Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/9b935405-6e13-3124-850a-dc939e698b96.roa
File:                     9b935405-6e13-3124-850a-dc939e698b96.roa (raw, json)
Hash identifier:          WRcar0KXYWwThq6FuuM35jToPKDWp/Z/yBCOufPx9T8=
Subject key identifier:   87:DF:03:93:13:D4:56:DA:FF:DC:FB:5E:66:98:91:49:1E:6C:D7:49
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F4328584CAA271C147A84E889E992CBD0
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/9b935405-6e13-3124-850a-dc939e698b96.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     206834
IP address blocks:        104.247.80.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1c:14:7a:84:e8:89:e9:92:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=10db9b58-288d-45ee-8380-26ecff8cbe29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:ac:38:f2:09:5e:53:81:16:85:76:64:ec:
                    b5:08:01:45:4a:4f:b8:9e:91:31:7e:38:29:5a:33:
                    6a:1b:a8:7b:ea:f7:d9:c8:71:a0:00:0a:d7:d3:61:
                    70:8f:49:51:99:23:b8:c5:9f:01:d4:3b:1f:da:94:
                    af:b9:12:a1:00:2a:79:fd:7b:b3:f2:df:ad:27:20:
                    37:90:90:cf:50:80:ab:93:59:0d:39:4d:53:e3:13:
                    ce:54:d7:e0:cb:02:ae:57:a4:e6:1f:4d:ba:1e:20:
                    b5:6a:27:ab:de:65:12:29:35:b9:be:f6:bb:c8:11:
                    42:3b:30:be:ac:be:74:41:3b:60:fa:11:77:ae:ea:
                    43:f7:b6:00:66:25:eb:5b:b6:8c:55:b3:08:7e:4d:
                    b6:71:c6:18:d2:4d:92:7f:17:b4:55:ae:de:aa:4f:
                    20:4e:6d:46:16:3d:7a:c5:45:e7:ff:57:0e:22:6a:
                    69:ca:5e:ef:ca:b7:63:67:b7:64:bd:12:29:b0:b2:
                    d0:9d:f6:9c:25:df:18:0c:5b:fe:f3:bf:6a:94:44:
                    61:16:d3:e3:b3:51:9e:27:a0:68:a2:3f:a1:b8:37:
                    4d:65:43:37:5a:9d:b2:9c:e9:24:78:34:f8:99:80:
                    66:95:a4:10:5c:74:98:0e:5d:15:5f:2b:c7:74:c4:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:03:93:13:D4:56:DA:FF:DC:FB:5E:66:98:91:49:1E:6C:D7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/9b935405-6e13-3124-850a-dc939e698b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:b0:8b:67:3b:6c:01:b0:c7:be:c7:98:20:61:86:ed:68:
         75:cd:42:2c:c0:05:c2:8c:ab:86:4f:4b:4f:33:96:37:f9:34:
         d8:8c:d4:fb:fd:e2:02:aa:5d:2e:36:e2:96:69:5a:cd:8a:eb:
         8c:37:bd:aa:12:ec:bb:05:83:c4:a8:ff:0f:39:91:8b:9e:af:
         72:4a:5e:f0:cb:87:0d:b6:c4:ff:e2:aa:42:18:2b:43:09:c2:
         56:a9:f0:95:83:8c:b4:a8:0c:63:7d:b1:dc:2f:8f:e1:58:38:
         4e:77:8c:b5:f9:1c:22:77:d2:88:91:f6:c1:e9:82:38:8d:b5:
         d5:30:bb:98:11:bb:90:16:32:3d:29:bb:4f:46:41:65:60:7d:
         ee:9c:26:24:b9:c7:c9:8c:cb:82:7e:33:83:cb:11:92:0d:19:
         76:af:c6:1d:18:d5:1b:45:86:0a:ba:1a:a7:5b:b5:a2:ee:c4:
         0d:9c:76:d4:43:26:82:97:e8:e7:5b:89:80:16:4d:6f:1e:8c:
         69:62:80:27:2b:9f:7a:c2:68:c0:a2:ff:dc:19:26:08:80:96:
         12:e1:ef:a5:c8:f4:53:41:5f:58:6f:42:38:27:1b:5d:b1:8f:
         da:d6:91:57:97:ad:3b:6d:6d:bf:a7:1b:55:16:0a:a1:10:c1:
         a8:7d:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:18:29 2026 by rpki-client