Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba450a9-3fc5-3911-b190-eaff1944873a.roa
File:                     fba450a9-3fc5-3911-b190-eaff1944873a.roa (raw, json)
Hash identifier:          NMHKq6VeOYjEgw+rqqKM1kzA2Y6hGxiejGUy3qq77v8=
Subject key identifier:   B8:19:B3:91:AE:5E:80:17:A0:D3:CB:2E:70:7F:3B:4A:AA:CD:1F:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EB416FD8F8EE5CC70A85F9980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba450a9-3fc5-3911-b190-eaff1944873a.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     396982
IP address blocks:        104.197.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:fd:8f:8e:e5:cc:70:a8:5f:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=53bb480e-aa04-49be-889a-979e24605ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:b0:25:0a:8b:39:df:1e:89:85:33:ba:9f:
                    c8:07:62:9a:9c:df:c8:ed:8f:55:61:9a:12:61:f7:
                    3b:13:3e:fc:43:9a:9c:7f:ac:8d:4e:44:e0:81:c4:
                    0f:84:99:53:c1:be:c1:70:45:b4:38:ec:1a:f1:46:
                    f0:d0:07:a1:04:17:d0:fa:6b:ac:7a:d6:a9:c8:0e:
                    89:45:a3:44:d6:f7:d0:79:97:5a:e1:9e:45:a1:6a:
                    ed:b6:5f:d0:4e:d7:13:b6:3e:a2:96:4c:e8:18:1d:
                    a8:ee:19:17:ec:b4:e9:10:cd:f2:94:58:bd:71:87:
                    57:3b:a6:77:5c:97:6a:f3:77:cf:28:f4:f4:65:6e:
                    e8:2b:b5:7e:17:e7:77:aa:7d:88:f1:91:98:eb:66:
                    22:9a:7f:f7:9b:0a:61:ed:98:1a:7b:2c:df:b6:91:
                    34:55:7f:7e:4a:55:98:90:9e:6c:41:2f:ee:8a:cd:
                    31:1a:b5:cc:88:b5:6a:6a:51:6d:13:1d:fa:da:75:
                    95:50:54:6e:d1:ff:20:07:28:6f:5c:5b:8d:3c:ab:
                    64:b0:8b:c5:ff:78:bd:d1:b0:7d:f1:b5:a8:fa:08:
                    ea:68:2a:8b:71:35:57:07:27:c3:fe:d4:03:b9:0d:
                    4e:5f:d7:62:a1:8a:c4:f2:57:3c:68:7c:d0:38:6c:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:19:B3:91:AE:5E:80:17:A0:D3:CB:2E:70:7F:3B:4A:AA:CD:1F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fba450a9-3fc5-3911-b190-eaff1944873a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:41:c6:e2:3c:50:53:98:39:b3:54:17:8e:fa:fd:c1:70:ec:
         21:cc:04:6f:48:b2:0f:cf:eb:6b:27:56:8b:b2:a9:25:fa:f1:
         7b:6b:09:56:dd:e0:4a:a6:cc:f5:cc:74:ad:49:db:5f:bc:24:
         15:e9:2d:de:ce:53:80:78:af:d9:3b:ce:f3:19:c5:0a:ca:31:
         f9:8f:c4:ed:8f:d8:92:51:87:a5:5f:18:80:ce:71:1a:64:20:
         9c:33:91:23:9b:cf:e2:b7:5f:99:29:0f:ed:4c:40:88:7d:15:
         1f:6c:98:00:d3:86:ce:83:21:1b:c6:08:33:78:ba:6f:0e:52:
         23:02:74:2d:ee:9b:82:83:66:fd:4b:3a:36:b4:c1:a7:17:85:
         0b:13:5d:f3:3d:f8:06:0a:9f:94:31:2a:b7:fc:53:1d:c7:7c:
         7b:5f:41:61:66:26:b2:5a:a8:6c:0f:71:38:fd:f5:ee:de:dd:
         8c:5f:44:4b:e2:d1:4d:7b:2a:cc:2e:ca:04:c5:48:c0:9c:45:
         cd:28:91:a8:30:1f:c8:46:f8:de:63:bb:c2:96:3c:85:4e:80:
         2b:5e:ad:0f:e2:41:4b:a4:ab:b5:07:61:d7:cd:08:b8:f9:e8:
         c2:0d:98:3f:00:33:58:a8:d2:21:ae:59:5b:b9:3b:a2:f7:27:
         ab:4d:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:51:31 2026 by rpki-client