Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa
File:                     499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa (raw, json)
Hash identifier:          KGEpDb0Rns9rRiHQAzGE5gZVV6+3Wdfl0mKmDWTr5uA=
Subject key identifier:   1F:F8:A1:AF:B5:37:55:08:77:5C:9D:00:58:56:A5:69:F8:61:52:F7
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584EA78F65F9FCDAF12E52FE4E00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21559
IP address blocks:        104.218.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:65:f9:fc:da:f1:2e:52:fe:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07e5d891-5d09-4b30-8f53-c677a456932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:1b:ad:09:10:25:b2:d6:da:bb:71:61:5c:
                    ef:66:7e:d0:e7:78:56:7f:b1:9d:67:81:fe:aa:a3:
                    eb:fd:c4:1e:19:61:22:ea:18:c8:83:b8:53:45:b8:
                    da:ab:9f:fe:8e:1a:0c:42:03:e0:68:7c:df:ad:7e:
                    12:03:f1:2f:bf:d5:ac:37:16:dd:70:6b:26:0e:da:
                    d8:92:1c:e0:78:71:94:d9:88:a9:9b:df:8a:6e:16:
                    7e:f7:91:bd:ae:22:49:cb:7e:43:10:d2:80:82:e7:
                    8d:73:79:b4:63:e8:09:ec:6e:86:f3:52:1e:54:14:
                    ad:d0:02:4a:5a:95:a6:83:43:86:b6:53:89:57:c1:
                    b0:87:a1:ae:2c:fc:fa:7b:b0:23:8d:13:60:aa:75:
                    23:34:3f:79:e2:b0:46:bc:76:28:04:85:78:9c:b8:
                    90:ec:87:57:66:39:2b:97:a8:13:b4:3d:23:4b:98:
                    25:ad:55:5f:87:47:bc:20:14:99:b5:1f:56:dc:26:
                    16:ed:15:19:0d:08:9f:45:a0:d3:ab:31:b2:45:c7:
                    29:d9:9a:5c:74:5f:8b:5c:10:f3:2d:a8:78:ca:66:
                    93:4c:2f:4c:90:3c:46:ad:38:6f:00:3b:63:d2:01:
                    52:14:04:97:98:7a:ef:ca:ae:47:57:14:aa:17:b5:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F8:A1:AF:B5:37:55:08:77:5C:9D:00:58:56:A5:69:F8:61:52:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:3a:ea:42:43:f2:83:68:e6:59:d2:f4:ab:6f:f4:83:f1:
         e9:e6:cf:8d:b4:e8:eb:83:68:e3:50:dc:b9:dc:81:15:45:ee:
         16:b6:93:29:1e:d2:70:11:3d:e2:b6:c3:ff:c2:ec:27:03:4b:
         60:3a:9a:08:db:0c:cd:5d:74:51:ff:8c:fa:29:f8:a8:68:79:
         1e:e6:03:cc:1c:ca:af:e4:da:a0:b1:27:a9:4d:e8:f6:e9:0e:
         7d:11:51:90:48:24:af:c9:03:6a:e2:e2:04:b5:66:ed:8c:8d:
         94:7a:0e:ae:f0:32:36:e2:56:7f:49:1d:b5:ee:9d:3c:bd:62:
         ee:76:6e:66:db:2d:d0:b3:3b:54:f8:e2:ba:8f:e9:de:c1:ce:
         b8:c5:c0:e1:8f:e5:0b:2d:ed:74:c0:2e:22:73:7c:c7:0f:ff:
         81:d7:d7:a1:03:d6:1b:4d:ec:12:2b:2c:ac:c2:b4:e7:71:d9:
         6c:da:62:15:7c:43:01:56:b0:c2:df:f6:c1:d8:06:51:63:0c:
         66:09:e0:49:6e:02:28:f5:98:77:04:94:d9:3a:04:df:9f:8a:
         c5:80:29:3d:74:7f:2c:59:d0:1f:f6:87:b8:6e:1e:44:9b:03:
         38:9d:b6:42:c3:66:77:8b:f9:5f:23:c4:ba:73:c1:fd:3d:4f:
         9e:b4:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:55:15 2026 by rpki-client