Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8906d57-e958-3229-911b-44079db83df6.roa
File:                     a8906d57-e958-3229-911b-44079db83df6.roa (raw, json)
Hash identifier:          2XgNezE+rF38c+NKjoMj5i5BJ8Yue68DZK71Icek80M=
Subject key identifier:   30:E3:5D:F2:D7:5F:3F:EB:E4:A4:F4:0D:C8:25:76:1F:55:E3:A8:D8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F3424FAF6FBA3699AC7EDF060
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8906d57-e958-3229-911b-44079db83df6.roa
Signing time:             Thu 17 Sep 2026 09:52:00 +0000
ROA not before:           Thu 17 Sep 2026 09:52:00 +0000
ROA not after:            Wed 16 Dec 2026 10:52:00 +0000
asID:                     13335
IP address blocks:        104.22.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:24:fa:f6:fb:a3:69:9a:c7:ed:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 17 09:52:00 2026 GMT
            Not After : Dec 16 10:52:00 2026 GMT
        Subject: CN=44a58703-a2bb-42ff-8bae-fd23dc7e8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:b4:a5:44:e8:af:12:13:da:18:07:38:85:
                    78:0d:c6:73:78:4d:22:b0:02:9c:f9:fd:b8:df:bc:
                    e2:36:5f:c8:c3:81:5d:c3:80:83:4a:20:8d:6a:83:
                    59:53:3e:59:27:25:53:0e:a4:54:29:bf:3b:ee:c9:
                    65:d7:f2:4c:5d:77:24:be:81:3f:6c:69:86:79:3c:
                    11:09:c0:c6:7b:24:d7:77:96:39:aa:ce:69:1c:c8:
                    89:cf:bd:ab:88:a8:bc:9f:91:60:64:20:fa:18:20:
                    09:01:49:5f:07:cd:d1:ad:e5:8a:ed:17:1a:e0:e0:
                    3f:0f:d9:df:9f:2e:f4:d0:d3:22:3c:54:10:c6:92:
                    17:83:b9:75:8d:a1:18:06:72:2e:ce:d6:db:06:1b:
                    8d:25:92:f8:cb:8d:58:12:55:33:f0:64:9c:4b:f0:
                    62:21:cf:44:4e:c4:04:20:e4:1f:fe:68:9d:90:7b:
                    75:37:c7:f2:3c:43:cb:6c:ee:7c:14:65:cf:25:88:
                    61:70:4d:28:cb:42:5b:a8:3d:50:83:72:83:f5:40:
                    ca:1a:58:41:48:04:2c:86:be:5c:39:3b:eb:ab:dd:
                    c1:0e:cf:ac:fb:0f:83:60:45:4e:f2:2f:bc:ea:fe:
                    7d:ce:f8:25:95:45:61:7c:de:17:22:0f:a7:2d:26:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:5D:F2:D7:5F:3F:EB:E4:A4:F4:0D:C8:25:76:1F:55:E3:A8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8906d57-e958-3229-911b-44079db83df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:29:97:66:10:d0:cf:98:8c:ec:7e:2c:63:bf:a3:ff:b0:0d:
         27:5a:4a:f0:2d:76:5c:c1:75:5b:09:e8:02:a7:51:6b:e1:9c:
         37:89:7a:2d:d8:59:7e:8e:db:7d:c7:bd:1d:d8:f5:9f:97:cd:
         48:97:f4:c0:51:3e:61:7a:85:0c:5b:59:d3:fe:ae:d6:7b:66:
         10:bd:71:40:be:12:c7:13:6a:54:1a:dc:72:7c:cf:21:8e:ec:
         07:06:ee:a5:a3:60:6f:7d:5f:75:54:6d:49:9e:f0:ef:bd:94:
         0d:4c:06:80:e7:35:8c:cb:4f:ec:5a:fc:5d:a0:95:f4:63:3a:
         7d:68:78:1c:59:cf:cc:5d:cd:fd:63:44:6e:b2:0f:32:24:37:
         c4:c5:93:ba:72:0e:39:27:96:91:de:1b:e5:dc:3e:3a:ed:8f:
         87:6a:67:01:8e:4e:22:92:b1:20:36:d8:5a:71:83:6f:71:35:
         24:a7:99:1b:b1:9a:46:99:d7:78:10:d8:80:b1:e4:42:3c:c0:
         46:65:74:c9:4e:aa:bf:6a:69:95:e1:1d:f7:71:ec:54:64:67:
         c5:a0:89:88:e9:77:e8:da:6d:31:1c:12:3a:a0:4f:d7:6f:db:
         e3:9f:c4:66:67:f3:1c:ee:a7:03:48:1e:6f:3b:cd:71:c8:2f:
         8f:b6:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:51:49 2026 by rpki-client