Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8fda927a-417b-3713-9817-cd099d36e152.roa
File:                     8fda927a-417b-3713-9817-cd099d36e152.roa (raw, json)
Hash identifier:          Q8W/3FGni3iSiBtFeAqkHCLjrmAVvqxgS61DhW4ScI4=
Subject key identifier:   0A:BB:A5:58:28:85:B9:3B:3D:B6:D9:19:5A:27:C1:3C:ED:D7:CA:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8783A4BE1C7D5A4444B380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8fda927a-417b-3713-9817-cd099d36e152.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.30.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:83:a4:be:1c:7d:5a:44:44:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=04d36cf2-3f43-41c5-b5a7-a842932b4707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:ec:ce:5f:f8:8c:35:f4:af:67:f2:db:94:
                    d1:98:82:bf:c9:4e:46:1a:d0:60:90:ef:ac:1d:84:
                    b7:9f:6a:a2:71:d7:43:84:ef:44:d8:8a:7a:b3:1d:
                    e6:a6:61:d8:62:3a:23:ed:fe:c9:c9:77:9d:ae:9b:
                    ce:13:35:d4:16:c8:e7:8e:de:51:61:74:ea:d0:8e:
                    40:44:fa:d1:25:c1:0c:c0:d5:00:93:c2:74:40:70:
                    96:34:76:c3:64:7d:d6:67:3a:b7:64:c8:2a:55:ce:
                    aa:ab:93:99:67:94:c9:b6:42:90:c8:aa:f5:82:c3:
                    f6:5f:a7:e0:4a:11:30:11:ea:31:ad:7c:c8:62:69:
                    0e:cf:ca:65:06:e3:87:19:df:c0:55:36:a9:f5:87:
                    0c:ea:eb:87:12:5f:25:26:18:aa:08:ec:0d:c1:84:
                    ae:86:41:5e:c4:4f:f2:94:0d:d5:8a:09:c4:c0:7c:
                    c2:85:29:9d:e6:ed:03:82:56:77:80:48:c2:22:d4:
                    f2:78:5c:98:f6:a0:a2:31:96:f8:6d:bd:56:f1:20:
                    3d:c8:c6:d7:57:3f:9d:60:24:28:1e:ed:13:1f:13:
                    37:e3:4b:4d:31:2c:0e:c2:42:3c:ef:5e:52:ee:20:
                    9c:7a:cf:60:fa:8b:39:37:77:3c:38:e1:2a:ca:e3:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:A5:58:28:85:B9:3B:3D:B6:D9:19:5A:27:C1:3C:ED:D7:CA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8fda927a-417b-3713-9817-cd099d36e152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:40:a8:59:19:56:2e:04:db:2d:0a:42:6a:1e:02:16:96:38:
         53:b0:1b:6a:fc:92:ed:3f:8b:77:19:25:78:68:1a:18:17:15:
         1d:79:06:26:69:cc:a2:53:ba:10:de:c2:ec:b8:78:40:72:ee:
         23:b1:37:70:d0:3b:88:df:fb:d7:8d:72:40:92:27:fb:0b:2a:
         c3:9d:9a:2b:81:b5:1c:b2:e2:37:97:8b:6b:4a:a9:99:e7:4f:
         d6:ce:c4:42:26:09:98:01:3a:f4:1c:18:43:a7:16:ed:66:49:
         06:1b:77:5b:45:3d:e6:8d:6d:bd:42:31:37:1c:9b:0c:55:5d:
         7b:35:81:5d:16:50:dd:26:67:56:ba:aa:e1:59:a8:3a:4f:0e:
         e1:8f:b9:c6:23:7d:16:6d:57:4e:68:87:12:82:17:9d:47:e3:
         58:61:9f:e8:85:ca:99:50:45:d0:91:40:b1:da:87:06:a9:42:
         06:8c:b1:b3:93:e4:f7:6b:34:6d:6e:6e:ce:c9:b5:9b:c7:b3:
         8e:59:6e:56:3c:18:a0:a5:02:fa:92:15:82:3a:b4:ce:06:7d:
         77:6b:07:b4:90:43:79:d7:64:50:eb:a7:1e:6c:8f:bc:a2:3b:
         00:fd:2b:76:c1:34:74:9d:40:ea:ce:3c:cb:0a:f1:07:7e:2a:
         bc:ac:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:08:54 2026 by rpki-client