Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
File:                     cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json)
Hash identifier:          4nFhIDFnmz30WTKA0E4EanSbgoDgOFlsIvdwDtuFqlU=
Subject key identifier:   46:4B:12:25:2B:11:6D:E4:D9:6F:94:E0:76:5E:E7:B0:53:B2:F7:8E
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584DE84B37A708BE7B59733782A0
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:37:a7:08:be:7b:59:73:37:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=8fc06cc9-2863-4663-9f1c-8219d33a493a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:b5:3c:5c:85:cc:74:e3:31:ed:0b:8e:4b:
                    f8:73:20:ab:66:92:b3:0a:92:c8:5a:1b:ae:bd:6c:
                    04:6b:0b:0d:48:1a:7a:2d:31:71:0e:26:45:48:c6:
                    85:94:89:02:0b:16:a1:ec:f5:37:8a:33:cc:c6:03:
                    db:5a:04:c8:1e:bc:22:b3:b5:93:95:e5:a3:d7:8a:
                    40:78:a3:00:d6:2f:64:56:0d:c3:03:a9:c8:1a:ba:
                    79:a0:4c:64:58:07:ee:45:e5:4e:5a:ab:69:4a:c0:
                    7d:82:30:52:43:30:09:5d:9e:91:03:26:40:d1:17:
                    3b:ea:e6:a3:e7:06:a1:f9:bc:a3:97:27:61:27:91:
                    3c:34:61:93:a5:ba:b2:6d:85:0a:fc:8c:3a:6e:1d:
                    b1:7c:f7:24:b4:a8:45:ea:5c:56:78:b6:2b:1d:eb:
                    01:43:41:1e:11:a1:54:04:f4:f3:f8:c2:e9:4b:7b:
                    57:59:43:3d:4b:73:57:79:5b:ba:1f:69:dd:3d:ef:
                    fd:c7:42:b9:f8:7b:39:02:4b:09:aa:29:48:9e:03:
                    67:8b:9a:45:1f:e5:df:2f:72:12:66:79:42:9c:59:
                    28:06:f8:7c:00:78:59:37:bb:8a:4d:9b:08:ec:e5:
                    4d:13:a3:7b:dc:ea:08:7c:b8:30:06:f9:7d:16:1a:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4B:12:25:2B:11:6D:E4:D9:6F:94:E0:76:5E:E7:B0:53:B2:F7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:7e:9d:a0:f8:62:44:d0:8e:5f:1a:3e:1f:09:5b:ad:5c:
         7b:79:f1:c5:a2:e1:00:91:65:4d:5e:bd:ee:a8:9e:8f:d3:2a:
         5f:59:f8:f2:42:4e:3a:af:db:c6:63:fa:6a:a1:3e:96:cc:39:
         12:d5:d3:85:3a:ea:aa:bc:3e:a7:3e:4a:18:d1:cf:12:93:6b:
         bc:87:5c:49:af:ee:ba:64:01:9b:bf:2e:75:97:9e:90:12:d4:
         68:d6:68:6c:43:80:84:32:d1:e3:ac:d8:76:2d:2a:e8:f4:e0:
         de:f5:11:e1:f0:56:2e:ee:15:00:30:4c:94:fd:c8:f8:9b:31:
         c5:3a:5c:36:02:4a:7c:39:00:89:18:ec:94:ca:47:84:0f:cc:
         a0:3f:de:92:c4:98:b5:b5:83:56:b8:99:98:3f:58:45:c4:8a:
         83:50:55:b2:34:b5:f1:55:ad:34:61:b9:99:3d:70:89:de:f8:
         00:fc:b9:b1:95:57:3f:dd:29:74:55:ea:7a:0a:2e:19:8b:98:
         ec:12:ee:57:ce:4d:a0:12:1f:2c:24:03:66:e6:15:bc:12:f3:
         b0:38:ef:90:35:ac:58:52:f4:94:5c:db:74:4e:55:06:24:21:
         5e:66:18:a7:3c:e7:3f:1d:c9:1e:a1:d9:7b:05:ad:76:8b:6b:
         46:84:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:33:41 2026 by rpki-client