Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
File:                     c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa (raw, json)
Hash identifier:          h7rGSjjVQBlyPyInfoNBrCErrEZ3u65KKjezog91Rwk=
Subject key identifier:   9A:08:1E:A9:3C:18:C7:03:06:A0:F3:37:8A:8A:6B:50:D7:56:CD:12
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584EA79BF8CE326B8B85609F6280
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        104.251.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:f8:ce:32:6b:8b:85:60:9f:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=386f70ec-2dcd-4f5b-99d2-d7bcec79c889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:00:5e:f7:8e:db:ac:71:ba:59:41:39:ab:
                    1b:45:76:fc:bf:d5:f8:fc:e1:01:2e:57:54:48:12:
                    0b:8e:84:09:ce:bf:af:e9:87:ca:58:55:f2:75:c9:
                    45:47:47:62:67:91:f4:7c:e0:61:c4:fa:d7:94:2a:
                    6f:9a:7d:9d:e2:09:bf:b7:4b:dd:45:9b:80:3a:f4:
                    d9:6a:36:0c:3c:39:82:bb:0a:61:5f:4f:af:d5:ca:
                    3b:7e:e8:e8:67:f2:de:5e:0b:12:28:0e:7f:76:1d:
                    4f:12:d3:73:09:f1:2e:cc:29:55:53:09:99:42:a8:
                    53:8b:25:f5:ce:b7:c9:af:d5:f7:54:69:ff:29:28:
                    1a:e3:d4:85:f2:f2:c8:0f:21:42:15:94:02:d0:69:
                    fc:f7:df:6c:a4:79:98:25:25:c9:40:2a:52:f0:77:
                    7d:82:ec:24:7e:22:25:d5:71:fb:95:d1:3e:15:d7:
                    2f:7d:14:f0:13:65:95:3c:e6:b2:a9:f5:15:e2:81:
                    4b:f2:84:54:d8:33:bd:97:ad:d9:eb:42:d7:44:34:
                    ec:a4:a2:59:7e:62:01:b4:7a:d4:3c:b3:f5:06:ec:
                    79:47:50:22:f6:d7:9b:1c:d1:72:bf:a7:42:f1:8a:
                    ef:f9:cf:4f:95:45:2e:fc:a2:2b:6c:3b:86:44:fe:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:08:1E:A9:3C:18:C7:03:06:A0:F3:37:8A:8A:6B:50:D7:56:CD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:11:4b:8b:a8:41:ed:23:a7:3b:a6:ec:b6:b1:f7:74:8a:
         56:4a:04:5c:48:59:57:bf:87:fd:06:7c:e3:c9:25:55:4b:e7:
         d6:57:e3:89:c2:43:42:5a:2b:f3:6c:e7:ed:fe:2e:43:37:11:
         62:22:a3:ce:d1:a8:bc:ec:71:63:5c:bb:64:38:42:91:57:5c:
         2b:d2:48:c6:aa:8a:9a:98:b3:e9:1d:e4:e5:c8:f4:7c:8b:9c:
         fc:f6:c7:45:88:90:5b:29:4c:28:fc:5f:09:82:25:fb:d6:39:
         68:85:74:dd:e6:ce:00:4c:e0:f0:7f:3e:6f:60:33:91:93:83:
         ad:7f:40:67:06:44:f0:8f:24:bf:77:9f:d8:90:70:a6:bb:c0:
         74:42:83:db:7e:c7:e7:3c:6b:4a:e2:2c:e6:88:e7:00:df:8b:
         86:d5:27:ca:61:7c:3c:46:ea:84:59:76:74:d7:49:32:53:24:
         d6:0f:1c:24:87:bc:53:b2:eb:57:6b:9e:98:c1:25:e1:ec:d8:
         fb:ac:2b:fd:86:b5:72:2e:91:6c:7e:33:76:f1:fa:11:1f:5c:
         5c:56:82:bc:e7:2c:3b:fc:53:51:7f:bb:f2:79:d7:64:de:d3:
         a3:b5:32:f9:a5:30:e7:d6:0b:95:ad:b0:7a:9b:b5:4e:e4:6e:
         d3:42:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:15:56 2026 by rpki-client