Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
File:                     f013c061-c284-3462-80b8-386f10ec2f9e.roa (raw, json)
Hash identifier:          jX2O7XnvXxOoj0nen5ojzLz8d5PSRCq+kfmAaylbYYI=
Subject key identifier:   8B:15:D1:AB:D9:79:6B:57:12:D6:E4:74:46:69:EF:F0:8D:B7:D4:4B
Certificate issuer:       /CN=dc22c315-14c5-4de2-83f3-01be353fd756
Certificate serial:       010D0C9F4328584EC20C639878A4E443E86B5158
Authority key identifier: D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     2568
IP address blocks:        104.192.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:63:98:78:a4:e4:43:e8:6b:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc22c315-14c5-4de2-83f3-01be353fd756
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=59c6a56e-3de0-4040-a97c-85bc06008513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:75:28:c0:4a:af:6b:93:49:ac:5e:18:a3:
                    f8:ca:70:5c:d5:8a:70:cb:12:c1:13:cc:80:b4:c5:
                    21:20:e9:44:84:88:fb:49:c5:57:9a:83:11:8e:8e:
                    43:dd:7c:5a:d9:a6:b6:d8:d6:47:c4:87:14:a0:ed:
                    7b:0c:2a:6e:bc:6d:c9:08:7c:56:a5:8c:c0:c8:a5:
                    e4:3b:c7:2c:7b:ff:b7:7d:d4:e3:f9:df:e2:5b:16:
                    6e:54:ab:f8:37:60:4f:2d:e1:2f:90:1a:d0:8b:3a:
                    bc:7c:d7:d5:62:47:6b:94:78:a9:74:77:7a:60:b2:
                    9c:8b:41:67:12:95:62:7d:5f:e2:a2:c7:72:83:97:
                    41:52:e7:74:4d:69:8a:50:7a:05:75:fc:9a:a3:c9:
                    2e:aa:95:9f:ff:29:cc:85:78:ad:b6:ae:31:c2:7e:
                    9a:ed:e8:8d:ef:49:12:42:f8:36:58:a6:4d:6a:af:
                    d0:2e:a1:ae:60:01:dd:dd:f4:78:ee:d0:1b:d8:1d:
                    07:a6:8d:d2:4a:68:18:7a:3a:d0:ef:11:a8:92:b7:
                    90:c2:77:41:2c:ef:04:a6:ef:73:d4:2b:15:af:06:
                    ac:38:d9:da:f9:00:16:94:7a:4b:81:d5:50:8d:62:
                    39:fd:4a:fa:ab:ec:8f:53:b4:35:50:f7:f4:8e:cc:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:D1:AB:D9:79:6B:57:12:D6:E4:74:46:69:EF:F0:8D:B7:D4:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl

            X509v3 Authority Key Identifier:
                keyid:D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:d9:34:bf:7a:16:04:3c:72:49:c6:00:98:1c:24:6e:27:
         52:cd:c0:63:d5:a9:5c:71:6e:ca:e1:bb:e1:22:48:fc:7c:5a:
         ef:3d:6c:f1:ae:bd:28:b9:82:76:7a:26:7d:7e:aa:47:38:37:
         52:b7:4a:9b:ef:ac:64:7f:1c:52:83:89:3b:93:0e:08:5c:fa:
         44:45:ef:b5:62:ef:c6:a0:bd:71:70:36:5c:43:e7:0a:14:b7:
         2f:37:9a:3b:92:f9:e0:4e:c3:03:53:2b:88:c8:32:11:5c:81:
         4a:7f:74:00:c1:f6:8e:c6:68:6b:5c:ac:f9:dd:f1:4b:cd:0f:
         32:2b:c4:14:84:6a:a9:86:fe:55:35:d9:c3:8a:50:16:db:95:
         6e:bf:98:df:e1:b6:10:e6:3c:ac:c4:7c:6e:be:17:eb:c6:22:
         20:98:c3:a5:a5:91:d9:49:f9:93:64:72:6c:02:0a:45:56:ee:
         5e:a3:3d:8b:75:65:a6:bb:24:5d:dc:3f:27:45:8c:a6:09:47:
         77:9f:a1:3a:ec:93:30:2e:d6:4c:d5:33:f7:30:2f:52:0c:b2:
         52:a8:13:31:58:6c:3c:07:3a:a7:f5:00:65:6b:71:50:6c:40:
         d1:22:69:b7:76:ac:6e:b4:05:62:3f:17:59:28:c3:26:1c:ad:
         8a:3c:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:23:25 2026 by rpki-client