Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/c196ef6d-e81c-3139-bbd1-f4ffe69a98cc.roa
File:                     c196ef6d-e81c-3139-bbd1-f4ffe69a98cc.roa (raw, json)
Hash identifier:          W7iKJt2nGxMjOmB54CMpTV6HZSdwWxSIO/vKNo6eCmk=
Subject key identifier:   28:8B:0C:27:A2:8A:67:11:09:D2:2D:C6:77:91:F5:41:B2:85:AF:9E
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F4328584E66B726FCF302392259758900
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/c196ef6d-e81c-3139-bbd1-f4ffe69a98cc.roa
Signing time:             Sun 05 Jul 2026 19:50:00 +0000
ROA not before:           Sun 05 Jul 2026 19:50:00 +0000
ROA not after:            Sat 03 Oct 2026 19:50:00 +0000
asID:                     834
IP address blocks:        104.251.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:b7:26:fc:f3:02:39:22:59:75:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Jul  5 19:50:00 2026 GMT
            Not After : Oct  3 19:50:00 2026 GMT
        Subject: CN=4b475b6c-9f74-457b-83fa-8d2ee799005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:83:5b:fc:ec:c4:c1:0f:f6:21:32:7b:8a:
                    51:0b:df:02:2e:55:48:90:09:3d:87:b0:9f:6c:4e:
                    f5:44:d0:c1:6b:fc:8a:99:e8:de:28:f5:48:74:52:
                    c3:82:c6:c2:c3:f8:c7:75:75:4e:e4:f8:b2:7d:90:
                    17:8d:18:c1:73:39:66:48:06:bc:ae:ee:30:24:fe:
                    30:d8:cd:3e:30:84:73:2f:ab:db:42:23:80:f1:62:
                    c1:80:7e:f6:4e:46:5f:f9:7f:c9:ab:5d:e4:7e:bd:
                    64:91:41:1c:25:4c:e2:b8:f5:8e:c7:1e:a9:6b:ee:
                    07:f8:61:aa:eb:7d:68:97:56:b8:05:5d:6b:38:07:
                    35:2a:56:0c:8f:94:26:12:0d:4f:a9:a3:35:ef:47:
                    e2:b8:3d:6c:14:ad:b0:10:c4:0d:ad:c7:f9:a0:a3:
                    f9:15:6c:ea:52:b1:42:59:76:fc:96:2a:e3:3d:49:
                    89:08:04:15:78:57:87:40:8c:82:0b:45:e4:56:a7:
                    05:39:5d:d0:83:0a:cd:d8:89:0a:92:a3:28:3a:00:
                    39:fd:a3:0e:08:71:e6:18:a1:fc:ce:b1:f5:e6:b5:
                    81:9f:15:32:72:35:ef:9c:7b:4c:9b:09:7a:84:f1:
                    4f:24:6b:5e:c0:dd:76:bf:2f:d0:bc:64:c6:32:26:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:0C:27:A2:8A:67:11:09:D2:2D:C6:77:91:F5:41:B2:85:AF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/c196ef6d-e81c-3139-bbd1-f4ffe69a98cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:49:00:4a:12:04:1c:17:5e:78:48:4f:56:f4:10:b5:96:
         93:da:da:52:52:33:c3:4d:a0:61:12:72:4f:5c:56:8c:8c:27:
         01:83:c5:76:07:f0:89:77:62:1b:50:69:ae:9a:fb:33:b7:50:
         18:16:a7:e3:a7:46:c9:cc:3b:7c:e5:00:d0:db:75:65:17:ad:
         92:66:9c:ac:cf:72:f6:79:75:c2:e9:fe:21:d4:88:e9:de:f5:
         41:66:ff:0a:23:ac:93:f9:54:2a:28:53:d8:80:c7:fd:6b:21:
         56:84:64:1f:c3:02:b5:c7:11:1f:b8:d5:62:1b:1e:64:1f:0f:
         ed:75:90:9e:ce:ee:a0:04:81:06:e7:a3:91:96:24:5d:10:70:
         e7:94:72:1e:a6:69:97:3c:2f:83:c5:d0:f9:53:b6:4c:e8:c5:
         ee:df:0f:3f:6e:f5:32:cc:89:6d:51:a1:e1:e3:15:65:50:14:
         a1:a8:17:c8:f8:b8:ed:e0:8e:62:9b:55:4f:21:f3:16:4a:d2:
         93:4d:63:c3:41:72:86:67:82:bb:f1:1d:f3:91:21:7e:a9:a9:
         34:ce:39:d0:e7:6f:21:ef:bc:5b:54:01:36:e4:40:cb:cf:48:
         16:c4:43:4c:20:fc:59:d5:2a:25:85:db:21:72:b5:b8:42:18:
         ce:a1:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:24 2026 by rpki-client