Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa
File:                     c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa (raw, json)
Hash identifier:          QOzYlxEeqoR8gvKZCSVYLfH1AMfWMb9g61E2EEsTPcQ=
Subject key identifier:   F6:85:A2:BB:75:51:10:90:44:FE:23:85:4C:AC:C8:AB:FB:1C:21:B8
Certificate issuer:       /CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e
Certificate serial:       010D0C9F4328584EE4F1E8B49BF10FFACF92C540
Authority key identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        104.218.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:e8:b4:9b:f1:0f:fa:cf:92:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=ac55f6d8-0fbe-4055-99d6-211a70548fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:c9:ca:a9:c2:1e:f0:19:d6:fe:e4:02:ae:
                    3d:5d:c0:43:9d:f5:4f:3e:50:66:48:ec:28:9b:89:
                    e9:07:d8:f2:ea:fb:c9:15:16:93:23:ff:f6:a9:5c:
                    46:c3:71:94:f2:67:f7:c9:60:61:af:e7:95:a8:10:
                    0d:8f:91:93:8a:fd:66:bf:50:ac:17:ca:b7:f6:17:
                    da:46:af:76:1b:b9:8b:bc:db:e1:db:15:5b:ff:cc:
                    0f:37:4a:73:9a:fd:dc:ad:88:04:d1:86:a5:bf:9e:
                    c4:41:27:d7:cc:7e:2d:77:af:8a:35:bb:3a:7a:67:
                    01:da:51:9a:e3:4e:1b:de:90:39:5e:39:6b:a9:f5:
                    53:dc:5b:8f:a7:a5:ce:1d:85:d4:99:4f:d5:71:a1:
                    e7:36:6a:2d:04:72:a5:a9:d4:66:28:a0:db:b3:d3:
                    21:46:eb:98:91:66:79:4a:8f:95:08:d7:8d:d8:87:
                    3c:a9:94:5d:98:82:53:ff:d2:6e:4f:e4:64:d2:c9:
                    c6:71:33:cd:76:f8:10:63:31:57:8f:6e:6a:5c:97:
                    9f:ec:9a:13:48:26:d3:b4:fb:d9:8d:8c:94:dd:69:
                    61:7c:f0:6d:b6:02:10:54:00:3b:2a:7c:ce:e5:34:
                    90:e4:9a:c1:2b:cc:d5:0b:f0:c2:1f:82:d7:57:f7:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:A2:BB:75:51:10:90:44:FE:23:85:4C:AC:C8:AB:FB:1C:21:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl

            X509v3 Authority Key Identifier:
                keyid:40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:9c:aa:54:0f:3c:ff:94:b5:36:6c:d9:f0:4b:82:be:95:
         5c:9c:9b:47:27:89:c7:1e:48:86:a7:73:5c:05:b1:bd:14:f4:
         eb:97:02:47:0b:ea:b0:f2:56:79:79:66:98:a9:c5:76:52:67:
         4b:21:76:33:75:f2:98:cb:e7:e7:e2:05:a7:b3:d3:fc:a3:53:
         71:9f:01:c5:7c:8f:5c:42:36:81:68:6e:05:39:45:f6:ff:aa:
         36:5d:21:db:44:8c:1f:d7:bb:3f:97:e0:b7:7d:de:2a:6e:84:
         ac:92:b6:25:b7:d4:88:f1:a3:14:a8:68:61:28:49:9e:6e:62:
         d2:76:e8:79:f3:9e:89:b4:c6:8f:69:23:06:0a:6b:1b:8d:87:
         5b:4b:7e:2b:fd:5d:a2:d0:da:26:ce:e6:fc:d2:a1:ab:f0:ef:
         f9:bf:9f:71:ae:0a:3b:96:c6:0f:cf:2c:c5:55:ff:5f:5e:2c:
         54:fe:b5:fa:99:67:23:ea:1f:10:f0:cb:3f:29:bb:ad:2d:7e:
         76:28:f0:79:0b:f8:4a:63:7a:d4:fe:d7:4c:ae:20:c5:ce:2e:
         32:dc:df:4d:ff:20:86:44:de:0b:b9:21:2b:15:0e:83:85:a2:
         3a:01:9c:5c:e1:ff:82:a4:d2:5f:a5:b7:f8:7b:42:63:33:a2:
         e8:b7:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:18 2026 by rpki-client