Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa
File:                     e5c03b76-d688-3450-91ec-8a63c3994c93.roa (raw, json)
Hash identifier:          Dw5tOAXgQPMv5dmSVORDT0z+Nso45ESFEQhyu/BvNLM=
Subject key identifier:   2B:F6:EF:75:4F:1C:43:81:7F:34:07:15:B1:17:0F:D9:82:BE:82:F8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F8DD87ECD584DBB1479EFF400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        104.21.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:7e:cd:58:4d:bb:14:79:ef:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=f7a45904-a82e-46c3-bc46-c9d90612e969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:d3:ad:64:ee:5e:1a:af:b3:7f:5a:bd:28:
                    05:ce:7a:f2:2d:48:38:8d:ee:7d:6c:0f:db:c5:93:
                    dc:9a:88:7a:e3:83:79:e8:30:e8:e8:f3:de:67:8b:
                    40:3e:f2:13:8a:5d:5d:45:b4:cd:8e:76:8a:2d:1e:
                    92:da:27:b0:b8:96:c7:69:eb:1f:88:8e:98:cf:92:
                    66:1c:54:4c:d4:9e:87:be:10:ca:70:82:8e:cf:86:
                    2e:55:19:d6:3a:8a:c3:2b:0d:37:92:61:9c:96:b5:
                    22:b8:c4:62:53:c7:30:1e:3d:e5:dd:de:d1:17:06:
                    d5:43:ad:7c:f0:3d:14:93:50:9e:93:31:94:3e:dd:
                    5c:74:c3:38:9c:73:37:24:63:2d:54:5b:fd:90:c2:
                    b8:b2:45:af:36:c4:1a:cb:06:b7:4c:75:df:4f:05:
                    a1:db:15:68:d8:e6:ac:fb:22:ad:55:99:f7:42:7d:
                    6d:2f:31:81:93:92:10:1a:a2:26:39:7b:86:7c:61:
                    e1:95:57:68:67:5e:7d:eb:65:86:12:d4:5c:f8:ff:
                    9c:2c:1c:f2:e0:49:86:56:64:3f:ce:67:aa:93:44:
                    71:d0:18:ae:58:30:72:8d:85:ec:3b:8d:bd:2b:92:
                    6f:9c:0c:53:5b:36:66:5a:71:52:03:4c:f0:ed:2d:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:EF:75:4F:1C:43:81:7F:34:07:15:B1:17:0F:D9:82:BE:82:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5c03b76-d688-3450-91ec-8a63c3994c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:66:1b:52:5b:b0:cb:ba:60:00:32:ee:78:32:88:5c:72:
         1b:3a:c4:bc:54:36:5a:a5:bd:c1:4b:5c:17:4e:46:96:d0:6e:
         02:20:71:c4:70:17:7f:f5:81:36:74:fd:39:82:f0:1f:67:c4:
         f7:08:d0:06:40:5c:e3:c7:c0:78:7a:64:58:d4:c5:b5:2a:72:
         e8:aa:ec:38:27:0d:ff:30:bc:8a:ad:29:1e:ca:f1:6c:fb:d7:
         5c:eb:8f:1a:2b:58:bc:97:f6:1a:dd:b6:01:32:99:e3:10:14:
         7a:28:01:7f:61:f9:1f:0d:7c:33:f2:fb:59:80:d0:2b:61:de:
         63:52:b7:84:51:56:3e:ab:86:ab:b9:22:40:31:a3:ab:1e:74:
         67:21:f6:8c:9c:3c:da:ac:c7:37:ee:9f:6e:d7:92:a2:37:73:
         62:d1:d1:81:90:a5:80:58:eb:a5:6a:0b:db:67:29:3d:9b:79:
         05:9e:1c:89:d6:ae:dc:54:34:d9:f3:42:15:e6:60:c8:8d:be:
         ed:a3:21:16:36:5f:52:19:cc:ba:01:c1:7d:f2:dd:82:b2:af:
         9f:00:dd:08:0f:30:61:6d:4a:48:d4:87:55:06:be:9f:4d:92:
         79:83:06:9c:9a:0c:9b:4a:6d:b9:59:7a:9b:19:9a:ee:1c:c0:
         99:66:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:08 2026 by rpki-client