Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa
File:                     522b5138-3ae4-3114-b140-e183ee88ec90.roa (raw, json)
Hash identifier:          z8NjklMIRhKSdmYbjS59J4zJwtzhjCDi+0jzpJ7AQxY=
Subject key identifier:   85:FF:A3:B7:DA:68:08:A8:05:76:A6:6D:02:A9:33:1A:AA:49:68:C6
Certificate issuer:       /CN=2780f5b3-6e58-46dc-9841-4c845dccd557
Certificate serial:       010D0C9F4328584D9FB58EFCEC96B6E9F29123C0
Authority key identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     11215
IP address blocks:        104.254.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:8e:fc:ec:96:b6:e9:f2:91:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2780f5b3-6e58-46dc-9841-4c845dccd557
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=31b4ab09-fe31-49e5-bb35-8da59a7e9632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5e:68:54:9b:ed:89:26:0e:2e:62:e6:13:6a:
                    ed:e3:69:eb:24:07:13:d3:e3:02:55:99:36:5b:96:
                    f0:83:d7:bc:f5:c0:22:67:1e:20:99:e2:16:4a:67:
                    0f:45:80:41:fe:f6:79:fe:01:d4:b3:3e:4b:4c:39:
                    14:b4:ce:4b:04:6e:59:a2:c1:a3:e0:6d:fb:e5:75:
                    89:f3:23:0b:97:f6:f7:da:8b:fb:06:8d:a8:8b:e9:
                    8b:37:85:43:d9:9f:b8:dd:06:19:bc:f3:a0:bf:b9:
                    7f:f8:9e:13:47:20:3d:a2:62:9a:a7:dd:0a:b0:78:
                    d8:65:99:b1:67:36:83:d3:f1:ca:c5:0b:7b:a3:a9:
                    84:fc:d2:77:25:3b:66:b5:d5:8b:99:f3:b4:42:be:
                    27:a2:d4:64:17:f6:88:37:e3:72:f6:97:d2:c3:8f:
                    ad:fd:f0:85:56:79:fc:5b:20:9d:c7:f1:6c:f9:9c:
                    bc:84:f1:9f:6b:35:89:46:78:d8:f4:10:c9:47:e4:
                    90:c0:48:01:a1:a7:db:80:4a:e9:c0:b3:c9:65:be:
                    4d:b1:50:7d:fe:9b:7c:40:96:6a:10:14:34:74:83:
                    06:38:0b:f4:8d:d8:76:a7:41:17:e7:bc:f4:ad:0e:
                    6e:cb:bc:6a:e8:d5:d4:d9:82:a4:6d:fe:81:e8:6d:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:A3:B7:DA:68:08:A8:05:76:A6:6D:02:A9:33:1A:AA:49:68:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.crl

            X509v3 Authority Key Identifier:
                keyid:28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:a8:e1:fe:dd:3d:ed:af:84:9f:dd:90:cb:a4:6d:ad:ad:
         47:61:ba:c9:e0:a8:92:c7:58:57:04:67:14:cc:be:f2:ad:de:
         4f:88:70:bb:38:16:16:7f:86:31:46:ce:f2:b1:55:b6:43:dd:
         93:32:eb:9a:38:7e:62:74:17:a0:4c:2d:5b:70:1f:31:03:4e:
         b9:6d:fb:6c:59:bf:0e:e2:72:5a:56:1f:91:68:c6:36:ac:1a:
         b3:28:6b:af:4a:cb:82:f9:bd:3d:01:d3:62:1d:b1:e3:1e:15:
         90:a8:81:58:a4:92:38:d7:a1:6e:5e:ed:a9:64:11:54:6b:38:
         e0:45:a5:27:ae:24:73:25:39:d3:20:df:8f:ca:97:7d:c8:78:
         64:a5:30:1b:e1:18:c2:ae:de:7b:c9:35:02:93:38:29:cd:bb:
         f5:e4:75:ef:47:50:f7:f9:db:ed:11:53:27:2f:f0:c0:56:d9:
         68:03:bc:3f:5a:da:c7:f0:97:f3:59:e0:3f:7d:5d:d6:c6:b6:
         39:a5:d7:2b:71:fd:6e:75:ce:62:cd:d4:cc:cc:26:b7:68:84:
         62:d3:2b:84:53:87:87:ec:f2:37:42:91:73:e3:60:40:e5:b6:
         d3:fc:26:3e:e8:9e:b2:15:0e:96:f6:ac:e0:ad:2f:48:57:89:
         cd:59:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:14:35 2026 by rpki-client