Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
File:                     8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json)
Hash identifier:          Y7xfAMP09amjLIKYVflL8y6Z/CJbsbGi/Gi7RmhxuU8=
Subject key identifier:   FD:96:40:07:B4:3F:FF:35:0B:A8:C8:3C:31:85:91:BE:E9:ED:16:9C
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584F8578601F43A4329231381B00
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     1239
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:60:1f:43:a4:32:92:31:38:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=4ef05ff0-8181-4700-802b-2ef5aa8281de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:7a:23:a4:79:c6:c6:92:ce:13:38:90:ae:
                    3d:23:b6:d9:90:52:33:a2:b3:72:c8:cc:63:ec:6f:
                    36:6c:57:a2:c6:14:18:4c:28:72:09:2f:17:61:c5:
                    fe:75:5b:0f:0b:a5:a4:d7:17:6b:2b:a6:5b:7f:1d:
                    1e:6b:e0:b5:ef:dc:08:94:b3:e8:5e:f1:33:24:b5:
                    98:46:fd:92:8a:c3:3c:cb:a8:9b:92:09:a0:9e:3c:
                    43:73:94:6b:5b:62:55:55:07:13:1d:6a:3b:b6:49:
                    69:f2:52:66:e9:e2:2c:fc:dc:09:88:01:a1:f0:4e:
                    ea:be:69:55:dc:44:01:f7:b5:b2:5b:08:f4:e3:55:
                    ce:bd:d1:d0:67:c2:2d:47:3d:36:d9:9a:8e:af:99:
                    2c:21:34:55:2f:80:63:e1:6d:a9:fd:69:c6:da:7d:
                    7c:56:78:00:d8:ce:f9:05:29:1a:5b:2d:26:85:42:
                    45:74:4b:c3:da:04:cd:ad:48:0e:7c:9f:2f:bd:0a:
                    68:eb:92:e2:3d:89:96:0e:25:ed:4b:eb:36:c3:e1:
                    5d:74:23:8b:44:aa:cc:2b:49:af:46:2b:28:bf:9d:
                    2e:9e:84:ed:08:33:a4:34:3b:74:3b:5c:90:10:f7:
                    27:50:57:bb:8b:3b:56:ae:45:94:db:38:f0:87:9b:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:96:40:07:B4:3F:FF:35:0B:A8:C8:3C:31:85:91:BE:E9:ED:16:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:ff:45:e1:52:74:78:ec:4a:87:76:8e:19:ce:a7:3c:95:
         81:b0:e4:3c:a0:34:70:78:72:17:54:bc:ec:a2:12:66:34:9a:
         91:65:ce:54:53:18:52:93:b2:f9:95:9a:7a:41:56:5e:9b:ad:
         71:21:17:2d:7a:2f:4f:7c:b0:04:7a:52:1b:af:9a:1c:73:d3:
         72:a9:8a:bc:af:1c:ee:c8:95:88:8a:eb:0e:5b:a1:d1:10:01:
         b6:21:76:bd:8d:b0:f4:f2:34:5f:15:dd:53:2d:2b:20:96:ad:
         e3:24:73:eb:c1:f2:0a:f3:c6:1d:f5:52:29:8b:00:f7:16:c6:
         e4:20:2b:e0:c0:0a:f6:7a:eb:98:41:8a:ee:5c:c5:09:d3:cf:
         76:ba:2f:68:e7:ec:b0:a2:77:a1:3d:b1:23:87:b4:3d:64:7b:
         b0:7f:09:60:56:ad:9e:a8:a5:92:db:94:56:53:c3:95:fd:0f:
         a4:1e:be:1b:a3:fd:7a:3d:16:33:c3:f6:3b:37:72:7f:7f:5e:
         53:be:e3:c8:0a:dd:de:c1:51:c0:13:87:69:56:a5:68:93:6d:
         65:ef:fd:43:c3:f7:09:fe:61:ea:9d:b3:25:73:3a:2d:a9:d6:
         e8:d2:25:9f:6c:18:06:a2:76:2a:cc:39:86:ac:70:46:f8:17:
         62:16:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:23 2026 by rpki-client