Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa
File:                     0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa (raw, json)
Hash identifier:          dFLAv0WozunaTGQUtMIiwCIz5g1iKlUWGg9v7qDqPpw=
Subject key identifier:   C8:BF:39:D2:4A:9F:78:E2:C9:ED:E8:AF:CA:66:C4:EE:55:99:04:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E2E742577B9B32CB787F5A600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa
Signing time:             Mon 15 Jun 2026 16:09:43 +0000
ROA not before:           Mon 15 Jun 2026 16:09:43 +0000
ROA not after:            Sun 13 Sep 2026 16:09:43 +0000
asID:                     47007
IP address blocks:        104.129.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:74:25:77:b9:b3:2c:b7:87:f5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 15 16:09:43 2026 GMT
            Not After : Sep 13 16:09:43 2026 GMT
        Subject: CN=f610d536-2328-4b4a-820e-1ca6261dff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:73:a4:06:dd:1b:dc:c4:69:2a:7e:39:b4:60:
                    03:74:bc:96:3e:a6:c0:d0:9c:c4:a6:d2:18:1a:3f:
                    fb:5b:a3:3d:d4:ef:2d:8e:ec:3f:b4:6b:ab:48:ba:
                    88:24:bf:c4:e7:57:ad:c4:9d:bd:45:8d:f9:71:98:
                    c7:ad:cc:3b:1f:34:f8:17:64:63:e3:db:42:a9:19:
                    d4:8b:03:55:a7:cc:e6:71:37:10:b1:e8:6a:51:6a:
                    72:4b:4e:f4:03:01:72:70:76:87:59:f7:ab:c4:58:
                    38:93:e1:c6:c8:67:05:8a:c9:23:00:19:b7:06:40:
                    54:e4:97:49:78:6e:0a:c4:cc:76:8d:e7:b3:d5:ef:
                    b8:d6:0e:78:22:8b:ed:ad:a9:b4:90:b9:9b:32:02:
                    bf:22:fa:5d:5a:b7:fb:0f:3a:b5:fc:60:6d:4e:6b:
                    88:c0:59:c5:66:35:42:4b:0a:41:ca:75:a7:e9:ac:
                    2b:1a:5e:f0:ac:23:26:e9:e4:5a:6a:04:9a:ea:ad:
                    0c:c2:15:53:14:2b:76:46:e2:53:53:21:32:d2:8f:
                    83:91:c6:b5:66:52:f7:55:08:a2:26:80:6b:20:93:
                    9c:f0:f9:a0:11:10:43:7b:b8:4b:0b:84:7c:3a:ca:
                    bc:3b:ec:0c:4a:5a:bf:40:98:65:5c:a6:2d:fb:90:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:39:D2:4A:9F:78:E2:C9:ED:E8:AF:CA:66:C4:EE:55:99:04:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:a1:c3:5a:1f:28:82:5c:ac:68:31:dc:da:2c:98:c4:33:
         18:57:19:3b:05:e9:15:8d:4e:5c:47:8a:aa:d0:84:06:51:8d:
         d4:3f:c4:71:dd:4e:89:62:2c:21:26:f3:ed:df:34:dd:c4:9f:
         3a:40:93:79:6a:cd:1b:20:2d:ca:fe:11:94:fa:8a:3d:1a:b6:
         f7:e8:f1:c8:bd:22:9d:a4:bd:a2:17:c0:45:4f:d1:a4:cd:c3:
         40:bd:ca:ae:45:88:94:f2:51:70:b3:d9:9c:95:ba:7f:25:59:
         70:3f:36:8f:7b:fb:ee:4a:0f:4e:d5:71:da:2b:bb:34:f0:7a:
         6f:4d:85:95:f5:9c:26:66:c4:24:3e:de:bc:2e:a4:8e:e6:1b:
         b2:27:c5:b0:9c:bf:c8:12:0b:e1:06:15:d0:7b:ca:1f:81:f0:
         1d:81:d2:4b:e6:6d:3e:70:a6:97:9e:f1:db:c0:be:3e:29:df:
         77:53:57:87:08:8d:60:c9:fc:9a:ad:8e:60:e0:98:cb:9a:1c:
         e3:81:48:aa:59:63:12:54:10:50:83:6b:ab:7b:a3:78:85:b0:
         dc:84:29:b7:b2:82:02:e1:c2:2c:ba:5d:aa:ff:76:1b:8c:e4:
         30:96:2b:7b:92:96:6c:01:b1:b7:f3:88:b2:fe:b7:e2:95:20:
         ee:9c:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:04:31 2026 by rpki-client