Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4084970-60ba-38ca-b27c-0c382624cb2b.roa
File:                     b4084970-60ba-38ca-b27c-0c382624cb2b.roa (raw, json)
Hash identifier:          13fpaKtUrtlof/3xj9yTcok5vmLrAt2+k6Ih3yVxbA4=
Subject key identifier:   C1:1C:61:63:82:32:18:16:0D:2D:CC:20:8A:C5:CC:16:6F:D7:D0:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F497CB8A25015DA092B227840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4084970-60ba-38ca-b27c-0c382624cb2b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        104.197.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:b8:a2:50:15:da:09:2b:22:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98d9c1a6-cf52-4a41-8019-0fa4749a847e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:8b:df:11:44:f1:ef:b9:ef:0f:7a:12:8e:
                    bb:06:72:af:5f:af:fa:ea:d4:25:6c:03:93:3b:b7:
                    ce:25:84:40:63:1e:ae:9c:a5:ec:c2:70:92:20:68:
                    d7:6b:d8:33:8d:ae:57:47:b2:95:c1:75:f9:16:1e:
                    86:70:da:9a:dc:8b:b1:1d:bf:c7:2c:1a:fc:4e:79:
                    f1:1e:25:e2:89:33:72:90:00:b5:55:b2:d3:76:99:
                    eb:75:9e:ae:34:32:84:ab:cf:cb:79:83:50:c4:75:
                    fb:78:b7:7a:d4:1f:b8:62:83:cd:1e:ad:5e:ae:e1:
                    cc:87:69:a4:5e:97:74:d4:01:06:e3:f3:80:dc:6f:
                    3a:ec:b7:59:68:ab:d6:cc:0a:10:94:1e:4e:e5:10:
                    ba:e9:36:d1:ff:06:a1:53:cf:62:9d:9b:e0:50:50:
                    f1:81:e6:52:7a:27:01:90:3a:80:b7:d9:90:48:48:
                    e1:99:bb:c9:0d:3c:46:8c:aa:0f:9d:2b:e6:04:a7:
                    01:a3:16:f7:30:19:54:28:99:50:db:08:9f:16:cc:
                    db:f6:33:0e:f3:09:9a:09:d0:19:cd:49:65:f7:18:
                    49:89:55:16:ad:0e:dc:fc:d3:df:ac:bc:bc:24:f5:
                    58:09:a9:3e:79:49:2d:05:db:71:53:e3:ba:40:63:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:61:63:82:32:18:16:0D:2D:CC:20:8A:C5:CC:16:6F:D7:D0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4084970-60ba-38ca-b27c-0c382624cb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:85:52:47:2d:c1:81:d6:63:23:4c:96:b2:8f:53:7b:66:
         fe:b0:68:fc:b9:35:17:59:01:d7:a4:9a:b9:19:90:14:d8:3c:
         aa:1a:77:23:66:19:ac:f0:ce:9a:5c:9e:85:39:d4:69:a0:6b:
         ca:fc:47:bc:85:dd:f6:37:a6:db:71:37:a1:1a:0d:dc:41:ec:
         12:f1:86:8c:af:83:a2:b8:5e:2a:5b:31:e6:57:2b:08:d6:ef:
         3f:ee:38:c1:a4:54:2f:c6:a4:bb:36:8b:7e:96:5d:01:83:b9:
         84:5b:96:65:68:50:96:04:d4:b2:d2:13:29:41:0b:f8:5f:67:
         86:a0:ab:b0:50:0d:64:0e:32:f2:70:a5:89:6d:f4:01:39:1e:
         7e:07:9a:3b:40:9a:a8:1d:9a:c0:3f:32:86:a3:a3:75:30:64:
         96:de:f0:6c:df:fe:d7:dc:1e:51:0f:02:da:8a:b9:e2:94:fc:
         2d:ab:eb:67:dd:48:45:05:1e:78:66:24:1c:d1:fb:0e:0c:8d:
         51:52:64:bf:b9:12:8c:2f:bd:d9:1b:13:ef:b8:c6:b9:5b:7b:
         a8:a0:3f:4c:73:ed:d5:d0:65:e7:65:2d:4c:c3:9f:25:d5:a2:
         a2:8b:e4:a0:c4:2a:40:c6:12:fe:20:46:61:50:be:70:6b:a3:
         90:e7:ad:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:24 2026 by rpki-client