Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
File:                     6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa (raw, json)
Hash identifier:          9VHvKJbd/z+TyqGov4mBQ0MBm9P8ER+FvvLsb6vxtJ4=
Subject key identifier:   9B:2B:B2:CA:9A:31:B1:B2:A1:36:6F:C7:7D:F8:02:B7:E4:05:9F:1E
Certificate issuer:       /CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
Certificate serial:       010D0C9F4328584EA79C1280072591DDF7C71680
Authority key identifier: 72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27373
IP address blocks:        104.193.248.0/23 maxlen: 23
                          192.251.197.0/24 maxlen: 24
                          204.10.107.0/24 maxlen: 24
                          204.10.108.0/24 maxlen: 24
                          2602:fa37::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:12:80:07:25:91:dd:f7:c7:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b389c49f-5496-4973-9e6e-f7b1cfcd1c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:1e:5a:2f:d0:4c:a3:62:bb:b2:a1:20:18:
                    eb:cf:2b:a7:ed:2b:c4:6a:ed:00:a3:48:1e:27:a7:
                    49:f8:f9:12:11:af:4f:34:03:e5:cb:8e:57:96:9b:
                    13:d7:4c:30:a4:b2:fd:ed:c8:eb:71:65:ed:b0:f0:
                    c6:5b:87:e7:cd:fc:56:cb:c1:e9:de:ac:5b:07:e4:
                    00:1a:ba:4c:23:73:d6:bd:4c:45:2d:fe:d2:cf:41:
                    e9:41:39:a1:c6:bc:23:8f:58:9f:ce:03:57:80:64:
                    d1:a4:63:1f:a8:8c:0c:df:06:37:3f:07:39:b6:c5:
                    82:00:b9:96:b1:14:88:a6:08:aa:01:13:8c:10:48:
                    ff:c3:88:84:bb:ff:3c:d3:5b:52:5d:a2:ed:0a:ae:
                    7f:09:23:ec:98:ec:10:33:30:13:af:78:bc:47:97:
                    32:8e:bb:d5:ac:39:fa:2d:96:88:3f:a6:39:80:c8:
                    c5:6d:96:00:ea:83:c5:31:70:c6:82:1d:b2:48:3a:
                    63:76:c3:bf:bf:61:b0:3c:fa:74:b2:55:94:6d:e5:
                    f6:15:2f:bd:7a:97:8b:bf:57:00:7b:03:c5:80:33:
                    bf:0a:09:d5:b1:78:49:36:7d:1b:8a:ba:ac:8f:7e:
                    14:73:d1:44:dc:95:1a:66:7b:77:e7:d8:8d:19:ae:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2B:B2:CA:9A:31:B1:B2:A1:36:6F:C7:7D:F8:02:B7:E4:05:9F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/6ace8a00-7a5d-373a-91ce-4ca7806600fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.crl

            X509v3 Authority Key Identifier:
                keyid:72:C7:C4:10:EF:78:EE:F4:79:6A:80:98:A0:3E:44:16:E3:6D:54:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b5813b1-e4da-4f8b-bea7-8b7e3e47ce1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.248.0/23
                  192.251.197.0/24
                  204.10.107.0-204.10.108.255
                IPv6:
                  2602:fa37::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:d8:9d:31:da:3e:be:f1:36:18:d1:9e:82:21:2d:1b:69:
         cb:6c:f8:a2:d9:e5:e7:f2:70:9e:e9:53:94:de:b5:43:1b:97:
         6d:30:62:f4:55:8a:ba:3b:80:75:5d:c9:c2:a9:b3:49:52:0c:
         25:89:33:69:d4:a7:b7:bd:f8:e9:fd:e7:54:42:a3:72:dc:20:
         9b:78:6b:ea:59:8c:8f:6c:de:d3:c6:2d:23:48:c6:e4:ec:aa:
         df:5d:2e:2f:7a:0e:ae:28:cf:2a:ca:30:10:45:4a:96:1a:c3:
         13:29:45:82:f5:4b:f4:0e:9f:ce:67:f7:1d:d1:f0:f9:ed:65:
         70:2a:6d:0e:a8:1e:5d:36:a1:7f:11:76:10:d2:b5:68:34:ad:
         03:35:9f:72:d2:50:5c:e0:38:a6:14:d0:ed:ae:7c:cb:a6:a7:
         e7:0e:45:a6:e2:fa:e0:e1:f1:ee:3c:ae:54:b9:6c:03:fa:2f:
         d7:cc:14:81:3a:0d:cd:dc:04:4d:7b:e3:15:38:b3:22:9c:fd:
         6d:8a:6a:1f:d2:b1:42:3d:dc:09:3a:eb:93:f9:51:12:d6:9a:
         9c:d7:f9:63:81:93:86:cd:b9:4a:2a:bb:06:0d:bc:e2:17:f4:
         83:b7:32:0c:0f:47:d5:5b:24:00:ce:ae:1a:95:0b:67:f4:f8:
         ee:5c:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:38:16 2026 by rpki-client