Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa
File:                     ea162157-11ac-30ba-b103-99c277926c40.roa (raw, json)
Hash identifier:          hf/a+yfLbsquvzZ230+A9YPO6Na4fyDY3wTDuFcNaGU=
Subject key identifier:   29:B2:FC:C6:E1:EB:D1:23:95:A9:4D:BA:D7:FC:E4:14:D6:FF:7E:57
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE4235C95BD118F91E7BD7380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa
Signing time:             Wed 19 Aug 2026 18:04:04 +0000
ROA not before:           Wed 19 Aug 2026 18:04:04 +0000
ROA not after:            Fri 12 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        104.40.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5c:95:bd:11:8f:91:e7:bd:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:04 2026 GMT
            Not After : Apr 12 04:00:00 2030 GMT
        Subject: CN=de06d4e0-4f7e-4099-af13-d28b314b2611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:1b:af:1a:8c:c9:84:be:fe:8d:98:21:13:
                    89:c0:b2:5e:73:8b:6f:97:58:5c:e7:e3:d4:1a:a5:
                    0e:cf:5b:07:68:d1:04:3a:97:9d:0a:cd:3b:e3:7e:
                    73:a8:10:9d:9b:15:a3:52:ff:27:14:82:45:a1:1b:
                    9c:3f:5e:fd:5c:ed:a9:df:d4:71:85:4b:73:92:73:
                    37:2c:ab:38:f2:83:ea:1d:5b:a5:24:7c:d8:4d:c9:
                    3e:cd:0f:f0:80:dd:76:9f:e3:4b:9a:24:b4:35:3e:
                    64:c6:67:59:f2:d0:eb:f2:52:7d:1a:c9:00:3e:cd:
                    e7:0f:35:8c:df:dc:2e:41:10:01:6e:a9:26:29:d2:
                    1f:b4:39:29:6e:1d:90:ab:f1:9b:69:3c:90:20:77:
                    bf:f3:6e:fe:b9:84:b1:30:07:86:42:05:eb:5e:01:
                    66:f1:61:cf:a4:30:95:2a:3f:c7:bb:4d:8b:c3:ea:
                    b4:3b:9f:1b:41:2f:e3:fa:d0:6f:37:34:81:05:75:
                    1f:fe:3c:8a:7c:81:33:37:8c:02:99:29:a4:88:a1:
                    50:28:12:d6:26:f4:c8:4d:2c:87:95:0c:77:f2:26:
                    07:ef:ea:08:5c:8d:e4:4a:bb:74:74:11:da:2a:bc:
                    69:fe:58:71:08:fd:d7:79:39:3e:c2:88:d2:d1:39:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:FC:C6:E1:EB:D1:23:95:A9:4D:BA:D7:FC:E4:14:D6:FF:7E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea162157-11ac-30ba-b103-99c277926c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.40.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:52:a9:74:60:d5:c3:8b:51:f3:9e:58:75:6f:f6:19:5c:31:
         c3:38:66:f9:d8:75:27:d7:1d:ea:59:37:b1:1c:68:f6:d8:74:
         e4:62:48:fc:23:63:28:1a:eb:1e:88:c8:26:74:dc:0b:e3:dd:
         3f:1b:44:89:8b:38:9d:ff:f4:5c:c1:41:8a:b7:da:64:84:61:
         b2:96:e9:fb:cd:d6:7b:1f:2c:8b:fd:fb:72:1a:11:a4:80:b9:
         26:97:c4:da:b8:96:30:29:1b:49:0e:22:db:9b:f2:9d:3f:62:
         00:82:25:d9:4d:10:97:b3:7b:bb:16:d6:77:b9:1b:db:62:32:
         10:59:73:c5:75:90:a8:d4:05:92:29:51:4f:c6:1c:f8:91:4d:
         bd:7e:44:43:d5:bf:1b:72:24:8c:0c:65:42:26:10:60:7a:94:
         2b:2a:30:99:c1:12:ff:fc:5f:cb:1f:c0:39:fe:d4:93:8f:44:
         05:8c:59:e5:54:d7:ce:f4:f6:b6:21:7e:fa:11:c8:2c:1d:80:
         9d:bd:ec:45:b4:99:e3:09:5a:d1:d9:43:a5:96:ef:37:97:2c:
         5f:ed:91:20:4b:60:f6:90:64:27:14:ee:92:b6:63:71:10:45:
         13:c1:ba:0a:d4:fe:5e:01:15:68:07:d2:ae:95:1a:f7:27:fe:
         2e:1e:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:42:34 2026 by rpki-client