Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa
File:                     4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa (raw, json)
Hash identifier:          LU+oBfHfEN8azop8sR8qv2tQox0BZWzAKEsde4v0k9E=
Subject key identifier:   29:7F:DF:D3:83:9D:9C:5C:47:86:22:AD:B3:5C:06:02:18:49:15:CB
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584F093CD83B947C2FFE9187D138
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        104.255.171.0/24 maxlen: 24
                          104.255.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d8:3b:94:7c:2f:fe:91:87:d1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=016e44ca-12b8-4aea-937d-c316be311b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:6c:a7:6a:d3:dd:d7:84:15:17:78:7c:5b:
                    61:d2:53:75:f0:90:d4:3b:ac:02:f2:ec:dd:b4:fa:
                    7c:da:f5:61:77:5d:51:ab:de:4c:12:33:b1:15:33:
                    b3:af:8b:c5:71:e3:7b:c6:1f:01:01:96:81:a0:1b:
                    f7:79:14:8c:c9:a6:13:3f:97:9b:e8:fd:c9:6d:c1:
                    b7:dc:ff:87:6f:9a:c5:c2:a0:71:10:e4:4f:4c:e4:
                    8a:f7:80:dd:83:e3:26:eb:c3:5f:5f:f0:04:be:5e:
                    90:f5:47:3e:19:0e:45:88:cd:34:67:02:b7:d9:6d:
                    7b:bd:f7:19:74:0b:d5:28:47:34:8c:da:21:7b:f2:
                    5e:16:e7:51:83:99:e5:dc:20:3a:9e:88:38:f9:f7:
                    9f:81:2c:d9:89:86:75:ca:90:1a:46:47:cc:94:65:
                    14:fa:7d:e0:d3:81:67:9b:80:85:7f:5f:c6:9a:18:
                    91:04:2a:43:d2:8d:4f:63:86:0f:ec:5d:b9:f5:35:
                    1d:75:2a:c5:70:5d:d4:c1:57:21:67:65:75:51:68:
                    77:aa:44:a1:72:d3:6d:f3:6b:a2:aa:a4:c8:17:03:
                    99:f9:41:1e:2d:04:7f:77:7b:06:45:5e:e2:be:63:
                    88:0d:7b:68:d3:ad:a4:57:36:7f:b9:34:68:65:3e:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:DF:D3:83:9D:9C:5C:47:86:22:AD:B3:5C:06:02:18:49:15:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.171.0-104.255.172.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:10:4e:2f:87:3c:b6:31:15:36:49:68:21:8d:95:d1:a3:30:
         fb:4a:4b:f7:b8:95:07:8b:08:41:85:8a:c4:a6:09:93:c9:78:
         cd:d4:09:cb:2d:31:1b:5f:30:4a:7c:9d:5f:47:ac:80:5e:b7:
         38:a8:6f:19:4f:87:ad:43:33:33:4a:eb:ac:f5:f4:49:3b:b7:
         c4:2c:85:cf:f8:94:af:59:69:60:86:3f:3f:f7:89:d1:2d:af:
         01:97:d4:f9:66:93:99:10:58:03:73:f0:b8:64:6e:44:fe:0a:
         9a:f7:19:e9:22:29:fd:87:15:cf:0f:e3:41:39:a7:75:a5:a6:
         2e:7e:04:ab:1e:ca:35:2a:e6:91:da:88:31:d7:b2:15:51:00:
         e3:8c:b2:71:d0:d7:17:48:5c:5b:19:3d:19:b2:ef:c0:d5:b3:
         f1:e1:1a:6d:6b:f2:a3:06:89:ac:08:82:db:9e:b7:af:3f:30:
         87:d0:de:f6:c8:df:1e:70:7e:71:15:7a:77:9d:7b:09:95:2c:
         da:ac:29:9e:ca:ef:d5:4c:a3:41:f0:4c:f8:fd:f5:e4:f9:c0:
         14:67:7e:fa:2d:9b:da:f6:09:8f:e4:23:ee:70:dc:e0:7c:5c:
         74:db:32:a2:d2:09:57:e4:82:50:67:de:e4:6f:fe:45:f8:9b:
         a3:16:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:42:38 2026 by rpki-client