Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
File:                     c6097b58-c422-3f25-ad58-0368623ed0bc.roa (raw, json)
Hash identifier:          ROnv/+JC6RbNzDVsaHnMnNTzdPzqOlfgVFISoE3fwPE=
Subject key identifier:   BC:2F:A4:9E:C3:2A:4C:49:5A:95:27:66:CB:E5:43:03:A8:F3:31:19
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584ED001EE1756690A7096682180
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     5511
IP address blocks:        104.193.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ee:17:56:69:0a:70:96:68:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=ecd2dd48-5ce4-4ef1-90a9-0c961529093f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:64:49:22:c6:8c:d4:ae:51:14:14:4c:1d:
                    fe:1d:59:11:5c:d4:62:25:c6:ae:19:e4:a0:09:37:
                    cf:fa:18:56:97:7d:f8:f6:d3:b2:4f:77:4a:d5:1d:
                    36:92:d2:22:66:4a:2c:96:48:bc:3e:92:69:ce:b9:
                    96:2c:2e:90:e0:c8:0d:d2:7a:b7:5f:95:03:79:2b:
                    f8:37:be:56:f8:d1:57:04:d4:ec:f3:31:ed:aa:32:
                    1a:4a:ea:9b:73:a9:ee:0e:bd:d4:6d:4d:5b:f2:a7:
                    65:4f:b7:3e:f9:79:cf:c5:b1:af:3f:eb:18:aa:db:
                    bd:f3:37:07:81:09:4b:6a:91:fd:99:e2:35:7e:96:
                    ec:63:72:80:ca:fa:30:fe:79:15:4d:ea:38:a4:1f:
                    21:60:6a:53:dd:da:22:ef:c4:e7:80:44:5b:9a:8a:
                    a8:5d:74:bb:2d:4a:c0:20:85:f4:3b:da:f5:a8:f0:
                    ca:e9:4c:4c:7b:2f:dc:a7:c4:a1:ad:e3:9a:d1:09:
                    61:b1:9d:a4:4c:a3:bc:b7:b1:5b:ab:d8:ff:e0:69:
                    f7:0f:b6:41:e9:3a:fa:b3:51:db:a4:12:e9:1b:e9:
                    05:c7:90:24:3d:ed:85:a8:cf:fa:df:03:71:eb:22:
                    54:b4:a9:e6:08:41:4e:f7:84:3d:04:c1:2f:6d:76:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2F:A4:9E:C3:2A:4C:49:5A:95:27:66:CB:E5:43:03:A8:F3:31:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:d3:f7:33:10:cb:4b:8f:4f:9d:2c:99:cf:0e:a0:75:cf:
         63:33:c9:cf:dd:3c:71:4d:d3:81:69:70:7a:f6:65:f3:c7:ca:
         0d:7d:b3:8e:e0:ae:8a:1b:b9:63:03:05:81:80:53:5d:49:39:
         31:bb:1c:32:a5:90:b5:a5:2c:10:ce:00:74:8d:35:2a:04:9d:
         38:7c:88:03:67:5b:7d:c3:5d:e0:ab:f5:b7:ff:88:08:a7:31:
         5d:da:01:fb:46:3d:18:0d:80:fa:00:05:77:35:63:1d:4a:ed:
         eb:ce:cd:2c:1b:d6:2f:85:b0:49:4f:77:bf:53:48:72:ce:4b:
         6c:fb:a3:ee:5e:ca:69:30:dc:b3:3f:ae:bf:1a:b5:9d:f8:d4:
         2a:67:db:f1:ff:74:0a:53:f3:a8:00:8d:17:86:88:ff:9e:46:
         9e:2c:a6:0e:74:38:66:56:25:3b:f9:f8:d1:2c:cf:3b:ea:b2:
         4d:ac:db:16:ad:14:cf:b6:4e:60:10:a6:5f:24:28:93:90:8e:
         13:d8:f3:cc:ec:fb:00:1e:29:11:e5:7b:88:c1:8d:0b:4f:f4:
         8e:9a:5b:34:10:9c:f9:5f:66:62:74:e9:5c:c3:88:e1:f5:89:
         98:bb:d0:07:1f:4a:6c:4c:ce:0e:b1:eb:4a:ff:69:83:86:97:
         17:9d:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:03:15 2026 by rpki-client