Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/877d4cdc-af83-3e00-8bdb-01c450cd1446.roa
File:                     877d4cdc-af83-3e00-8bdb-01c450cd1446.roa (raw, json)
Hash identifier:          bcGXCxHai38wlAFRtFT5q+e8BJ1F1IDYoFvKAXXpiyE=
Subject key identifier:   85:12:86:55:E0:43:7D:0B:56:C0:3D:98:CF:BC:D5:86:75:EF:77:5A
Certificate issuer:       /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
Certificate serial:       010D0C9F4328584EFE12323BDDF78F6D9AB4E648
Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/877d4cdc-af83-3e00-8bdb-01c450cd1446.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     53428
IP address blocks:        104.204.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:32:3b:dd:f7:8f:6d:9a:b4:e6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=1b9b5b66-c477-40fa-9693-e0dd1b6b831d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:7a:c9:36:b2:8c:4f:b3:24:93:e6:7f:b3:
                    92:76:fd:d4:c8:0b:cc:47:d3:5c:18:5e:f1:bd:11:
                    5e:80:13:2e:26:47:70:31:a9:7b:97:4c:d3:03:da:
                    5b:63:0b:38:65:8c:cf:78:37:2b:7c:54:68:84:6f:
                    2f:7f:f2:4c:0c:66:d1:47:9b:00:7e:29:8d:c5:8d:
                    99:c9:2a:91:29:bc:bf:70:84:8f:16:c4:ed:e7:47:
                    a8:95:88:27:bd:17:71:d3:11:00:7c:9b:25:d4:df:
                    2a:4f:c0:0e:7c:b3:64:cc:c8:7e:5a:73:94:3d:a9:
                    3e:06:4c:4c:b2:4f:51:7f:cb:16:a5:27:23:1c:ae:
                    20:9f:7e:da:5f:89:28:b7:87:c7:fc:5e:cb:ef:76:
                    a8:df:71:86:3e:e1:ef:0a:ea:ec:b1:af:e5:13:45:
                    32:12:de:53:4d:0b:c4:60:97:24:06:9d:f0:55:55:
                    75:47:54:40:7b:09:02:92:8b:0f:0d:3d:e2:ab:9a:
                    5c:4c:c3:e9:7a:e0:e2:be:84:ba:5b:e4:b0:50:de:
                    ee:2d:06:87:00:35:81:c3:17:f2:8a:09:70:fe:4f:
                    4f:85:4e:0d:ad:7d:d3:4e:d3:92:59:ae:03:24:f6:
                    9a:79:ba:a9:e5:c8:23:82:0f:a4:7d:39:ea:66:63:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:86:55:E0:43:7D:0B:56:C0:3D:98:CF:BC:D5:86:75:EF:77:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/877d4cdc-af83-3e00-8bdb-01c450cd1446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:c7:bc:68:25:a4:0a:89:3f:87:8b:08:2f:c8:81:e9:6a:
         31:3a:05:1b:27:c7:63:c4:a8:00:1d:c4:37:f2:ba:cd:4e:6a:
         c5:d7:9e:e9:ee:c3:3c:41:17:e6:96:85:2a:94:e5:e3:e8:bd:
         83:41:74:77:0b:5c:9c:58:7d:5a:d1:7a:2f:82:78:8c:3c:6c:
         0e:20:1f:36:8f:96:70:52:08:62:f6:1b:39:2c:1c:04:84:4f:
         06:dc:77:4b:25:30:4d:98:aa:21:54:e5:5d:be:f4:a2:43:fb:
         90:5f:1b:c5:db:f8:9d:61:fd:44:04:7f:15:c3:b7:58:fc:54:
         46:31:a9:6a:d6:b5:e6:b6:08:15:20:82:16:59:44:23:02:21:
         d8:b0:be:00:87:5b:10:72:da:08:79:67:a9:9b:67:04:52:3b:
         4b:c4:9c:19:85:e4:d8:f6:ac:85:db:6d:a3:05:e4:1a:ce:6a:
         94:c0:f5:d8:2c:7d:9e:54:8b:f1:57:13:67:62:01:1a:3c:fc:
         be:69:0b:2f:a0:0d:16:80:9e:c3:04:8d:1f:b6:bb:b3:bb:74:
         6a:28:d0:f3:a8:dc:ea:18:c6:dd:3a:67:d7:81:d1:de:ae:30:
         68:f7:40:66:54:c2:fe:bb:75:69:f8:48:63:a4:65:7f:39:45:
         19:c4:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:04:09 2026 by rpki-client