Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa
File:                     0073bbbf-0e5a-3e34-a840-8c081704c58a.roa (raw, json)
Hash identifier:          urhnTDMJK3Ih9bQds2zgIKjTI5Wfg6f2pQHu1gKWpCU=
Subject key identifier:   90:B3:A2:74:E7:AC:7B:18:79:2F:27:19:3A:62:19:1C:2F:E6:8A:5B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFF2EA70A8B9F7BDA22180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.31.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f2:ea:70:a8:b9:f7:bd:a2:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=a2968722-229e-49c7-8e17-9c798266e76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:3f:b5:d8:b3:03:cc:0a:ae:67:6a:2b:3d:
                    70:fe:ec:d5:e2:7c:27:06:f6:61:cc:30:1f:95:a3:
                    6c:77:d7:c6:5c:d4:f0:30:2a:15:00:f3:3a:b7:fa:
                    be:f8:52:36:ed:3a:b8:c1:34:04:59:a7:ff:89:2a:
                    a2:7b:dd:ca:7c:d3:5d:4f:a7:a9:4a:58:41:de:85:
                    41:19:a6:0b:a1:4a:29:ec:7b:27:a4:f4:4b:dd:91:
                    c0:11:fd:2c:ba:40:3c:26:51:3a:f1:c7:72:17:07:
                    d1:0e:cd:7d:37:3f:98:c5:ce:64:3d:54:b5:c6:bb:
                    80:40:7b:a5:69:4e:41:c8:17:de:6c:aa:1f:2d:db:
                    d4:9c:74:d6:b7:e9:86:e9:10:68:c7:6e:df:a5:31:
                    b3:80:97:8e:7f:65:0c:7c:da:c6:74:1f:9f:cc:5c:
                    99:2e:58:3c:80:ef:5b:20:06:3b:66:92:8a:fe:48:
                    eb:3c:c9:82:28:83:f1:de:d8:ff:11:30:23:07:d2:
                    80:fd:f9:dc:c7:c0:27:2d:00:9c:4e:7b:fb:60:c7:
                    dc:1b:02:68:df:5c:c6:79:15:8d:64:9b:41:ed:04:
                    8f:fb:7e:c9:95:20:4c:19:13:bc:16:9b:48:7c:29:
                    82:b9:8f:f1:a3:5a:68:6c:af:2c:6d:b8:b1:08:33:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:A2:74:E7:AC:7B:18:79:2F:27:19:3A:62:19:1C:2F:E6:8A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:e0:9a:ca:36:f7:f2:62:e5:bc:c4:44:46:99:69:c7:ac:
         31:19:33:45:01:41:bc:02:25:99:44:f3:13:0d:67:af:66:9d:
         ba:82:02:fd:e8:7b:a0:05:d8:ba:51:c8:7a:1c:43:25:81:86:
         74:fd:55:d7:c2:66:f9:a9:16:f0:5e:f6:3f:b0:97:d5:34:49:
         16:c3:24:e9:d9:3e:89:44:7d:46:74:5a:f0:b1:13:7e:a5:86:
         67:f9:09:d6:4d:cd:64:f7:ed:cd:3f:ea:e0:8d:c0:7d:eb:90:
         c3:47:09:d7:e9:8f:be:e5:fe:4c:bb:c6:42:2a:2c:39:2d:9d:
         e3:3a:78:55:24:84:47:08:c6:1a:16:f5:02:fe:ef:9f:79:a6:
         45:13:47:a3:c4:bc:ab:2f:28:74:07:ad:1a:9f:f7:20:ec:41:
         ee:66:7c:1f:34:d3:cd:c8:06:1f:ce:19:29:93:9d:5b:c0:33:
         3b:9f:4c:83:47:4f:85:46:3a:20:05:9c:67:c1:4c:3e:1a:7e:
         53:84:0f:aa:ec:c5:c7:c4:68:a5:d3:22:60:c2:bd:d3:ca:5b:
         e5:1f:24:50:33:fc:09:e1:ec:f8:02:ab:af:e1:b0:cf:57:bd:
         1c:f1:f0:27:37:c1:92:29:bf:c8:31:6b:e9:87:94:6c:5f:76:
         06:a7:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:51 2026 by rpki-client