Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
File:                     f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json)
Hash identifier:          FktrAjs38hkmLIOmpYW/aZg2ljxfhZ6B5zWAwR4h1Eg=
Subject key identifier:   1D:78:58:5B:8F:23:42:49:70:AE:F4:2B:50:99:2F:7C:83:42:3E:8B
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F4328584ECBD1DFA854EBE24D7B271100
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     396018
IP address blocks:        104.237.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:df:a8:54:eb:e2:4d:7b:27:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=66c03870-9929-4a13-af76-31f3e33756a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:76:71:c7:db:8d:ef:1a:24:21:9c:d2:4c:
                    9d:6c:00:d3:f8:47:fa:23:76:6f:21:60:74:71:39:
                    e1:d1:69:9f:69:df:64:c3:82:76:e5:35:9f:cd:ff:
                    35:73:37:f5:23:a5:72:bb:d1:20:a3:4f:fc:3d:9a:
                    17:ac:e4:10:bd:de:cd:30:0c:cf:78:ee:7a:63:ad:
                    9f:49:b0:13:cb:e3:22:5f:62:4c:fb:37:8f:65:5d:
                    ec:70:64:48:36:a1:56:9e:a4:b6:53:e2:ff:da:f0:
                    1a:34:1a:ff:64:46:06:27:97:4b:01:26:e5:04:bf:
                    c8:d0:52:8f:99:22:fe:06:90:9e:b5:e3:fc:0f:cd:
                    6c:cf:ee:4a:c3:85:7a:54:6a:e2:7c:c3:b7:04:37:
                    73:4c:13:5f:ad:6e:e7:12:75:27:05:6e:33:2b:c1:
                    82:8f:4a:93:ee:6d:e4:91:95:01:2b:99:cd:68:ce:
                    89:1c:1d:86:0f:a3:4c:ae:f5:a2:31:92:18:b7:47:
                    b1:ab:76:7c:94:69:1a:6f:3c:a4:21:53:58:d6:d9:
                    70:d8:29:68:cc:7a:a6:2d:31:44:a4:a8:b7:ce:ef:
                    3f:b4:be:02:c6:ec:29:cf:e9:86:fa:89:7f:05:89:
                    f2:ac:5a:3c:9c:6f:36:1d:b5:d8:fd:85:35:42:84:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:78:58:5B:8F:23:42:49:70:AE:F4:2B:50:99:2F:7C:83:42:3E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:25:9d:f4:4f:0d:bd:f2:61:a8:21:fe:b7:38:1c:d0:53:
         52:ad:86:76:ef:4f:37:39:47:cc:10:e7:27:09:d1:92:fb:14:
         be:92:28:6f:dd:00:62:63:96:d7:20:a2:4e:95:84:51:b6:c6:
         1a:96:90:97:86:88:b8:54:03:96:e6:7f:4a:42:3c:a6:7e:d7:
         60:75:1c:fa:58:05:8d:ea:e5:65:bf:5a:c2:c6:50:96:fa:74:
         c7:10:12:ee:10:21:90:bd:36:59:db:de:b3:8f:a0:8b:18:3e:
         7e:c7:85:79:b4:c1:9d:3f:82:38:c0:7e:00:e4:4e:6c:30:1d:
         5b:10:09:4f:58:9a:0a:8a:31:ae:f4:15:4b:ce:a6:3e:c6:77:
         c5:d2:3f:79:b8:04:ec:02:e2:44:ad:26:39:14:0a:fe:4e:c3:
         ed:f2:99:1c:d9:a2:d6:5b:0b:06:63:0f:a2:46:93:d6:bd:b0:
         d3:2c:cd:d1:37:06:5c:27:aa:6b:88:7f:b0:ff:6a:cf:1a:fe:
         03:ac:89:0e:79:ee:79:f8:17:d1:a3:08:2e:00:a1:75:ce:8d:
         bc:04:8b:0d:a5:2d:6e:6b:99:d8:ae:be:75:aa:8e:75:d9:c3:
         35:9b:a0:af:79:a0:40:df:a5:31:0c:30:08:64:03:5f:64:f5:
         52:97:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:34 2026 by rpki-client