Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
File:                     472b8477-15d6-33d4-b0d4-4c577d494c08.roa (raw, json)
Hash identifier:          5Pf/szZP187vT8kGFV+ePrQBhfQaAb1f5CxfxLWYC80=
Subject key identifier:   C2:3E:E7:B9:15:4D:F3:54:BE:80:A9:0C:DF:98:71:86:36:89:69:ED
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584ED001F2E8A32AEBA973F24400
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     9312
IP address blocks:        104.245.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f2:e8:a3:2a:eb:a9:73:f2:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=cd115587-3fff-4a6f-95e6-9db260bc6d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:0b:4b:8a:1e:32:61:91:82:bd:fc:3b:26:
                    77:1f:42:08:a7:7c:4f:39:19:ab:8d:48:02:51:1b:
                    87:8c:7b:99:13:c5:21:42:c8:3e:b5:d4:8c:94:8e:
                    a0:28:87:b9:79:47:b6:7e:15:f2:af:51:5d:25:81:
                    81:72:09:f3:cf:e0:62:00:24:dc:07:e3:9f:00:d5:
                    fe:94:d4:91:cc:f2:2f:70:88:e3:0c:64:66:59:4d:
                    c2:0a:a2:60:eb:73:87:5e:87:37:61:68:2d:a7:5d:
                    44:f5:9e:1b:bb:9a:ff:bd:f2:ca:4a:df:f0:be:cf:
                    84:c1:53:ca:ed:73:82:b4:36:f1:e5:d8:74:e8:5e:
                    42:e2:c7:fe:c5:8e:63:b4:ff:c6:89:2e:3b:a8:1f:
                    bd:c8:44:3c:31:b5:ee:33:69:6c:37:cb:ba:05:cb:
                    d5:cc:c7:15:eb:2b:ad:af:64:a6:27:82:c7:78:e0:
                    dc:6a:a0:b4:4c:df:56:c3:97:27:68:5f:9b:e4:3f:
                    cf:98:8f:eb:a9:53:3a:8b:1f:dc:8e:14:21:85:d7:
                    ab:da:41:6e:66:fb:41:fc:a1:e4:91:5b:4a:14:66:
                    e8:af:7b:c6:af:3b:f1:d4:f4:33:2d:1d:5f:22:8a:
                    00:6b:22:cc:15:73:e9:a4:53:f4:ef:14:f3:51:65:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:E7:B9:15:4D:F3:54:BE:80:A9:0C:DF:98:71:86:36:89:69:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:d2:25:4d:82:e1:b4:db:79:02:66:cf:99:61:8f:27:b5:
         9a:2e:96:98:9c:bf:3f:50:91:cb:dd:ac:ce:2c:8b:ff:4e:41:
         b0:d1:6d:a7:79:c7:2f:4d:96:13:6e:b4:78:9f:0e:a6:d0:ad:
         ec:5c:87:4b:be:9b:3f:38:c3:8a:bb:f7:72:1e:3c:4d:f4:53:
         d0:7f:71:46:31:16:47:79:f5:e4:15:74:66:44:db:38:44:ab:
         47:8e:59:48:3d:0a:58:9c:94:5d:13:76:a0:7a:1f:6c:7e:41:
         f7:b1:42:dc:1d:0d:55:b6:e5:a6:33:b7:09:4a:4e:c6:b7:d2:
         60:52:ff:f6:7f:a4:2c:f0:52:60:b8:87:30:3d:d6:ac:e3:8c:
         2c:42:d6:db:b9:a7:6d:fb:c0:9e:fb:ff:b1:d5:06:79:7f:69:
         ee:86:af:f9:67:67:60:78:04:ba:2e:51:c2:0b:41:ec:ed:9d:
         32:a8:ec:88:cc:65:cd:cb:3f:b4:80:38:ae:b6:94:5f:36:48:
         0f:47:3c:39:7b:eb:71:c9:c7:6b:2a:37:74:b9:6b:e3:1e:34:
         75:77:d5:cc:2a:9a:b2:eb:2f:a8:eb:fb:03:4d:fa:1a:b5:07:
         d8:c9:86:3d:a2:08:08:33:61:f0:4f:b9:45:2c:2f:d0:bd:4e:
         fe:f8:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:03:56 2026 by rpki-client