Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa
File:                     b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa (raw, json)
Hash identifier:          OtMprj4wyLdBvOF8CvGesc2idx8T0ks/rgZtI0JvJuU=
Subject key identifier:   B9:6A:A3:5C:D6:4A:D0:41:52:2A:E1:FD:D8:C5:BE:42:FD:9F:58:6C
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584EA78878CFFE1D8C0AB459A900
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46606
IP address blocks:        104.254.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:78:cf:fe:1d:8c:0a:b4:59:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07225f50-4e52-452d-804d-06ce4e639e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:33:c5:ad:e2:e0:61:b2:db:f7:93:a8:a5:
                    be:3c:48:b9:98:56:28:a0:64:97:30:3b:7a:4d:c8:
                    d8:6a:ab:1b:3d:b7:a5:3f:e7:46:b8:d4:e5:07:25:
                    ee:e5:d3:cb:93:81:1c:a7:c3:b1:42:82:5a:40:84:
                    5c:89:0b:c6:81:4a:22:c9:c5:ba:23:37:41:25:67:
                    f3:ef:71:f9:10:5c:c4:c4:6c:07:9a:04:2b:20:42:
                    da:7e:d8:7b:9e:dc:7b:b5:1b:91:e9:e6:83:ba:e1:
                    17:8e:ed:26:35:d5:1a:89:c3:3c:34:aa:bc:31:f4:
                    58:02:77:62:8c:7f:2f:d6:45:5c:d9:c7:af:e5:d3:
                    3e:90:5e:70:33:02:b6:18:0a:45:35:26:30:65:ae:
                    20:85:89:b0:00:48:68:1e:b2:2d:d2:27:f1:37:bd:
                    5f:22:ab:72:47:7a:6a:40:cf:a3:e6:a4:64:35:5d:
                    ed:b7:1b:5b:a0:2c:fd:88:ac:45:f0:3e:69:76:5c:
                    b8:6b:e8:e6:aa:5a:c6:41:2f:e9:4f:0a:8f:f3:89:
                    a5:26:f6:4d:69:97:7d:ec:2e:ef:9b:8c:d0:bb:04:
                    89:7d:87:83:03:b9:d8:0f:d7:99:6a:75:f6:0f:fd:
                    e5:cb:92:ba:a4:37:77:cf:d4:3f:53:31:9e:67:06:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:A3:5C:D6:4A:D0:41:52:2A:E1:FD:D8:C5:BE:42:FD:9F:58:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:38:f9:85:96:4a:69:01:c7:2a:69:ec:12:ec:3b:8f:48:
         6e:9b:19:45:35:cd:43:8e:17:b5:20:6a:cf:c8:f3:2d:db:fe:
         a6:ca:de:d9:b6:e3:35:1a:16:7f:5e:3c:76:53:65:30:e1:de:
         f1:d3:12:1c:85:39:5e:21:7e:37:49:56:9a:ff:11:03:5b:8a:
         e6:f9:f8:d6:7e:87:8d:76:d1:5b:2d:f4:00:91:2d:73:b6:10:
         8d:28:13:11:c5:d0:9f:a3:93:6d:c5:9b:e5:9c:d5:3f:a6:aa:
         2d:67:34:80:2a:7d:39:a6:9a:47:e2:48:17:75:25:ed:bb:bc:
         0e:db:3c:ea:c2:27:5a:7e:b9:13:56:45:14:b1:a1:e4:bb:50:
         13:87:e7:af:ac:e0:ba:58:25:a4:bf:81:4e:8d:5f:94:c2:e7:
         32:f1:2f:93:51:ac:59:bc:37:be:6b:70:e5:46:33:c9:74:08:
         02:bb:02:6a:bb:a1:fb:12:7b:9d:05:36:07:84:46:00:a3:14:
         e6:c4:f6:74:b3:86:33:0a:94:a2:92:54:9e:cd:26:2f:1b:f5:
         27:fa:e1:7c:4f:98:85:a0:94:23:bd:3a:5b:d6:41:f0:94:0b:
         e1:57:46:94:ba:59:fe:da:56:2f:91:cf:f7:b2:f8:d7:28:a1:
         64:99:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:06:53 2026 by rpki-client