Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
File:                     bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa (raw, json)
Hash identifier:          H28Okh5QZnnA4JQeypF+oED0vJxzZw9ImBkIfkK4q68=
Subject key identifier:   66:A6:F6:C1:3C:F3:6E:99:AC:73:5D:50:4F:2C:42:DC:64:FB:4E:3E
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584F82ADA1D909D9FBCB7E6009C0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     33185
IP address blocks:        104.167.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a1:d9:09:d9:fb:cb:7e:60:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=53d578ca-c61e-43d0-a066-c8a44e7145cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:b6:4c:07:b3:8f:91:0d:a3:04:8c:eb:fc:
                    59:8d:91:3b:c7:95:98:4e:0d:b9:2e:1c:8e:a5:0a:
                    74:a1:83:ea:2d:07:d2:c3:2a:7a:98:91:83:da:12:
                    9e:76:a6:7f:29:20:c4:8f:09:ee:eb:43:9e:0e:68:
                    bd:1d:7d:db:04:c6:64:e4:57:49:69:09:13:69:d6:
                    e7:28:42:68:34:72:a4:50:45:af:7a:75:ef:54:96:
                    dc:5f:70:91:0f:a3:0a:8f:e7:e9:f2:40:07:ef:16:
                    c8:f1:41:81:e5:75:e0:9d:44:b5:c9:fe:94:0d:a5:
                    91:59:56:55:cc:eb:69:21:ca:69:23:70:d1:13:36:
                    f5:f5:32:eb:0f:61:1e:38:74:05:52:9c:b3:64:d4:
                    d7:01:3b:51:31:f6:ed:65:95:0c:71:39:2c:f6:f1:
                    ea:8b:35:d3:eb:33:98:5f:e6:30:00:0d:3f:c2:08:
                    68:70:50:a1:bc:c7:fa:6f:bd:87:f2:32:b8:ea:8d:
                    38:da:85:ec:0f:70:6c:1f:71:d9:51:de:39:41:e2:
                    4d:ab:82:cc:e5:61:92:37:99:aa:76:7e:8b:48:50:
                    01:6c:b5:d4:b9:6b:c5:6e:13:b0:6a:0d:9a:85:db:
                    b7:21:99:9c:66:26:85:de:27:e6:7e:52:e8:3a:0b:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:F6:C1:3C:F3:6E:99:AC:73:5D:50:4F:2C:42:DC:64:FB:4E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:35:1c:a4:f3:57:89:71:4b:95:80:bb:77:b6:6b:9e:74:9b:
         06:41:4c:d9:50:17:bb:cb:4d:0e:37:0d:92:9c:87:cb:ee:86:
         bc:da:b5:97:24:98:8d:91:de:7c:98:36:88:31:07:00:4c:42:
         7d:24:92:8d:51:9f:bd:07:a1:41:58:8f:b5:51:84:9d:6b:37:
         30:54:dd:06:f2:cd:3a:c1:f7:45:d4:6e:bd:55:47:e1:68:66:
         60:da:a3:18:c6:eb:d1:44:fa:84:1a:16:ac:89:fe:fe:be:f0:
         14:77:38:b2:c1:6a:ea:24:fc:3a:72:24:dd:55:ee:f3:03:3a:
         9f:51:3c:36:d4:75:fb:8a:0b:f4:54:c6:64:26:32:69:e9:ca:
         92:45:c5:8d:5b:31:6d:35:a1:58:89:f0:b5:1f:74:a3:ff:63:
         fb:d5:d1:87:f9:99:db:f0:1e:d8:fb:94:f1:dc:76:8a:f0:2c:
         97:84:06:01:f3:9b:ba:8a:60:6a:c1:d1:0a:4d:43:a9:c1:d6:
         aa:a4:a1:fa:ea:9d:f8:c9:30:0b:d7:18:41:5f:44:2e:51:98:
         7f:42:78:c2:3a:21:bc:ba:09:30:60:d5:39:32:4e:8a:26:cd:
         57:08:50:3c:ca:63:af:b4:4b:4b:a5:a7:69:8d:2c:2f:66:39:
         54:3d:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:31:57 2026 by rpki-client