Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa
File:                     fed345fd-8d03-3def-913f-fe4dd7109671.roa (raw, json)
Hash identifier:          YlmLigVQVs5j5i2vNt2/jB2Kz5Bl67rVqLxa9E8AqUY=
Subject key identifier:   22:8B:E8:0D:75:FE:9A:78:E5:ED:0E:B6:C1:39:3A:C3:C4:48:36:87
Certificate issuer:       /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial:       010D0C9F4328584EA797FBE0F824F36FE8412B80
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62533
IP address blocks:        104.219.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:fb:e0:f8:24:f3:6f:e8:41:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d8704ef1-cf58-4bae-90b3-7d06463daabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:68:44:55:0e:b8:64:34:6f:e9:9f:31:53:
                    42:e0:ac:53:19:23:0d:3b:c0:33:e7:b9:af:c4:72:
                    c8:14:fd:9d:2d:65:b6:7a:a5:01:55:01:55:19:73:
                    86:9f:7c:09:d6:b3:e7:ed:71:e5:d4:1a:68:ba:ad:
                    03:3c:ea:68:94:1a:34:94:57:a7:59:a6:29:29:ad:
                    57:52:4a:cf:bb:a7:5a:4d:cc:9d:53:d4:58:f5:b4:
                    75:2b:e6:57:19:65:19:4a:0d:30:93:81:3b:ef:8a:
                    a6:8b:2d:1f:ad:f8:4e:73:19:ac:83:e0:d7:59:9e:
                    e6:cb:3b:3d:9a:62:25:69:54:95:9a:08:b3:1c:a0:
                    3d:54:bb:50:64:78:84:d5:8f:37:99:c9:ce:71:40:
                    d3:77:70:84:41:8d:13:53:4d:fa:db:6c:d8:25:dd:
                    0e:6a:52:bf:bd:52:69:b5:07:c5:77:96:cf:59:b2:
                    82:1e:a1:d8:d7:c5:af:f7:22:c4:5e:26:a1:f9:e7:
                    96:d2:ad:ba:de:04:56:fa:22:bd:c0:e1:ec:de:47:
                    45:fa:af:2c:8b:60:50:19:71:c4:52:0e:2b:22:66:
                    66:68:6f:2a:44:dd:6c:cf:d8:fd:bf:a8:40:c8:72:
                    45:3d:78:b6:ae:29:29:e9:44:bd:d3:12:4c:e8:59:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:E8:0D:75:FE:9A:78:E5:ED:0E:B6:C1:39:3A:C3:C4:48:36:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/fed345fd-8d03-3def-913f-fe4dd7109671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl

            X509v3 Authority Key Identifier:
                keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:a9:c6:fb:fd:7b:58:9c:80:a9:2a:98:eb:3e:51:1e:2d:
         4a:a3:5b:08:57:9e:89:6a:73:cc:b9:31:37:6d:12:52:a7:59:
         e9:e8:55:0e:23:14:fd:d6:99:0d:e3:18:e3:c9:19:02:06:df:
         f1:1e:6d:49:a8:1f:76:fe:2f:63:76:79:c8:a6:e6:5f:c0:4e:
         86:5c:3f:3d:03:e2:6c:3e:91:12:9d:36:7c:7d:07:78:9f:25:
         be:d1:9e:ad:d5:c3:6b:2e:40:e3:a6:9b:86:61:6b:19:d9:22:
         19:a8:9c:dd:95:93:16:96:71:ef:bd:1d:0a:7c:e4:8b:c6:75:
         8f:a4:c2:8c:07:91:a4:a3:c0:97:4d:5c:49:b6:8d:e8:e7:96:
         be:90:f6:58:97:6b:b5:68:b5:88:92:72:2c:51:8f:79:56:3c:
         be:3a:7a:8d:94:e8:7d:a2:6c:e5:dc:55:8a:17:57:19:57:f6:
         ca:f9:c3:c4:0b:42:7a:9e:7f:04:2f:7c:ce:2f:1a:3d:ba:74:
         a6:3f:4a:a9:04:af:35:00:36:f4:5a:5e:89:bd:3d:12:67:59:
         bc:1e:32:11:3b:88:66:c7:6b:3d:22:36:46:82:e8:e1:df:83:
         7e:03:15:95:37:78:a9:bb:24:55:1b:66:ac:c4:e0:cd:ac:55:
         63:17:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 04:01:12 2026 by rpki-client