Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f10dba1-4639-3ad1-bc62-c8c86501b7cd.roa
File:                     1f10dba1-4639-3ad1-bc62-c8c86501b7cd.roa (raw, json)
Hash identifier:          BdWMCXbP48LrMhzAeb/Fr+4KX/nPWR9lFy4uzA5/Gmk=
Subject key identifier:   A6:7A:34:1F:D6:F0:14:34:78:D5:D4:7E:7A:83:84:BC:83:EE:2A:25
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E0678C7E130A9C65F0DDAB0E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f10dba1-4639-3ad1-bc62-c8c86501b7cd.roa
Signing time:             Mon 01 Jun 2026 08:26:43 +0000
ROA not before:           Mon 01 Jun 2026 08:26:43 +0000
ROA not after:            Sun 30 Aug 2026 08:26:43 +0000
asID:                     154383
IP address blocks:        104.250.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:06:78:c7:e1:30:a9:c6:5f:0d:da:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  1 08:26:43 2026 GMT
            Not After : Aug 30 08:26:43 2026 GMT
        Subject: CN=6b4328c3-b12a-4f8e-87e3-16f7f23242ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:e9:a2:0d:3b:8f:e6:65:12:53:17:cd:6a:
                    f0:3d:15:de:7a:53:fc:51:05:65:ec:7a:2a:b1:82:
                    e5:1d:da:b3:4a:20:fa:c9:1a:df:9c:b2:b6:45:1f:
                    3c:23:a5:66:79:18:35:ff:b0:01:22:8a:b6:e6:a6:
                    57:2e:b4:b7:59:b1:4e:0f:c8:dc:c6:c8:e4:fe:28:
                    e4:c3:b0:54:11:39:52:2b:8b:cc:6c:33:e8:1b:4f:
                    b1:24:ea:fe:c2:19:b0:72:b2:72:ff:32:4e:58:5e:
                    51:24:3b:7b:ae:88:69:37:92:88:4e:95:12:63:60:
                    6d:f4:39:5c:1e:27:78:9e:c5:f4:5a:96:2b:de:21:
                    6e:10:ed:59:7f:a6:5a:b4:1c:17:5c:08:f2:6b:59:
                    28:c1:1f:fa:93:04:63:74:65:92:47:23:e3:80:f2:
                    51:55:11:cf:19:89:dd:be:5f:e5:f6:7f:16:75:69:
                    40:47:c3:dd:5e:c9:d0:77:db:a8:98:d8:50:1a:87:
                    0f:8a:cd:7c:d6:cc:86:93:f1:f4:c3:ff:3a:b4:4b:
                    64:0d:7d:a7:49:b3:3d:63:e4:af:1c:66:ad:70:82:
                    55:2d:70:12:ce:85:fc:aa:8e:56:ce:a7:04:5b:3e:
                    15:0f:6d:72:c6:77:15:47:af:69:59:30:6a:c1:ed:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7A:34:1F:D6:F0:14:34:78:D5:D4:7E:7A:83:84:BC:83:EE:2A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f10dba1-4639-3ad1-bc62-c8c86501b7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:1f:a7:e9:8e:0d:89:d1:2a:b2:9e:0c:ee:72:76:72:b1:
         94:69:1d:86:ad:be:a6:57:94:d4:23:24:5e:e7:72:ec:43:81:
         f4:4a:5c:cd:04:75:ab:49:2f:d0:bc:3d:0f:a5:fe:4d:ce:2e:
         8a:21:20:68:69:ce:e1:b9:f1:9a:a0:05:67:cc:4f:ed:6a:d5:
         99:3e:95:43:e4:9c:86:a2:44:35:8e:c8:74:1e:d2:39:38:d0:
         6f:28:b2:53:7e:72:b2:c8:85:a0:34:29:a0:4e:c5:88:30:c7:
         3d:64:c2:8b:b8:d2:7f:2d:32:d9:a9:e6:31:5c:bc:1f:83:ec:
         f8:eb:38:61:8a:71:dd:b7:ec:e7:c3:55:1f:05:eb:c6:58:3c:
         e2:79:d0:c4:89:6a:34:53:ee:7a:c2:2e:ec:8c:f3:64:6a:9e:
         ad:55:29:fe:83:d0:ba:f5:90:1a:75:19:72:2b:35:fc:e3:3c:
         8e:e5:e6:9c:a1:ab:5b:25:15:89:71:db:f0:e1:48:4a:21:d5:
         53:3e:fd:6c:0a:45:e9:37:30:0d:37:b6:5e:68:37:9d:f1:ba:
         41:69:c6:a3:a1:b0:db:e3:19:e0:0a:32:00:15:6e:ec:a3:17:
         21:8c:81:e1:09:bb:d4:35:80:ba:7f:98:88:b6:56:8d:6b:b2:
         8c:d0:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:21 2026 by rpki-client