Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa
File:                     b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa (raw, json)
Hash identifier:          Y1EJjRKEWtP4MBG0sP7SXS/vxlskxmGQaUuWEBOUmls=
Subject key identifier:   F8:BE:38:95:29:3A:D0:7D:69:19:A5:CF:C4:0D:96:0C:4D:AF:07:66
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584ECE9C6EF7CB9156C110F52980
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     394352
IP address blocks:        104.224.32.0/22 maxlen: 22
                          104.224.32.0/23 maxlen: 23
                          104.224.32.0/24 maxlen: 24
                          104.224.33.0/24 maxlen: 24
                          104.224.34.0/23 maxlen: 23
                          104.224.34.0/24 maxlen: 24
                          104.224.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:6e:f7:cb:91:56:c1:10:f5:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=768775a1-5795-4eba-af96-313b9f636ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:7e:6d:2e:b0:7c:39:e5:f2:1a:8a:bd:5c:
                    41:d7:47:0a:03:e3:49:de:b2:61:3d:8e:1e:58:99:
                    e0:e9:15:62:25:23:47:25:50:1b:b4:c2:2a:57:1e:
                    de:41:3b:1a:ff:26:1c:42:d5:3c:5b:56:20:63:9d:
                    23:32:ff:17:ea:ab:b2:41:55:50:bd:10:a0:84:30:
                    1d:d4:eb:c1:e7:d0:9e:6d:18:79:cb:90:73:54:7c:
                    d7:55:0e:46:89:2b:54:7c:1f:35:39:26:0d:30:79:
                    1c:a6:16:b0:01:9a:21:9c:af:f6:92:f6:c5:55:01:
                    90:e3:41:aa:b5:99:85:64:1e:cf:4b:53:19:a4:c0:
                    05:eb:28:1f:85:8d:b5:f0:1b:c8:a8:03:59:04:3e:
                    c6:98:00:a0:04:f3:5e:ff:90:96:cb:f1:3c:30:c4:
                    1e:27:26:4a:54:36:dd:b6:02:27:2b:48:79:7d:cb:
                    c0:10:f5:fc:a6:4a:37:31:6f:1c:bd:ea:ee:45:26:
                    d5:e0:b2:44:b3:ed:0d:80:ec:90:f8:71:82:76:df:
                    2e:09:25:87:aa:d8:7f:ae:96:53:1d:4a:dc:0e:2f:
                    33:9e:c2:5b:fc:83:81:9c:d5:97:57:64:8f:3f:f8:
                    dd:2c:e2:82:88:f0:bf:92:20:59:0b:95:dc:c0:5b:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:38:95:29:3A:D0:7D:69:19:A5:CF:C4:0D:96:0C:4D:AF:07:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:65:6c:5e:87:e4:24:e4:e8:30:3c:fa:49:6b:d2:13:64:
         25:09:a8:01:29:4a:0a:b1:4e:07:77:e8:c8:1e:f4:99:e6:c5:
         a0:e8:0b:b6:69:da:f7:dc:af:49:09:95:04:f0:e5:64:f1:8f:
         1e:a0:f3:21:48:57:5d:25:84:18:75:74:7e:f9:6f:84:09:62:
         17:41:82:96:19:fa:68:10:99:fd:c5:42:1b:b3:0a:c6:74:a6:
         d4:5f:c6:8e:49:2c:3e:bc:ff:44:79:e8:0c:d0:f0:61:6f:39:
         a9:b8:66:43:10:cc:63:69:31:58:0b:ed:5a:fa:1c:9e:0f:d8:
         5c:22:5e:ff:1d:c4:3c:5b:8c:4f:c3:e9:57:8e:fc:4f:c1:9f:
         21:4b:e3:37:81:c7:cb:f0:57:5e:87:d5:64:d1:c9:b5:35:14:
         e9:d4:19:48:f2:e8:b5:24:5f:4a:c7:44:3b:55:60:56:97:db:
         47:2d:4b:f3:06:00:e9:b4:04:64:df:2a:7a:74:7d:ba:bb:cb:
         05:9f:e5:12:c1:2f:40:9d:c6:27:43:dd:82:b8:fa:50:2d:f6:
         67:90:c5:2d:b6:aa:b3:1c:e1:cd:6d:b3:59:2f:86:07:6b:56:
         e7:03:d8:b0:83:50:57:13:0f:9f:34:a6:48:00:50:50:08:6c:
         5f:20:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:48 2026 by rpki-client