Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/7a464393-dc73-38e3-93cd-270bcd6fad43.roa
File:                     7a464393-dc73-38e3-93cd-270bcd6fad43.roa (raw, json)
Hash identifier:          GZaa5iEedc0ONABxQ0RtBlaisteJo0BJRw0e47xDHcU=
Subject key identifier:   74:89:B6:A9:08:ED:17:FF:7D:57:39:B8:84:5A:23:16:6A:53:EB:90
Certificate issuer:       /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial:       010D0C9F4328584E2E221833423368B42241E68A
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/7a464393-dc73-38e3-93cd-270bcd6fad43.roa
Signing time:             Mon 15 Jun 2026 13:24:24 +0000
ROA not before:           Mon 15 Jun 2026 13:24:24 +0000
ROA not after:            Sun 13 Sep 2026 13:22:55 +0000
asID:                     396982
IP address blocks:        104.254.204.0/22 maxlen: 22
                          104.254.204.0/23 maxlen: 23
                          104.254.206.0/24 maxlen: 24
                          104.254.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:22:18:33:42:33:68:b4:22:41:e6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Validity
            Not Before: Jun 15 13:24:24 2026 GMT
            Not After : Sep 13 13:22:55 2026 GMT
        Subject: CN=2d7994e8-f0a9-481d-9a02-e5f7111c0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:74:a1:08:aa:ee:10:ba:95:d1:5a:0c:42:
                    8b:83:06:11:44:0e:17:11:d1:98:85:05:80:52:26:
                    ba:94:d5:e4:d1:1d:64:d1:e2:cf:36:bb:ef:78:32:
                    74:96:64:0b:f6:be:f4:08:25:37:9d:af:9f:36:e1:
                    df:18:29:4c:6e:ef:65:25:b2:06:16:0e:1b:0b:44:
                    76:c7:7e:8f:38:f8:1f:4e:e8:0c:d5:6d:e5:1a:55:
                    e1:9f:9b:da:58:68:f4:42:17:2b:1d:31:c3:dc:47:
                    9e:32:0c:13:49:4b:09:b6:3e:03:d7:cd:78:18:13:
                    f8:9e:f1:62:c3:7c:d4:a0:64:54:25:a5:e4:01:a8:
                    4c:df:5c:fa:af:d8:b0:97:8e:c1:89:02:7a:45:30:
                    5f:93:8b:c7:59:2f:26:e8:7a:05:79:91:d5:df:7f:
                    02:ea:57:e6:7d:b6:7e:5e:2a:1f:fb:19:a2:a3:5d:
                    5d:cd:4f:32:49:62:0c:08:17:6c:e4:ce:bb:23:e6:
                    45:d1:d4:20:62:20:09:ba:e8:24:48:61:be:37:0a:
                    86:9a:4a:73:30:11:fc:46:02:d6:4a:b8:0c:82:26:
                    b5:81:01:a3:28:c4:81:cf:2b:06:53:31:8e:4a:9d:
                    a3:61:30:be:15:a0:b9:3e:c3:ce:94:9e:8f:75:0b:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:B6:A9:08:ED:17:FF:7D:57:39:B8:84:5A:23:16:6A:53:EB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/7a464393-dc73-38e3-93cd-270bcd6fad43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:98:f1:e0:63:0c:e4:22:b7:be:cd:d3:e6:a7:d8:4b:20:
         55:1c:81:7c:01:a0:8b:cd:c3:52:97:f5:04:76:d4:df:db:77:
         62:eb:42:66:e8:f0:70:06:7b:f6:ea:2d:c3:0f:a8:e1:df:c7:
         f5:c3:93:89:db:ad:42:f3:39:fb:7f:a6:d6:d5:40:a1:0e:79:
         4d:bf:1c:d7:a0:24:e5:83:85:bc:42:1b:24:5e:af:6e:4f:18:
         91:27:19:b9:cd:15:d4:37:c6:ab:63:df:9b:ad:f2:05:11:a9:
         6e:9c:6d:72:bc:ee:06:9e:5a:dc:94:c8:80:34:40:b3:5d:a1:
         1a:65:1a:16:cd:55:1b:07:98:51:99:13:b3:23:fd:61:88:69:
         d6:ce:db:74:5f:2e:fa:cd:df:a6:23:9b:19:a2:4b:98:fb:65:
         3f:72:11:88:87:21:c6:71:19:05:39:49:73:b2:e3:7d:df:36:
         e5:aa:72:58:12:12:e7:61:b4:ac:9e:8b:33:5b:72:53:90:2c:
         65:db:91:3c:47:7d:89:9b:ba:e9:3a:87:c1:b9:15:6e:0c:3f:
         4c:52:d8:f6:37:b1:8f:ea:bd:72:f3:bf:21:2b:50:46:03:7b:
         18:4f:61:10:4e:4c:e2:dc:23:2d:76:e4:60:ff:d6:31:d0:43:
         78:49:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:50:57 2026 by rpki-client