Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa
File:                     d237ff63-e29a-334e-8728-d9c0b2284c14.roa (raw, json)
Hash identifier:          U7UBU4UB9XksBOLajMX6sVaP0K94Z1jd5dVSuPXxJC4=
Subject key identifier:   E1:71:0C:78:C7:AD:FA:FC:DD:44:FF:C8:A8:FF:9C:FF:93:28:89:70
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584EA786EC5C62695F76E760F100
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26512
IP address blocks:        104.244.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ec:5c:62:69:5f:76:e7:60:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=88f2041b-6cfb-49ac-80bf-97d8049e9c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:24:3a:c9:79:c5:0a:93:e2:63:ce:7a:ae:
                    9f:63:a7:13:5c:44:25:8f:d6:79:8e:54:f2:27:45:
                    fd:81:92:a1:33:55:51:fe:18:46:bb:a6:13:60:28:
                    59:aa:72:d0:29:0a:1b:54:a4:89:66:af:39:12:df:
                    c2:03:22:9f:c0:72:39:54:26:0e:20:2f:fc:93:13:
                    6b:ca:ee:12:f7:04:64:e3:bb:8e:a7:77:54:93:c4:
                    07:7b:0b:b7:36:25:55:a8:49:c5:ed:6b:f2:e1:5c:
                    a9:5f:92:0d:a8:39:d9:a0:17:75:d6:33:ab:36:c3:
                    65:0d:4f:2e:79:cc:e4:e3:91:4a:73:87:df:b7:e8:
                    2d:f8:d6:de:11:f0:17:67:b2:fd:7d:3f:be:30:09:
                    8a:d8:72:41:3b:9c:40:7d:98:5e:6d:08:06:d9:cb:
                    1c:9a:c9:1e:50:87:eb:b8:ff:76:fe:22:56:76:69:
                    1c:24:e6:1a:4e:19:83:b1:a0:e7:16:63:8b:58:d6:
                    9f:1d:63:6c:10:07:36:b1:16:fb:58:1a:e6:44:eb:
                    99:62:62:85:2e:ad:bf:0b:39:9a:b8:83:72:81:9c:
                    7c:15:c9:0d:70:ae:6d:6d:3e:db:ab:bf:1e:8d:98:
                    aa:4c:1a:d4:da:7b:5f:79:0f:e5:91:86:b0:9a:eb:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:0C:78:C7:AD:FA:FC:DD:44:FF:C8:A8:FF:9C:FF:93:28:89:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:85:6e:71:98:53:7b:c0:c3:cb:e7:2c:7c:67:6a:5e:a4:fb:
         9d:2f:76:9d:f4:05:97:7d:e7:ef:2c:7e:21:5a:b4:e4:38:97:
         98:23:24:a2:0e:87:ab:4a:42:fb:d9:92:22:24:db:48:22:96:
         6a:be:df:c8:b5:35:21:13:cb:55:2f:01:d2:ca:bd:6d:af:7d:
         de:5e:36:7b:31:18:ed:cd:23:00:99:29:66:41:a8:83:18:e1:
         79:22:86:f6:db:2d:01:76:08:e7:33:53:02:00:92:2d:62:a0:
         b8:43:f1:f1:dd:bf:dc:d4:a1:a2:66:a9:d2:c5:f1:41:b0:ed:
         b3:d0:87:66:44:56:07:6d:94:e1:60:58:0c:19:18:c8:fb:77:
         d2:1c:40:6c:89:4c:39:da:a5:17:2d:e2:be:02:e9:68:2a:25:
         c9:c4:62:ec:00:92:12:74:dd:73:08:e4:ff:30:dc:0b:f1:e6:
         36:63:6d:ea:cf:22:f1:ce:de:eb:2b:9b:a0:24:7a:6b:c6:72:
         d4:e1:9a:89:02:3f:a3:3e:56:dc:d8:e5:7b:6e:cf:c7:7a:a9:
         37:04:27:37:b0:22:ef:c6:5c:a8:7f:ea:ca:29:db:47:64:65:
         2f:90:74:4a:00:e3:8a:72:34:f9:06:3b:36:c7:38:4c:a0:bb:
         8a:49:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:53 2026 by rpki-client