Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/a4ab88a4-dc03-32a5-8312-6bd1a37f6d29.roa
File:                     a4ab88a4-dc03-32a5-8312-6bd1a37f6d29.roa (raw, json)
Hash identifier:          ABJl4A9NTte2jrujGu9RsOq6TbK07k703Hb85aZHHZ0=
Subject key identifier:   EC:7B:4C:7A:AE:FD:BD:1C:78:3D:29:B4:2D:77:E8:57:44:DD:01:5F
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584EBB11B310FA3DF93C429CCBC0
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/a4ab88a4-dc03-32a5-8312-6bd1a37f6d29.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     54980
IP address blocks:        104.255.208.0/22 maxlen: 22
                          104.255.208.0/23 maxlen: 23
                          104.255.208.0/24 maxlen: 24
                          104.255.209.0/24 maxlen: 24
                          104.255.210.0/23 maxlen: 23
                          104.255.210.0/24 maxlen: 24
                          104.255.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b3:10:fa:3d:f9:3c:42:9c:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=1ed91e19-c090-43ab-9fff-8efe2a2d0c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:3e:b5:d1:57:47:ef:8a:c3:44:65:8d:aa:
                    27:14:91:9c:a2:af:2b:bd:7b:36:bc:d7:f6:6b:bc:
                    d8:57:50:07:4c:70:a4:19:f3:67:e9:34:8e:e5:18:
                    b7:cb:6a:f8:3c:86:a5:9e:45:70:cc:a0:7e:5a:4a:
                    7c:bb:32:73:eb:8b:0f:96:9e:eb:e3:b4:79:2e:f8:
                    9b:b6:ff:78:dd:34:6f:d1:52:d7:83:52:0b:1d:32:
                    f2:d4:7f:23:9b:f5:f2:11:52:c6:01:74:cc:00:16:
                    b3:4a:0c:e4:08:d9:c0:99:18:7c:94:49:76:73:d6:
                    0e:ea:23:f6:8f:32:13:5b:e5:a6:0d:2d:ea:4a:53:
                    c8:89:32:06:a7:67:9e:6f:63:30:12:9c:49:59:13:
                    47:e2:2a:cc:3e:f1:f0:fb:77:d1:63:8b:ba:fc:ff:
                    d2:10:af:58:af:22:0f:3e:bb:1f:2f:17:b9:e2:9f:
                    0b:99:57:cb:2a:40:ea:e9:f7:8c:25:f0:4c:15:55:
                    bc:7c:c9:dc:a6:5e:b4:14:1c:f3:4c:8d:88:14:b4:
                    66:fa:09:0f:b9:45:db:6b:3a:bb:1a:c7:74:46:fd:
                    5e:aa:62:12:bc:4f:d1:d5:88:b5:20:6d:17:94:3e:
                    ee:57:93:f9:80:fd:e7:e0:24:99:79:8d:f5:19:a0:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:4C:7A:AE:FD:BD:1C:78:3D:29:B4:2D:77:E8:57:44:DD:01:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/a4ab88a4-dc03-32a5-8312-6bd1a37f6d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:c7:0f:25:f6:2a:7d:cb:19:42:35:a7:03:30:b1:d1:4d:
         e7:39:11:1d:89:c1:fb:42:1b:8f:62:1a:d2:01:63:ce:07:14:
         ca:44:fc:3c:44:22:b6:e4:c0:8b:7b:18:6a:c9:3b:70:fc:4e:
         1a:5a:de:6a:8a:02:31:d0:30:b3:4d:62:c0:c9:22:22:bd:a1:
         c4:d3:db:ae:e7:e0:97:4a:ae:90:7f:91:6e:71:fd:c5:a6:8d:
         56:5a:c2:fe:4b:49:40:18:47:9b:3d:57:53:a0:cc:0a:1c:b2:
         05:4f:42:d9:fe:2d:c0:fa:dc:15:0b:4b:c1:bf:0e:7b:e1:e8:
         27:d8:95:33:c6:d1:a0:9c:8b:6c:df:2c:88:b6:c0:dd:46:4d:
         07:56:58:0c:1a:9e:d3:f8:08:d6:00:3f:70:2b:82:dd:f0:2c:
         d3:90:8c:ad:20:e5:23:0e:bd:71:de:3f:74:b8:16:5c:77:97:
         a1:a3:29:f2:ed:ff:8b:53:cf:82:5d:f5:ea:50:eb:10:93:87:
         b4:ec:dc:ac:42:16:a5:22:0f:9c:1f:a0:12:ae:fa:02:b2:fb:
         29:d5:b9:44:31:c9:11:71:7e:b2:92:e5:e3:9b:49:ff:1f:16:
         6a:2a:be:91:a4:b6:29:33:25:a1:9d:f3:f9:71:42:18:32:c8:
         d0:7a:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:58 2026 by rpki-client