Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa
File:                     2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa (raw, json)
Hash identifier:          yQC8xwyaRRmm1ZKfdP4SOJeYHN4yaPlOlXNuVgGMelY=
Subject key identifier:   08:D2:7C:B3:B6:9C:7B:0D:E2:D3:3E:E0:F5:82:97:8E:B3:C1:EA:AE
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F4328584D5B4FA2FAFADF8E95C92F1DC0
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     199610
IP address blocks:        104.193.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a2:fa:fa:df:8e:95:c9:2f:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=25ed764c-a278-4dc7-a4ea-3cbbd6ce7451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:fb:96:c4:57:6e:4d:30:28:72:0f:af:4e:
                    83:3d:3e:b3:c6:f7:3b:5c:00:7d:a5:31:75:9f:db:
                    f8:6a:15:78:e3:b6:ee:a5:d6:43:be:7f:79:6f:0c:
                    1d:c8:90:dd:ff:e5:12:96:7a:13:77:35:09:81:01:
                    04:1d:c5:c7:bd:70:19:cf:ca:5c:53:49:7f:08:f4:
                    d2:4e:03:51:3e:16:df:c8:53:26:9f:f2:ff:ec:a6:
                    c4:4e:82:fd:0f:88:7a:62:4b:14:5b:f6:b1:12:23:
                    60:58:d6:83:77:ab:82:cc:e0:6a:fa:d5:46:fa:31:
                    45:97:9e:c4:ad:d1:9d:b4:b6:1f:1b:d0:6f:b6:64:
                    75:8a:de:16:0b:bd:db:f1:a1:f6:7d:e2:2f:a0:59:
                    5c:3d:73:a6:81:53:9b:aa:37:ff:30:cc:60:84:db:
                    68:53:72:0e:66:c3:0f:c0:7f:fe:82:45:3e:70:4c:
                    ec:1c:ba:70:f3:96:49:41:57:33:ef:55:a7:01:ba:
                    92:79:82:fb:e7:68:8c:e2:48:dc:41:9d:1a:be:b7:
                    79:3c:ac:9c:fd:91:1e:87:99:38:7b:85:da:d9:a5:
                    99:7c:78:e3:0f:74:4d:3e:7b:12:44:9f:94:32:ca:
                    5c:ba:e5:4f:5c:6a:17:d5:73:55:3e:38:b9:4d:41:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:7C:B3:B6:9C:7B:0D:E2:D3:3E:E0:F5:82:97:8E:B3:C1:EA:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:f2:1d:6b:9d:64:3c:11:a2:c2:63:7f:aa:93:c0:14:f3:
         77:78:4c:14:09:b7:07:fc:cc:fa:45:e2:3d:15:e0:d1:59:05:
         c2:c8:ce:7f:76:cb:9b:3b:64:e4:14:c8:30:2f:2d:5d:46:c0:
         80:c2:8f:f8:3d:40:67:1f:06:8c:82:35:3e:ea:47:ad:bc:3a:
         9e:79:a4:1e:12:39:44:2b:ca:df:c0:f9:2c:0a:e0:51:73:20:
         9f:8a:d1:bd:49:d8:78:a9:77:5a:0c:03:f5:88:5e:3d:65:24:
         24:42:b3:4b:e8:52:f5:2c:63:d0:97:94:20:67:10:91:2a:84:
         8a:1d:9d:e1:7a:70:87:9a:8b:cc:99:fd:05:65:d6:60:61:86:
         cd:35:70:85:c1:c7:09:f1:48:3b:86:02:84:b2:7d:d4:2c:8c:
         6a:e5:ba:9f:9d:47:82:ed:65:20:53:63:79:8c:4d:b7:69:6b:
         36:f7:08:39:1c:df:ea:89:9c:d3:52:39:87:dc:55:fc:c8:0d:
         eb:fe:91:65:1d:6e:1a:ec:a6:0b:69:4b:ac:73:30:15:2a:c0:
         92:b0:11:d0:88:c7:8c:9d:e2:8f:3d:24:dc:2a:a3:40:55:27:
         fb:4c:f4:b0:06:de:58:44:77:d1:fa:6e:ed:b4:70:31:73:d7:
         53:7f:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:27 2026 by rpki-client