Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/c8c2b4e7-cdd2-3c27-9ed5-112da7ac1c02.roa
File:                     c8c2b4e7-cdd2-3c27-9ed5-112da7ac1c02.roa (raw, json)
Hash identifier:          /MWk2ninoarU/+1jV7z8Pp2DbSg8tCA6qkat5kRgzmw=
Subject key identifier:   D5:FD:2D:7E:E4:39:52:83:76:A2:1C:8B:03:E6:E9:7A:77:91:C6:B7
Certificate issuer:       /CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
Certificate serial:       010D0C9F4328584F69B6E39C2CE0B83ECA42D080
Authority key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/c8c2b4e7-cdd2-3c27-9ed5-112da7ac1c02.roa
Signing time:             Tue 06 Oct 2026 14:23:50 +0000
ROA not before:           Tue 06 Oct 2026 14:23:50 +0000
ROA not after:            Mon 04 Jan 2027 15:23:50 +0000
asID:                     11796
IP address blocks:        104.241.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:b6:e3:9c:2c:e0:b8:3e:ca:42:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
        Validity
            Not Before: Oct  6 14:23:50 2026 GMT
            Not After : Jan  4 15:23:50 2027 GMT
        Subject: CN=957a2920-1c1a-4187-8238-206a10d08575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:e2:7c:7d:5e:2c:3f:b0:91:b5:d9:2b:a5:
                    14:6e:9c:20:6c:2b:c2:85:8e:3f:8f:2e:df:05:e7:
                    63:01:d4:d1:6e:3f:8b:25:a6:c9:8a:90:64:c0:6c:
                    4a:38:cd:c8:d9:6a:cf:8f:2b:52:6c:94:ad:ca:af:
                    13:b9:11:97:cb:b2:72:3e:14:7c:54:e2:76:df:90:
                    ea:25:f2:71:d7:16:60:ed:a5:60:24:40:9a:03:4a:
                    51:d5:10:49:2d:83:f9:2a:9b:89:ba:2e:54:56:ad:
                    62:4d:76:b9:cd:79:68:05:d8:02:be:f6:a1:3d:84:
                    92:fc:dd:d9:b0:e4:66:88:27:07:e1:1f:59:ff:a8:
                    c7:d8:67:ac:9f:fd:19:54:79:ef:d7:ca:8e:3a:06:
                    2a:3b:b2:11:72:76:6d:26:81:7d:f2:6c:56:2b:d4:
                    d8:b2:49:fa:d5:d4:82:bf:b4:6e:b3:08:84:1c:9b:
                    81:51:df:a2:c0:2e:07:db:a6:3e:c9:26:2d:97:c5:
                    e0:32:6c:e3:f0:da:b2:3f:4e:84:e4:6b:d8:6b:a6:
                    dc:18:72:4e:81:e5:d6:7b:f0:11:95:e1:58:ea:e5:
                    7a:87:23:87:9b:4b:4c:fa:c6:36:dd:f4:94:a6:90:
                    bd:4c:7e:d4:66:35:4b:82:52:6a:c4:e1:62:bd:a0:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FD:2D:7E:E4:39:52:83:76:A2:1C:8B:03:E6:E9:7A:77:91:C6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/c8c2b4e7-cdd2-3c27-9ed5-112da7ac1c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl

            X509v3 Authority Key Identifier:
                keyid:CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:fa:d5:99:9a:9a:b7:ec:19:a3:52:7e:35:cc:cb:c6:77:
         8a:6d:4d:a1:cc:7f:68:6a:97:15:85:79:b0:36:6e:56:34:ce:
         22:06:67:e7:35:95:63:04:6b:57:dc:81:58:03:16:ba:5b:42:
         45:7c:3a:27:ae:45:b5:72:f8:fb:70:ed:4b:be:0b:dd:d5:29:
         a0:0d:3e:c1:e1:b0:9c:de:25:2d:e3:dd:6d:5b:4c:c2:cc:12:
         9a:28:70:b3:05:b3:6a:76:74:52:bd:72:b7:00:26:01:27:e4:
         f4:27:36:96:da:83:34:f0:d8:c6:7b:72:09:25:13:d1:34:c6:
         f8:1b:db:a6:7a:58:c1:53:a4:ee:df:f8:da:cc:14:f4:9b:63:
         d3:ab:d5:cf:4e:55:7c:cb:18:b8:b0:08:49:98:06:ce:a4:08:
         68:35:a1:74:2f:b2:57:05:24:0f:94:c7:09:15:52:c0:43:9a:
         d1:78:4f:00:0e:08:6d:1f:8b:a7:32:2e:45:e2:7d:74:4d:ad:
         98:da:8a:7a:06:32:32:23:7c:ad:87:ae:b8:ec:50:91:f0:6c:
         fa:7e:5b:67:6d:50:83:8a:b6:a6:c2:8f:34:eb:83:9f:a3:c0:
         13:31:f1:bc:ac:4a:5a:e6:a1:fe:ea:c1:fd:77:82:24:0e:cf:
         f6:f9:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:53 2026 by rpki-client