoypVs9GwAReJmQQ=
Subject key identifier:   6B:C2:70:AA:0B:6C:5E:85:CF:E4:CB:84:0E:23:F7:BA:01:12:A4:CD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824AA7887CA1B7A5FC92300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.21.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:aa:78:87:ca:1b:7a:5f:c9:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=4e3dcc9a-d5b4-4702-8d09-2a00273696a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:17:ea:07:00:af:ce:3c:96:3a:88:86:67:
                    83:88:41:9d:c9:9f:dc:28:4e:cb:83:bb:28:6f:4e:
                    ea:ec:b7:c1:85:bb:d0:5c:b8:82:7b:91:7f:85:5e:
                    0b:9d:35:3e:49:64:cf:2c:0b:4d:f2:de:48:5b:df:
                    2a:bd:e8:2f:96:ea:72:71:6d:a2:62:68:d8:dd:33:
                    42:9e:72:fa:3e:9c:6c:0b:cd:bf:d9:47:a1:3b:be:
                    25:a5:8d:d8:96:fc:4e:0e:e7:ca:4f:7c:80:77:5d:
                    f3:0a:ce:57:4d:61:6f:02:9a:ad:93:85:f3:05:4d:
                    65:af:40:ec:8c:ea:db:46:cf:07:61:9f:c0:d5:ae:
                    44:e6:78:58:c5:e1:1f:b3:8f:d8:8c:43:c8:e9:f7:
                    d9:6f:28:d5:76:77:f6:4f:06:88:c9:3d:82:47:44:
                    be:0b:41:cd:66:c6:77:e6:75:0b:02:26:10:0d:1f:
                    42:67:ed:e9:8b:ab:73:31:00:47:fd:17:5d:d3:42:
                    e8:83:67:16:1e:45:c9:41:5e:51:04:fb:0e:4d:59:
                    8d:a5:1a:e4:4b:b3:69:30:93:c3:43:4f:0c:c7:51:
                    cb:f0:75:d9:be:9b:c1:c3:25:bb:d2:74:f5:2d:2a:
                    d3:ea:9c:8c:d2:dc:b7:07:8a:8f:64:3d:60:fd:2f:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:70:AA:0B:6C:5E:85:CF:E4:CB:84:0E:23:F7:BA:01:12:A4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:27:7d:22:75:a6:34:33:49:a0:0f:de:94:6a:e2:3e:0b:48:
         3d:89:1a:fb:55:70:fd:a9:11:7f:84:59:72:1e:7f:cd:00:b2:
         2b:a8:c6:fb:4f:77:86:f2:71:b3:0c:15:f9:69:79:46:e3:dc:
         71:83:15:27:8e:9d:4e:48:2c:5d:3b:c9:f0:63:e4:c3:93:c3:
         c2:64:a3:87:d4:54:49:8b:7d:c8:81:08:e4:6a:92:e6:84:8f:
         f2:c2:fd:42:e4:9d:2b:70:4b:e3:d2:d7:43:4d:62:f3:2a:c4:
         39:96:f2:eb:e2:b3:8a:35:7e:bd:37:d7:59:38:27:13:85:54:
         bc:03:4f:78:31:51:25:f5:f5:ca:8d:d2:1b:22:15:c6:45:a0:
         75:fc:5a:f9:5e:56:78:ef:b5:c0:e1:7a:6e:7d:87:eb:f4:d5:
         86:15:fa:68:14:e9:6f:df:b2:08:89:39:bf:89:84:50:ab:11:
         34:42:5a:cd:48:7f:bc:4d:e7:af:5d:15:6b:7a:60:08:73:82:
         42:47:d6:3e:08:4f:6f:4e:72:4b:37:b6:f2:9f:e9:ae:00:9d:
         46:3d:29:99:41:b1:a0:a2:ec:a0:66:1c:63:1a:bb:97:5e:15:
         38:8c:18:ce:8a:3e:a6:83:3b:04:0c:a8:4f:ee:9a:3d:69:55:
         b3:6a:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:58 2026 by rpki-client