Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
File:                     4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa (raw, json)
Hash identifier:          9rhqBrdedJMBt6H6TEGTD4p2/m3iU8aL6AW4P2GiaFg=
Subject key identifier:   9F:EA:7C:7C:9D:CD:2A:B9:28:19:23:2C:42:18:DC:0A:1A:DA:23:66
Certificate issuer:       /CN=0215b589-0229-401c-98ef-53194fd5e2a5
Certificate serial:       010D0C9F4328584E561A050979FA1A04FEA41B80
Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     46294
IP address blocks:        104.255.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:05:09:79:fa:1a:04:fe:a4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=88486c7c-cf4f-449b-9957-22d631736658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:15:7e:05:20:6f:00:0a:3b:93:e6:3f:a4:
                    c5:0e:f8:5a:a0:ed:fd:3a:67:f6:f9:fd:2c:8b:80:
                    62:73:39:8a:6e:c3:af:a8:c8:48:35:84:da:15:ce:
                    a0:90:af:f5:d1:07:44:12:0d:23:ca:83:cc:f2:7f:
                    10:15:94:b6:26:05:bd:5f:95:35:cb:d7:12:39:e6:
                    01:09:00:46:64:18:ad:e7:07:e8:54:eb:0b:72:ac:
                    b1:d8:47:c5:86:d9:b8:bc:9e:b5:55:7b:92:d6:aa:
                    3a:21:5f:d1:00:69:25:df:7f:c2:ff:cd:58:12:df:
                    a9:6c:d9:fa:c5:aa:ae:ea:e5:90:4a:78:16:ca:0a:
                    78:ef:a9:2e:65:7c:75:fd:98:4f:64:e9:10:76:ba:
                    9e:e0:85:f9:27:29:f4:e9:df:7c:07:e9:9d:62:87:
                    b8:52:d8:ae:33:19:f7:23:0d:c7:ab:ef:ed:f4:03:
                    c1:37:e2:63:04:2a:3b:f1:d6:7e:6a:f5:e2:21:62:
                    c5:84:43:ab:90:0c:48:cb:7d:ad:aa:10:87:1d:5e:
                    b8:09:19:cf:b2:0a:0f:86:87:93:b3:b4:b4:17:f0:
                    ae:fd:c6:5f:cd:e3:43:f5:8f:08:31:35:90:7b:fd:
                    ed:9d:7c:0e:4a:5b:97:01:74:05:05:7d:2b:65:d0:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:7C:7C:9D:CD:2A:B9:28:19:23:2C:42:18:DC:0A:1A:DA:23:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:33:e2:31:2e:87:7c:0f:6b:3e:41:31:7a:26:a7:51:b2:
         cf:24:e3:27:e2:3f:56:b1:56:1e:e7:7a:fe:5f:f3:59:8c:0b:
         24:63:aa:b1:c5:e5:af:67:2c:aa:66:6a:21:b9:3d:db:07:09:
         bf:a2:4d:c4:b0:bf:6e:67:61:46:d8:06:1c:51:21:18:fd:3f:
         e0:05:38:10:10:ca:f0:3f:01:f7:80:61:55:05:fc:af:9b:6a:
         16:9a:ce:9e:fd:75:27:06:80:ef:99:f6:b5:76:6e:15:5c:ff:
         7c:8e:f7:57:91:03:d4:67:5a:31:37:79:73:3c:45:44:e3:1a:
         fd:60:55:0d:81:96:2f:0a:76:f1:ff:1c:e6:f9:0e:80:78:52:
         2b:b1:c7:f5:02:9f:16:fe:04:e8:68:b7:af:63:b4:1c:55:7b:
         7d:f4:bd:7e:c5:9a:82:92:60:4c:07:9b:0f:89:f6:47:a8:44:
         87:5b:96:a6:63:48:40:5f:4d:68:6d:fd:07:e0:74:8e:ab:35:
         62:05:79:cc:97:9f:ab:91:5f:4f:75:00:a2:c3:5e:ca:62:6c:
         a3:76:02:b5:d6:8a:a1:c4:25:c2:5b:c0:43:a5:b0:05:8b:72:
         06:08:3e:89:72:5a:9c:df:af:8f:07:37:a7:9e:b8:cb:63:78:
         73:cc:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 20:57:19 2026 by rpki-client