Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
File:                     71703ea0-4313-3b97-ab1e-b29a6f173349.roa (raw, json)
Hash identifier:          w8R+TY77JcNtFtubFofFK30huUZ7TbVCsp4uh6IGtAs=
Subject key identifier:   18:21:69:62:CD:17:5C:F9:A8:97:2D:F7:18:E6:FF:1B:0A:DA:A2:AA
Certificate issuer:       /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial:       010D0C9F4328584EA78898786F2779CC9EB17B00
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399244
IP address blocks:        104.247.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:98:78:6f:27:79:cc:9e:b1:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e0b86d6b-8cbf-4b03-ac9e-a98e6b3a1dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:07:11:14:27:96:68:82:fd:ac:92:b7:9c:
                    ed:74:99:45:2b:1d:34:c2:3c:d5:44:13:9c:3d:8a:
                    5e:13:14:f2:eb:a8:01:97:8c:56:6d:91:32:0b:1c:
                    72:88:11:c0:da:38:93:17:02:67:56:02:62:79:b2:
                    0a:a3:6f:14:54:0a:e1:ec:99:7a:64:9a:c9:1e:c3:
                    b1:7f:7a:b2:98:e4:d8:4a:6c:eb:5c:9c:a4:76:95:
                    ef:59:2c:83:f8:69:8e:59:7a:39:25:0b:88:9c:54:
                    77:59:5a:4e:49:38:56:25:ae:fb:18:07:ca:c9:73:
                    39:d2:81:6c:a7:0e:70:04:7f:7b:be:04:2d:40:ff:
                    9b:95:8c:09:33:c4:4e:e2:57:cf:dc:dd:28:1c:3e:
                    49:a5:39:d3:74:94:f4:2b:ab:34:99:d0:77:bd:20:
                    f6:11:38:ee:52:19:c4:ca:b5:26:eb:bd:1d:7b:ea:
                    c2:97:4d:45:41:a1:71:61:4c:df:96:a0:b6:8a:9c:
                    2a:8e:9c:71:c9:c4:01:b8:7a:ba:af:aa:c6:c0:60:
                    59:7c:85:67:15:6e:69:df:2c:b2:10:2c:77:a8:cc:
                    eb:33:36:09:43:52:ae:b8:fc:17:f9:6e:32:45:b2:
                    c0:81:7f:4b:b3:bb:d5:0d:57:b5:96:02:ad:13:59:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:69:62:CD:17:5C:F9:A8:97:2D:F7:18:E6:FF:1B:0A:DA:A2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl

            X509v3 Authority Key Identifier:
                keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:20:84:d1:61:fe:c9:77:4e:ab:4d:0e:76:af:c1:99:cc:cb:
         48:44:1c:d0:10:f5:35:da:b2:40:08:b8:e2:74:28:55:a4:b3:
         d4:d8:69:c0:78:65:5f:30:75:08:1f:0c:85:57:9d:56:39:b0:
         63:91:be:26:28:46:8b:29:93:66:c6:6b:32:ca:ac:d8:ae:a6:
         2a:6c:74:2d:73:89:c4:12:b0:8f:ee:1f:fd:cd:c7:47:dd:91:
         57:57:9d:f8:82:c6:cd:22:a6:37:47:40:91:12:d8:52:d0:8e:
         c6:24:c1:9f:84:c5:ee:83:69:6d:d5:5d:74:5f:20:ff:88:84:
         80:81:22:ba:c6:00:11:3f:90:51:39:78:20:0a:47:7b:aa:7a:
         80:c7:fc:26:a9:2f:2c:c5:7a:04:07:a3:00:9d:a7:16:1c:6b:
         62:68:ce:e1:a0:5b:00:38:08:66:ed:08:c8:09:69:54:de:fc:
         70:1b:43:e9:b8:65:6a:e9:e4:50:0b:6e:e4:aa:a8:c9:32:fa:
         2e:e1:e1:09:10:32:41:dd:c8:a4:66:e0:1c:7c:ba:36:cf:3a:
         f2:10:cc:65:f6:68:30:e7:e6:de:4a:32:49:1d:d1:26:3b:42:
         bf:00:58:99:55:30:ec:58:c8:2b:47:50:13:af:c8:93:6c:90:
         c4:85:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:45:41 2026 by rpki-client