Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
File:                     58ad2792-dfe9-39d9-8e32-bb768e23741b.roa (raw, json)
Hash identifier:          Eig9lr2IJlURFjPCuvJxPoPfoQzUaEQc/Z54xiArlFk=
Subject key identifier:   A2:04:AF:0E:F8:C3:6C:9F:A4:8C:9B:55:A0:C7:10:8C:85:98:21:89
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584F4973F91F966DB8A04747BFC0
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63267
IP address blocks:        104.171.208.0/24 maxlen: 24
                          104.171.209.0/24 maxlen: 24
                          104.171.210.0/24 maxlen: 24
                          104.171.211.0/24 maxlen: 24
                          104.171.212.0/24 maxlen: 24
                          104.171.213.0/24 maxlen: 24
                          104.171.214.0/24 maxlen: 24
                          104.171.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f9:1f:96:6d:b8:a0:47:47:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6abdce00-126f-4e08-a6f6-3b15ece88cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:3e:64:41:48:78:62:e6:b9:6a:06:f3:47:
                    51:38:34:1d:de:cd:a5:20:bd:ae:49:d7:da:64:0a:
                    2c:c2:ec:04:d9:17:74:12:02:29:fe:d3:00:0f:c1:
                    81:5f:1e:ac:b0:e0:c0:5d:17:80:3b:15:5a:27:8b:
                    1c:62:16:f0:30:8b:2c:54:a2:ea:2b:6f:b1:09:b1:
                    19:62:02:3c:49:00:4e:3c:57:4f:03:93:df:ef:94:
                    44:99:c7:f5:67:6f:42:dc:11:34:66:13:c9:53:85:
                    ba:2f:4e:12:f7:0f:42:8c:ce:f5:6c:d1:31:92:63:
                    75:d5:f8:4b:1c:06:9e:1e:70:db:33:68:54:d4:85:
                    15:81:c6:43:26:6d:87:4d:f6:7d:0f:13:85:60:48:
                    f9:ac:ad:92:ec:4a:06:8a:1e:95:ac:ef:d4:d6:05:
                    48:d7:da:a6:c9:74:cc:f0:be:c8:df:f7:1e:4e:2e:
                    f6:a6:3e:4b:d9:21:34:2a:c5:55:6d:1f:7f:95:54:
                    b0:f6:a0:22:73:68:58:e0:6b:b2:ca:91:b5:93:4e:
                    ef:4f:99:92:5d:54:32:69:dd:9b:39:b6:b1:e1:11:
                    b8:5a:eb:49:0e:69:fe:b1:8e:a4:78:a6:d2:2c:dd:
                    95:17:ae:ab:04:81:2b:48:e3:e0:2a:8c:5b:4e:df:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:AF:0E:F8:C3:6C:9F:A4:8C:9B:55:A0:C7:10:8C:85:98:21:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/58ad2792-dfe9-39d9-8e32-bb768e23741b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:da:15:f7:94:0e:6e:21:f1:6c:0d:59:aa:46:12:46:28:
         f3:8e:1a:21:ea:8c:97:16:d0:5b:80:95:0c:4c:dc:7e:fe:39:
         a8:73:6f:cf:a4:47:06:c1:be:d1:d5:97:97:93:cd:3a:c2:02:
         8b:8b:26:c7:8f:58:06:12:0d:7f:4a:35:68:52:45:78:1a:d0:
         33:53:42:a5:37:06:fb:6f:34:55:42:ae:2a:fc:25:22:79:cb:
         f9:f2:cc:77:68:84:52:d3:7f:6b:a0:fe:ca:78:7c:2d:48:4c:
         84:80:83:4f:56:77:8a:1b:bf:23:21:de:37:b5:e1:a6:45:a0:
         24:8b:56:19:8b:81:7d:0c:cf:1c:76:57:ed:b1:54:a1:03:1d:
         70:ee:a8:1f:b0:d5:d5:1f:f1:62:8d:cd:23:ab:a3:9d:0d:5f:
         30:c7:a3:c8:f9:dc:4a:1c:25:02:f4:ef:d1:11:64:0b:9c:01:
         cd:77:b6:b6:97:09:d9:b9:73:d8:f3:8c:57:73:9f:d8:34:ad:
         cf:27:1d:50:58:ed:c7:ab:2d:ff:79:22:f6:e0:44:71:a8:7d:
         d7:09:7d:ca:86:2b:b4:8d:79:a3:40:a6:d9:df:2f:60:8a:c4:
         5a:05:97:96:7c:5d:ce:50:78:4c:3d:3e:73:be:88:47:46:a6:
         4b:d1:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:08:57 2026 by rpki-client