Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/8fcdf19d-369e-3b26-ac3e-a46628705860.roa
File:                     8fcdf19d-369e-3b26-ac3e-a46628705860.roa (raw, json)
Hash identifier:          owxrPvuUxgzkqUoUfRrY9iIFkkeLmhP/KmnHvtl2P0k=
Subject key identifier:   43:DB:65:7E:3F:15:E4:28:47:18:9C:47:86:0C:8F:84:4A:88:D7:5C
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F4328584E6B0A1F1A916B03CF3E585840
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/8fcdf19d-369e-3b26-ac3e-a46628705860.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     13727
IP address blocks:        104.247.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1f:1a:91:6b:03:cf:3e:58:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=7c2709e4-b1a3-41df-8036-ff2b447f8d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:9b:ad:04:d4:28:a2:3e:af:82:7f:87:d4:
                    f8:92:63:45:a9:3f:80:1a:81:3b:7c:72:2f:65:71:
                    83:c0:ad:28:b0:e9:62:62:b6:7b:89:df:f7:bf:3d:
                    6d:31:90:ed:74:52:75:75:17:3c:29:47:07:24:e4:
                    be:9f:5a:5d:c9:21:d8:44:21:bb:47:53:3c:51:08:
                    a9:e8:fc:6f:81:3c:18:ff:3e:57:24:0c:dd:e2:14:
                    6b:73:35:6a:5a:bc:3d:a5:ee:29:c4:e9:9a:a2:6d:
                    b4:aa:86:5f:bc:ba:1f:02:3b:2d:15:af:2e:c4:4f:
                    36:46:a4:46:31:d4:6a:cd:5c:26:2f:2f:95:6a:80:
                    ad:96:cf:84:f5:0d:f4:4e:16:cb:fa:73:52:0c:44:
                    5f:1c:a9:b3:60:8b:cd:b7:5e:40:77:60:a2:d5:b9:
                    62:4e:55:68:88:8f:81:b1:32:64:18:73:3d:9d:92:
                    2e:86:e4:a4:a0:0d:ef:c6:7a:f0:8a:0b:d0:62:bc:
                    bb:cf:ca:41:ff:f5:8d:3e:d1:15:4a:8d:ab:87:b2:
                    5b:15:1d:a9:e0:26:7c:43:08:e4:79:37:21:81:a3:
                    07:be:c5:16:10:6e:a9:86:34:4a:97:0e:f2:72:61:
                    be:9a:7e:9e:6c:28:01:7a:18:26:5d:71:d9:eb:c2:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:65:7E:3F:15:E4:28:47:18:9C:47:86:0C:8F:84:4A:88:D7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/8fcdf19d-369e-3b26-ac3e-a46628705860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:c8:1f:3e:82:c9:7b:db:72:73:27:b6:db:29:ac:05:3c:
         8b:a5:a3:36:38:63:b2:58:bd:36:97:ac:2f:e5:92:76:5d:b6:
         f3:8a:e5:1f:8d:10:81:5b:9f:f7:4a:b4:38:c9:49:0a:f5:34:
         fd:92:b1:87:b2:23:a2:8c:7b:55:3e:f9:ad:26:b9:60:ab:7d:
         79:84:b7:d0:9b:51:4f:62:2e:71:69:4f:fd:55:af:12:bd:e3:
         45:38:9a:7f:f7:9e:09:db:b9:fd:c6:bc:cb:c3:c3:2d:4e:a5:
         79:39:ba:57:65:53:44:cd:d3:80:45:a1:4e:d4:e9:f3:11:01:
         f1:08:96:a1:3b:e4:b8:cf:bd:2e:e4:07:c7:cf:c8:e0:9d:7b:
         d3:8c:9d:d5:aa:f9:8d:e8:a8:f2:4e:e2:e1:a2:5c:cc:8a:bd:
         6e:57:d9:22:9a:83:fb:53:7f:8e:fc:d6:be:90:75:06:43:d7:
         db:f4:d8:63:55:d6:99:c0:38:54:b0:86:0f:a7:66:61:f9:52:
         a0:5b:d9:05:f3:34:a9:de:1b:ac:92:cc:29:53:f2:48:cd:b2:
         4b:cd:29:d5:04:66:d5:4f:b6:f0:25:e6:ff:77:9c:a4:c4:ee:
         bc:53:20:61:c5:3f:10:3c:30:a9:5a:90:aa:78:97:26:1b:e4:
         71:42:13:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 12:07:53 2026 by rpki-client