Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
File:                     a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json)
Hash identifier:          dScd1jeybqqVTDDhMdw15P6dVJH2K9scs3LF3LTzmjQ=
Subject key identifier:   BA:7C:53:1E:46:2C:FE:AF:41:77:FA:B9:72:F1:AB:00:ED:30:E6:3F
Certificate issuer:       /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Certificate serial:       010D0C9F4328584F2957B49A26FB311BA3325400
Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     399833
IP address blocks:        104.250.248.0/22 maxlen: 25
                          204.144.124.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b4:9a:26:fb:31:1b:a3:32:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=6a043369-c535-42db-8ea3-652c2d92c105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:70:81:24:79:7e:cc:05:4b:f9:74:2f:08:
                    75:ab:fc:81:5a:3b:a6:8d:ae:6e:fb:2f:1d:d1:31:
                    df:22:33:27:8d:f3:4c:06:bc:a6:e6:e3:87:4a:79:
                    7d:bd:44:cb:42:d5:b5:e9:bd:a5:d1:00:24:f1:bf:
                    22:e0:f0:ce:eb:86:6b:4f:39:f1:55:eb:fb:56:15:
                    c9:e3:27:2b:1a:a3:c6:9d:04:0e:ba:96:56:20:9d:
                    c3:c5:64:0a:8c:a8:c4:99:d1:6a:10:81:fc:23:bb:
                    2e:2f:32:06:a9:b5:6e:79:b8:69:f4:f3:91:df:73:
                    c6:cb:61:ba:19:1e:5e:f9:13:0b:df:21:92:1f:83:
                    24:57:56:39:91:3e:03:74:dd:84:aa:cc:b7:15:3d:
                    df:81:d8:86:ae:76:fc:62:af:08:b6:d1:97:83:72:
                    66:2a:37:82:dd:d3:e9:9a:8c:34:5c:0d:0c:4f:9d:
                    e6:2e:1c:f7:72:08:cc:d4:f1:58:6d:cc:a7:d8:99:
                    a9:32:2f:a8:f7:2d:f8:76:41:67:a1:bc:3f:15:ce:
                    3e:ee:93:26:57:0e:c3:30:a9:d8:bc:29:8c:70:f1:
                    3a:d1:3e:6f:d0:a8:8a:c2:d6:b2:fa:e3:eb:ab:e0:
                    20:9a:9d:cf:3c:e2:57:9f:01:51:c2:b4:08:b2:3c:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:53:1E:46:2C:FE:AF:41:77:FA:B9:72:F1:AB:00:ED:30:E6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.248.0/22
                  204.144.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:18:03:ed:66:45:f3:cf:43:21:23:25:76:ff:03:1e:82:78:
         97:06:2e:f4:0e:d9:53:ce:d8:96:59:a1:64:d4:20:43:74:58:
         a5:1b:5f:9e:92:dc:78:d5:af:b2:84:e0:bc:6e:33:0b:f3:77:
         c4:d8:c6:22:81:04:22:3e:83:35:62:0b:19:0d:9c:33:3a:37:
         c4:04:13:52:bb:78:00:ae:bb:29:ca:ee:36:bf:65:ee:0c:80:
         85:34:34:0b:83:b4:c1:8c:63:d8:27:dd:e5:d2:f7:a5:3d:6e:
         b9:fe:9a:f2:67:4b:12:64:57:5c:f6:53:10:b1:36:86:8f:ac:
         6a:54:66:f7:6b:53:f1:06:ea:fb:10:c0:d4:18:61:77:21:19:
         80:33:71:2a:4b:0d:01:a3:7e:ca:4a:88:23:d0:15:6e:be:0f:
         ba:e2:7d:0f:f5:99:7e:7b:1f:c5:51:5e:cc:f1:5d:aa:62:9e:
         66:2e:4c:12:2d:76:48:b7:71:f9:4e:59:37:47:12:00:26:e3:
         58:78:8a:b2:37:f5:f9:55:de:c8:8f:fa:f1:9f:8b:36:b8:bc:
         8b:e4:ad:5c:39:45:0a:fa:b4:d6:8a:79:5e:e7:f9:5a:71:3b:
         69:06:f3:73:66:61:e6:6d:d5:bd:c8:b9:27:56:54:e7:0a:ee:
         fb:f5:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:00:03 2026 by rpki-client