Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa
File:                     3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa (raw, json)
Hash identifier:          vuOwElx15c9l0C0+TrsIgI13HrNiakE9NgwSHbLd5w4=
Subject key identifier:   95:80:70:0C:79:13:C6:A5:74:62:19:07:D7:9D:22:99:40:63:DC:AA
Certificate issuer:       /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial:       010D0C9F4328584ECBD1E98CFA6FE4506A5FFF30
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     54600
IP address blocks:        104.219.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e9:8c:fa:6f:e4:50:6a:5f:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a1d38aef-c166-4b90-a7c4-8b81aa08f3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:95:77:86:ff:8d:23:8b:09:da:9a:6f:3f:
                    f3:9b:9f:29:bc:0a:33:dd:10:f4:ad:bf:5c:95:1d:
                    1a:64:3e:4b:97:f3:a8:e0:eb:10:5d:5b:20:8d:41:
                    19:27:07:d8:12:9b:70:2d:1a:ee:5e:ed:4a:4f:4b:
                    a1:73:84:f6:48:21:03:f6:ec:d0:ea:ce:00:a6:d2:
                    91:92:1e:f5:d1:c6:ac:fa:7b:4c:e5:17:a9:34:11:
                    65:bc:31:3b:70:29:a2:ba:c6:4b:3f:6e:84:8e:ec:
                    e3:a3:29:3e:6c:4e:fc:31:df:51:e7:17:b3:25:48:
                    b7:3d:4e:43:e7:1d:ff:d5:d5:db:83:70:ac:b7:85:
                    7b:92:1a:b1:95:75:d1:7c:cf:96:5a:38:71:00:ba:
                    52:fb:2a:41:89:78:3d:d8:cc:74:8f:2f:0f:80:4a:
                    4d:52:30:e4:37:50:d3:6f:43:e1:8f:e0:7c:20:ef:
                    88:e9:fc:db:99:e1:06:53:a4:8a:80:6a:f3:e9:69:
                    7c:3a:65:2e:b8:74:0f:e9:aa:b8:3d:70:36:d7:e6:
                    f0:77:4f:2d:a1:67:56:aa:47:aa:ef:51:54:9f:de:
                    31:d3:09:85:38:08:c3:c7:68:b0:73:31:4a:b2:11:
                    60:de:41:f5:9c:e7:67:43:fc:0f:f0:fc:cc:44:e2:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:80:70:0C:79:13:C6:A5:74:62:19:07:D7:9D:22:99:40:63:DC:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl

            X509v3 Authority Key Identifier:
                keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:55:93:6c:6a:d4:69:60:98:3d:ea:a9:f7:21:3a:9d:12:9d:
         67:90:71:af:28:d3:59:af:da:1f:74:f5:ff:c1:a2:9a:a5:55:
         34:cd:c8:c8:31:9a:12:ba:ba:a5:a6:35:14:b0:05:20:1d:5a:
         98:43:7a:0f:1d:97:73:56:37:9b:ba:a5:a0:0f:9b:fd:e0:aa:
         06:63:b9:5d:54:c3:63:5d:c9:b8:a5:36:54:82:3f:ee:77:05:
         7e:4e:e9:91:46:19:52:9c:97:be:83:70:5d:11:5f:8f:c0:e7:
         f6:60:ec:85:8b:56:26:ed:d5:44:30:24:f8:2c:82:82:4d:2b:
         c8:8b:a1:cc:4a:37:9a:34:72:80:06:85:b6:0f:2a:ed:38:9f:
         ec:1c:3f:0c:05:db:72:4b:5a:1d:8b:52:a8:27:69:b1:de:bb:
         1b:83:25:01:b6:32:77:21:7e:b6:69:3a:6a:26:85:27:93:2f:
         9e:a6:b1:54:b7:af:20:81:11:2e:36:5f:bd:dd:94:94:6d:21:
         e6:85:42:8d:a1:68:02:f1:b2:dd:b5:57:6e:b9:17:dc:94:a8:
         47:81:12:0c:f3:c8:11:5e:d1:9d:63:ef:c3:9a:a9:86:86:34:
         d6:59:1d:6f:a6:3d:fa:0a:aa:74:ba:d5:7f:7f:0d:ba:aa:c7:
         8f:b2:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:21:37 2026 by rpki-client