Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
File:                     b510b231-5c86-397c-b89a-69e44e4abe9c.roa (raw, json)
Hash identifier:          ps9mdtcPNUWTS7tipofqRK1yYHTh7pQ0gnKdYUW/JJc=
Subject key identifier:   5E:3C:70:7B:6C:07:B9:7D:B5:9A:72:66:9B:B6:36:8A:5B:9A:81:93
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F4328584D2644B30E4DBBC332A06C20C0
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     21743
IP address blocks:        104.247.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b3:0e:4d:bb:c3:32:a0:6c:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=920eaf55-64f6-4627-821c-f744b9b8c9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:a4:b9:ba:ee:40:08:4f:cf:6c:25:34:da:
                    39:b4:c8:48:93:65:6a:c7:46:e5:7e:cc:4d:b0:d2:
                    d5:9e:63:54:a2:aa:41:be:58:8a:a2:30:ee:ac:15:
                    a5:42:3c:9f:bc:cb:0a:ee:f5:25:ce:b7:55:32:32:
                    51:be:01:c6:8e:de:6d:c9:a1:f7:e6:33:eb:61:6e:
                    32:09:b1:9e:09:85:c2:86:84:82:7d:1e:75:38:85:
                    6a:5d:6c:ff:17:fe:23:a1:80:35:b4:e3:bb:4b:ff:
                    4e:48:fa:9f:4a:4e:b5:d7:44:56:d1:98:a3:67:be:
                    99:88:5c:86:a6:ef:14:69:bc:a4:32:6f:74:fa:37:
                    2c:21:34:00:a2:da:21:f9:7a:48:dd:e1:c3:36:8c:
                    80:58:02:0b:57:94:fc:9b:e6:4b:3c:8f:b1:11:d2:
                    39:4a:78:6b:7a:c7:8b:2b:54:61:89:d4:97:f3:90:
                    e1:90:d6:32:ca:0d:47:71:73:83:6f:a1:ab:89:47:
                    c5:29:0c:86:17:ca:3e:de:ad:6b:00:d0:9c:df:30:
                    c2:ac:77:22:2d:6e:51:b1:e0:2c:5a:31:54:8a:eb:
                    55:d5:d8:c8:1d:d7:0e:e3:13:6f:d7:c4:40:5a:e9:
                    49:1a:fa:e7:f9:e0:53:55:0c:0b:60:8e:df:9a:d6:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3C:70:7B:6C:07:B9:7D:B5:9A:72:66:9B:B6:36:8A:5B:9A:81:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:11:a7:63:33:0f:73:05:7c:45:eb:ee:c9:c8:4e:03:19:
         fe:0c:41:12:44:52:d0:d3:8d:12:dd:88:66:0d:10:9f:7c:f9:
         da:2f:8f:f1:dd:ad:2e:13:36:27:4c:40:69:16:88:f4:82:78:
         31:96:45:1e:18:39:c2:99:02:e2:67:e0:21:7d:6b:f4:ec:72:
         a6:b8:c1:89:06:78:62:1b:e6:91:ad:2c:bc:38:ca:6a:b6:e6:
         38:ba:5c:3d:4d:30:ca:c1:3b:70:ed:a4:fa:50:75:d0:54:a8:
         c4:24:6a:21:32:dd:d9:48:65:dd:05:0e:61:7b:44:99:82:99:
         d2:9c:c1:b4:08:57:19:e7:3c:e5:b7:a8:2b:3c:37:26:b3:c8:
         dd:c5:30:42:9e:5d:2f:c3:c4:66:a8:0d:60:19:71:40:44:44:
         9c:f9:13:33:d0:2d:47:df:a9:f4:7f:3e:f3:9e:51:d7:9f:8f:
         88:92:42:70:ca:ac:19:e4:3b:00:c3:89:66:1c:74:01:f4:4e:
         a4:f7:22:65:c8:62:20:c8:7b:9c:31:a5:d0:97:f5:52:ce:45:
         cc:c6:72:d6:0d:10:bc:ad:15:c9:ed:1b:63:b1:2f:d5:4d:b5:
         b3:e1:f9:78:22:5e:18:04:b9:8e:e1:37:a6:6f:53:b0:d2:28:
         6a:3b:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 00:42:50 2026 by rpki-client