Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/4ba17a4b-8708-3d4f-af34-b22ebf51d9fc.roa
File:                     4ba17a4b-8708-3d4f-af34-b22ebf51d9fc.roa (raw, json)
Hash identifier:          +yPWr/cl88QxP6IvYcTa/QZYxavbB15x1obm4vFh+us=
Subject key identifier:   11:68:E9:3F:FA:CD:88:2F:CB:39:A9:07:2C:25:5F:52:3C:91:80:D0
Certificate issuer:       /CN=fe73471e-eb7e-4d9b-9184-329876107192
Certificate serial:       010D0C9F4328584FA81E7EDE954A07F9FB090780
Authority key identifier: 1E:E5:C8:2D:FE:57:F6:FD:9E:C6:F4:50:5B:A8:4B:A0:3E:17:18:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/4ba17a4b-8708-3d4f-af34-b22ebf51d9fc.roa
Signing time:             Wed 28 Oct 2026 22:52:42 +0000
ROA not before:           Wed 28 Oct 2026 22:52:42 +0000
ROA not after:            Tue 26 Jan 2027 23:52:42 +0000
asID:                     400690
IP address blocks:        104.143.64.0/24 maxlen: 24
                          104.143.65.0/24 maxlen: 24
                          104.143.66.0/24 maxlen: 24
                          104.143.67.0/24 maxlen: 24
                          192.184.0.0/24 maxlen: 24
                          192.184.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/fe73471e-eb7e-4d9b-9184-329876107192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/fe73471e-eb7e-4d9b-9184-329876107192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:1e:7e:de:95:4a:07:f9:fb:09:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe73471e-eb7e-4d9b-9184-329876107192
        Validity
            Not Before: Oct 28 22:52:42 2026 GMT
            Not After : Jan 26 23:52:42 2027 GMT
        Subject: CN=5a18548f-7647-4104-8a85-26fa47d2fc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:6c:45:ac:1f:75:c0:98:74:80:fa:b6:39:
                    d2:85:d9:e6:9c:76:1f:25:33:64:ba:ac:94:f1:de:
                    69:41:81:4d:8b:25:76:bf:35:63:98:76:36:d2:b2:
                    e2:51:20:ff:87:38:12:6b:93:db:e0:55:e0:59:4c:
                    79:c2:11:10:00:c9:ca:ca:bc:b6:0e:ee:ef:3e:50:
                    0f:78:c2:c2:4d:a4:b3:77:ac:21:73:9f:fd:aa:0d:
                    5e:87:87:21:0d:33:20:4c:09:6e:29:41:6e:52:ad:
                    a9:fe:ef:47:38:ab:5a:ae:e9:25:9f:84:e1:ed:3f:
                    24:5a:dc:9a:5d:30:f4:2a:96:60:31:38:a6:d3:d6:
                    c1:53:9f:66:86:e4:11:2a:a4:69:86:a6:b1:ba:17:
                    37:41:77:0b:eb:6d:31:3b:e5:6c:90:3c:f3:ff:f4:
                    c4:2b:88:7d:5b:82:00:0f:bd:04:25:13:71:6e:4f:
                    13:21:61:9b:9a:2e:8f:ce:e9:5a:4a:51:b5:b6:13:
                    7c:57:61:c4:ea:25:e8:62:8b:ab:49:e4:75:3a:aa:
                    09:2d:b6:17:1a:bc:38:eb:f1:ea:f7:66:13:c2:53:
                    17:02:9c:5b:d5:bd:ed:34:4d:ba:a0:d4:76:7a:c6:
                    4d:85:77:75:29:f2:04:93:a8:f8:57:27:fa:95:c4:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:E9:3F:FA:CD:88:2F:CB:39:A9:07:2C:25:5F:52:3C:91:80:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/4ba17a4b-8708-3d4f-af34-b22ebf51d9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192/fe73471e-eb7e-4d9b-9184-329876107192.crl

            X509v3 Authority Key Identifier:
                keyid:1E:E5:C8:2D:FE:57:F6:FD:9E:C6:F4:50:5B:A8:4B:A0:3E:17:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/fe73471e-eb7e-4d9b-9184-329876107192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.64.0/22
                  192.184.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:df:6f:61:6e:a0:78:2b:94:c5:77:3d:ab:f3:40:08:22:
         06:7d:f8:f5:2a:6e:58:97:48:06:d4:52:cc:e8:18:72:11:61:
         4c:ce:89:1e:fc:1c:c5:71:ae:0d:fb:63:03:4c:28:91:2f:9e:
         a0:59:be:05:98:c1:80:69:73:c8:a6:1b:da:ba:bd:68:af:e5:
         88:04:f4:e2:58:18:5e:68:b5:ae:11:6d:e1:4e:d9:a4:cd:39:
         63:5b:39:16:fb:44:48:20:aa:97:49:4d:28:7f:d0:d1:51:12:
         c8:25:dc:64:b0:dc:1e:a9:17:07:24:c8:09:16:6c:e8:e2:b8:
         47:68:89:55:d6:2a:8e:30:d3:70:75:88:8c:44:59:af:ff:23:
         2f:3d:b3:6f:d6:65:7a:98:d9:f9:0f:52:c3:39:12:87:10:c9:
         ac:c6:dc:15:91:4d:b6:f0:b5:09:33:7c:ec:cf:64:3b:b2:19:
         bd:02:b8:2f:a4:d9:f3:dc:8b:7e:5d:93:c8:80:12:85:6c:00:
         b4:d8:ca:65:a8:8b:8b:08:2c:59:8a:18:3b:eb:4b:ea:17:7a:
         51:90:b9:ce:25:f1:10:97:ed:39:f0:c0:29:e3:d3:43:47:f9:
         c8:27:80:63:b2:d3:af:fc:fa:f7:08:ae:d1:8c:ee:28:fa:fe:
         2c:90:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:24 2026 by rpki-client