Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa
File:                     fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa (raw, json)
Hash identifier:          +vdoFYraVor1RA/G2V8q6cZdXL/9zouoSM1fFQYDKzA=
Subject key identifier:   CD:B5:A9:66:A4:FA:FB:6C:CC:28:CD:07:97:DF:20:C9:BA:BB:CA:F1
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584EA799F4181C3068A00556EA80
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21713
IP address blocks:        104.160.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:f4:18:1c:30:68:a0:05:56:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ceec861f-6e34-4243-bc3a-f4cc5dd32503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bb:e1:10:74:b8:e9:a3:03:54:3f:26:54:8d:
                    7d:15:62:be:2f:89:46:39:20:1b:d4:cb:55:e6:ea:
                    a9:c9:a0:60:da:be:60:64:5e:37:d8:64:3e:3a:f5:
                    82:ca:27:35:1a:ad:91:8b:ab:a1:39:80:69:f2:0f:
                    46:dc:70:ec:39:ab:bb:2e:6c:4e:cb:75:5e:e0:45:
                    e1:e4:32:c9:ad:7b:a3:6d:63:88:29:4c:d0:d0:fb:
                    e1:af:5f:8d:55:b5:ff:03:c2:b7:b9:1a:72:5a:16:
                    44:dc:a0:9e:47:2b:f0:db:42:8e:13:81:40:fb:83:
                    7a:d4:b5:d5:fb:a6:24:90:38:d0:24:db:53:ff:e8:
                    6c:34:1a:7d:93:fb:0f:6e:45:ed:83:bc:99:fc:8e:
                    d5:87:a5:c0:ae:f7:7b:06:04:ca:97:40:80:0a:f9:
                    9d:d5:59:35:64:dd:a8:f7:4d:d4:bc:cf:48:8f:11:
                    f2:50:fc:2d:d3:38:c3:9f:b7:c8:1a:ed:63:e6:46:
                    48:05:41:7c:dc:37:d8:32:59:09:66:c9:11:7b:05:
                    02:17:29:5e:93:f7:33:76:00:30:94:9b:76:83:9c:
                    2d:d2:99:a3:28:06:56:9e:39:28:c3:aa:2d:4c:5a:
                    f6:67:fb:c8:aa:51:40:9c:8c:1b:20:49:c1:8f:4b:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:A9:66:A4:FA:FB:6C:CC:28:CD:07:97:DF:20:C9:BA:BB:CA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/fce5dff3-32a5-303b-9a89-b82f6ffa4cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:96:71:32:d4:3d:20:6b:26:36:fb:b4:36:07:0c:7d:bd:
         af:16:07:ea:f9:e4:f7:5b:c6:8c:a1:65:98:2f:de:bc:ae:b7:
         18:fe:53:db:09:46:d6:98:8d:87:48:2e:e3:91:9e:ce:42:c2:
         34:00:2f:f1:6b:dd:ac:14:88:37:3c:72:20:2c:9a:bc:52:d9:
         41:a5:a3:44:f7:52:f7:ee:b5:e2:3b:1f:65:c3:bd:29:63:ec:
         ce:e8:ba:17:85:4d:b4:1c:59:ba:61:02:9e:c1:ef:0f:80:68:
         ec:bf:52:e2:08:50:fa:6e:48:18:d7:b6:45:f9:96:c3:c8:32:
         cb:25:a5:2c:1a:1c:c8:fd:a0:c0:52:84:82:86:eb:07:b2:a7:
         23:d4:05:fa:4a:c0:9e:ff:7f:b4:9a:98:2f:f6:8f:aa:12:9e:
         c0:6b:11:8e:1f:4a:d3:fc:3d:ad:d0:9d:1a:f8:cc:2a:22:f6:
         d8:b6:f9:0d:51:ba:1d:76:bc:c1:10:8f:87:c8:9c:c3:e7:77:
         d5:e8:18:9a:bd:d0:b3:34:b0:52:01:91:76:cc:fd:16:3f:b4:
         0a:47:3c:ab:48:28:ef:86:a6:9d:91:4e:d3:7c:0c:18:cb:34:
         c4:5b:e3:48:d2:e9:7b:10:2d:d7:37:3f:3c:d9:38:e6:38:c7:
         60:9d:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:55:28 2026 by rpki-client