Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/d6a23586-b9b9-3a43-a461-0ef285cfef5e.roa
File:                     d6a23586-b9b9-3a43-a461-0ef285cfef5e.roa (raw, json)
Hash identifier:          SU00xpJtkd5EcuGGSnYJI+pu9JpkfANHCnfMdOjBx/Q=
Subject key identifier:   38:8F:03:59:E7:17:CA:B9:4A:78:54:11:00:4F:7A:D2:4B:61:96:E7
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EF446D0B685506E9105188F00
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/d6a23586-b9b9-3a43-a461-0ef285cfef5e.roa
Signing time:             Tue 25 Aug 2026 12:48:26 +0000
ROA not before:           Tue 25 Aug 2026 12:48:26 +0000
ROA not after:            Mon 23 Nov 2026 13:48:26 +0000
asID:                     55201
IP address blocks:        104.247.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:46:d0:b6:85:50:6e:91:05:18:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Aug 25 12:48:26 2026 GMT
            Not After : Nov 23 13:48:26 2026 GMT
        Subject: CN=f66f02a5-a43c-4bb6-88ce-226484534d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:fc:06:5e:09:8d:97:1b:9a:e5:08:ab:17:
                    96:2a:1d:70:5e:32:d9:dd:8a:86:82:a2:c2:42:60:
                    6f:ba:00:72:d5:4b:e6:62:70:3e:ae:51:48:d9:64:
                    2f:ef:89:0a:c0:88:bf:88:17:de:02:f6:3c:02:fc:
                    e1:28:94:14:ba:4f:d1:d4:aa:cb:da:d8:4c:d2:d7:
                    69:98:f7:67:e8:91:b7:bf:b8:f1:b1:ca:24:76:c8:
                    87:8a:ab:e3:86:6e:dd:1a:87:b6:d4:be:34:f2:86:
                    0e:ad:8c:ee:76:83:12:1b:29:f8:2a:15:fd:e3:81:
                    1e:d3:1d:7b:aa:fc:57:fb:d6:1d:5f:d0:7a:2f:80:
                    b2:10:fd:40:81:db:58:f2:ab:0d:2a:57:62:61:3c:
                    74:84:5d:05:04:67:ad:8f:85:b6:f2:30:4b:c8:9b:
                    65:d5:1a:ed:e4:80:b6:af:26:92:4a:fe:e7:89:f9:
                    28:d7:8e:4f:0d:c5:aa:b9:f1:2b:18:fb:c1:1e:0f:
                    fe:63:63:a6:eb:91:76:02:02:fb:fa:45:9a:06:dc:
                    89:c1:57:2c:13:c6:bb:5a:91:42:93:30:57:56:5f:
                    8c:fd:df:2c:94:b2:31:07:a0:e2:aa:b8:de:a2:b8:
                    bd:d2:4b:49:06:de:f4:8f:5b:76:de:15:48:43:28:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8F:03:59:E7:17:CA:B9:4A:78:54:11:00:4F:7A:D2:4B:61:96:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/d6a23586-b9b9-3a43-a461-0ef285cfef5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:35:03:f0:07:0c:8d:33:e9:98:39:ff:05:a4:5b:61:cb:
         9c:b2:72:65:b5:68:bd:96:b1:a6:3c:c1:9e:a4:f5:54:d1:bb:
         81:5f:80:3f:08:d2:6f:9c:a3:3b:ba:30:6e:78:b4:8c:5e:0f:
         21:10:b8:05:bd:0b:3c:f0:f7:97:fc:bf:7f:5a:3c:59:72:d6:
         35:e8:8c:3d:ba:7f:c9:40:31:9a:b0:e9:03:2b:aa:43:dc:10:
         89:1b:db:d7:51:81:7d:9f:bd:f7:17:fe:01:16:1e:84:de:46:
         9b:6a:72:0d:88:ea:36:e0:53:d6:05:10:30:40:40:9d:ec:c7:
         d8:e1:99:61:d2:12:4c:b1:e0:cd:f3:c6:3c:0a:b0:26:69:4b:
         02:5d:be:5b:68:4e:b2:e9:bc:23:fc:b4:60:ce:df:00:ed:a9:
         b1:a4:f4:23:21:3a:9c:a7:a8:e7:53:c4:f9:96:7e:50:89:a9:
         34:54:29:ab:58:e1:61:ca:2a:34:62:17:3b:ea:2c:ed:8a:67:
         da:3d:bf:eb:9b:35:7d:d9:ea:5e:2f:ae:a2:73:5f:c7:62:90:
         08:15:93:67:2a:93:a4:4b:89:b4:e2:4f:f0:2b:50:ef:ae:3f:
         80:d1:21:7f:9f:f0:76:20:bb:49:7a:7e:83:b8:b8:dd:e5:85:
         3b:8d:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:52 2026 by rpki-client