Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/e5c9ecca-3983-3e95-8196-27a40abdc029.roa
File:                     e5c9ecca-3983-3e95-8196-27a40abdc029.roa (raw, json)
Hash identifier:          Kt2aN8xTvFjbOhz9TTzQBxHkVV+VEM0hND45mPZRLSo=
Subject key identifier:   FF:01:EC:75:55:10:A7:7C:CC:FB:2A:F1:87:2A:72:0C:3A:03:A8:1F
Certificate issuer:       /CN=c638a4ea-7b45-4ddf-8d7e-0483500e3457
Certificate serial:       010D0C9F4328584EDC91E5E487CF3B55D6D38060
Authority key identifier: 1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/e5c9ecca-3983-3e95-8196-27a40abdc029.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     401539
IP address blocks:        104.218.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e5:e4:87:cf:3b:55:d6:d3:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c638a4ea-7b45-4ddf-8d7e-0483500e3457
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cd4d5f61-09dc-4ea7-99e2-65c94b14a415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:4f:7e:2d:1e:cf:5f:f5:44:9d:ae:a6:8b:
                    80:0c:b6:94:bd:14:32:99:d8:c2:35:fb:27:12:47:
                    1c:18:fd:34:94:2c:68:c3:e0:ff:b3:ae:44:c9:ae:
                    77:22:c1:13:0d:ca:5f:9e:f0:8e:1d:31:27:c5:75:
                    a6:43:b5:a3:54:cb:84:57:80:83:9e:d9:27:c2:ad:
                    c9:01:c4:3a:af:2f:1f:f1:06:d7:83:b1:60:05:bc:
                    b8:dc:cf:41:79:00:5b:20:12:fc:e7:9b:af:2d:78:
                    28:c4:bb:9f:7e:39:9f:f3:a2:4c:16:98:f9:93:c4:
                    c2:a3:8b:6a:fe:34:b3:57:92:81:ab:4b:e4:04:fe:
                    2f:a2:b4:6b:c5:3d:47:a8:98:4c:ab:a6:ab:e2:54:
                    13:68:f2:45:b1:4e:aa:8e:a3:62:9e:15:5b:df:75:
                    80:08:98:a2:b5:c0:59:be:0e:cd:21:1e:6b:f3:a4:
                    f1:45:82:92:5b:90:dc:a6:57:38:99:5c:7c:22:2e:
                    cc:6b:fb:60:d3:16:52:f8:66:6f:66:ce:5f:0b:8b:
                    22:79:40:05:02:21:1f:eb:a7:78:2a:ad:b4:3f:0c:
                    07:7a:d2:36:fc:57:c6:3c:76:16:53:a5:37:ab:9c:
                    1f:a2:f0:a9:8a:0a:22:31:37:ea:11:ae:dc:af:2d:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:01:EC:75:55:10:A7:7C:CC:FB:2A:F1:87:2A:72:0C:3A:03:A8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/e5c9ecca-3983-3e95-8196-27a40abdc029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457/c638a4ea-7b45-4ddf-8d7e-0483500e3457.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F1:22:25:80:48:59:A8:B3:0D:CC:20:FA:70:E1:A6:EE:7E:68:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c638a4ea-7b45-4ddf-8d7e-0483500e3457.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:23:e5:f4:4e:9e:f2:35:e7:6e:95:30:15:57:b9:00:07:
         3f:55:04:10:5f:e4:08:f2:a7:1b:c5:bf:aa:2b:18:e4:50:7a:
         78:a4:79:5c:8b:0f:65:9e:1a:a4:7e:f4:54:f1:74:e7:2c:7e:
         f7:f5:56:bc:18:d8:9a:6e:17:9f:a1:25:21:f7:ca:e1:45:d8:
         08:94:db:93:ad:d2:c2:c5:95:17:6f:4b:0c:3b:c3:c6:dc:18:
         45:5e:f6:86:68:96:cd:36:8c:b9:51:27:2c:a9:5a:fd:4e:ed:
         62:75:e4:77:37:0a:5a:e4:23:68:02:cc:fd:63:1e:d4:ae:78:
         68:44:60:cd:2c:bb:a9:11:8f:c9:c0:34:0a:33:a1:1e:4c:07:
         3b:43:e5:9c:02:94:6d:e9:31:89:8f:6f:66:fe:f0:5b:18:1a:
         02:5e:1e:01:f3:4b:2d:ef:e5:20:2a:cd:d4:20:6d:a8:97:e4:
         5f:40:2b:80:e9:87:24:66:2c:bc:8d:30:75:13:37:e9:af:25:
         d5:d3:e9:75:ed:36:bf:cb:24:af:c7:09:e5:9b:3a:1b:97:0e:
         9f:20:6f:56:86:ac:34:e9:53:00:27:58:d0:9f:82:23:ce:a2:
         69:27:75:6a:b2:e4:e2:6c:b6:91:38:a8:26:a5:c0:b1:89:7e:
         20:f0:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:01:59 2026 by rpki-client