Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa
File:                     cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa (raw, json)
Hash identifier:          hH1JD8yzpdq3VRY0GLcY+ffDqXBe6xZBAF2LedTHpjw=
Subject key identifier:   4A:48:0D:74:07:02:DE:EC:A0:08:FD:A6:10:86:82:50:26:57:C2:1B
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584ED001F78CEEE7D06134D55F00
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     20303
IP address blocks:        104.251.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f7:8c:ee:e7:d0:61:34:d5:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=587d3c9a-9e2b-4e00-9601-4ffb4f93cf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:28:c8:a4:87:29:d8:52:6a:b1:77:41:93:
                    9d:f1:f4:df:63:53:34:b8:92:76:1e:82:12:81:cc:
                    cb:01:0a:4c:ac:b1:ea:56:2b:2d:af:c2:83:e2:a4:
                    8e:41:94:a5:bf:a2:64:6a:68:4e:ca:90:22:d6:11:
                    44:b8:78:f8:be:c4:19:64:38:24:ff:2e:42:92:63:
                    fb:44:8e:33:99:9c:7c:d7:a2:3d:43:b6:8a:74:10:
                    1c:45:a2:88:30:54:4c:72:ae:ca:a5:7e:a4:19:06:
                    15:78:c5:f7:ef:c2:c8:49:4c:04:94:25:d0:69:18:
                    dc:1c:1c:0b:4e:11:37:b6:03:d2:7d:95:e9:9f:5c:
                    f6:6f:d8:bc:57:19:fb:a1:9a:d2:d0:ac:97:f2:71:
                    1d:d7:c4:e5:f7:4c:a3:4a:0a:c7:e4:5c:b5:a8:69:
                    62:07:71:4b:bf:89:a1:8e:ea:04:c4:7d:09:06:f6:
                    63:88:ce:81:22:58:3e:3a:4f:78:40:31:5d:1d:f4:
                    e1:f2:f9:6d:e9:a1:e9:a7:a9:ae:f4:19:eb:b3:ee:
                    05:55:80:b6:3d:0f:1f:15:df:e2:17:25:97:9e:2a:
                    4c:8a:4c:b9:6d:dd:52:99:a4:ba:b9:26:d2:37:31:
                    a6:53:56:0b:aa:44:e8:92:bb:f5:94:cb:9d:68:37:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:0D:74:07:02:DE:EC:A0:08:FD:A6:10:86:82:50:26:57:C2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:2c:dd:fd:ac:78:b8:f0:01:42:6f:66:61:bb:85:93:c6:
         60:ea:4e:fa:31:3b:15:1c:29:09:be:5b:ad:dd:88:52:01:ab:
         10:61:78:a8:bb:ef:3a:20:24:65:b9:0e:90:e0:93:29:c9:1f:
         35:c0:47:97:fe:fb:32:0f:3f:de:1a:ef:90:08:8c:1f:d6:4e:
         a5:dc:2c:c1:91:ec:ed:2a:e0:29:bd:42:6c:a5:80:72:dd:24:
         7a:ac:9d:2e:f6:f9:0b:e8:04:b3:ff:6b:49:00:25:04:db:b7:
         c3:9d:83:53:ff:83:c4:1c:0f:ef:c7:cc:8a:b0:9a:5e:e3:d5:
         03:9f:f1:ad:11:6d:fe:8e:17:43:f5:94:f0:20:09:2d:a3:f3:
         3c:0d:c6:05:14:b4:c8:b3:8d:47:61:a7:c5:56:4d:88:5b:b7:
         dc:01:a7:c5:9d:50:4b:0d:37:24:56:6b:51:1f:73:51:28:ab:
         66:6e:50:87:fb:16:71:72:ad:32:d2:61:60:ef:f1:7d:5c:b2:
         61:c6:75:c9:f2:71:20:a4:7e:95:21:15:fe:86:7a:df:1c:24:
         a9:1d:b8:2a:17:21:ce:f0:27:de:f3:43:61:0f:f7:3f:23:d6:
         48:2b:7d:5f:c0:82:91:b2:9a:bf:cb:fe:bf:d4:65:50:5d:eb:
         f9:e5:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:56 2026 by rpki-client