Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa
File:                     035b5f20-dc11-3ab2-aea9-25fce532f437.roa (raw, json)
Hash identifier:          RT+aRhUAdwnjqeonxWLfA2QGaiOvX4H75mWpDxdQI2k=
Subject key identifier:   82:4C:73:ED:AD:86:FD:62:9C:55:F1:6D:32:83:84:8D:F5:21:43:5B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D00B262A778710AE3E4FE3E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        104.22.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:62:a7:78:71:0a:e3:e4:fe:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=c1687a81-d3a4-4064-85c9-f81bda8d1513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:d6:7e:d4:bc:57:88:7a:6c:43:49:90:97:
                    e3:a9:f8:38:1c:5f:d9:be:c3:84:7f:eb:ff:3f:73:
                    e5:4b:5d:73:a2:fa:6b:c7:69:b7:22:d8:57:72:b3:
                    9a:41:7c:9b:93:26:c9:43:ee:69:13:e8:b5:6b:ea:
                    2a:fd:bf:d3:9a:09:56:04:c9:4b:41:b5:58:d6:35:
                    66:a1:f3:f9:ae:11:4d:72:65:fe:11:83:db:ee:f4:
                    a3:a5:f9:d6:d6:90:ed:e6:cb:4d:c0:d5:da:b0:ec:
                    a7:89:94:ff:79:fa:37:5f:e5:af:b4:43:55:96:0a:
                    92:05:1a:05:6c:87:c3:f3:52:6b:df:68:d7:e5:9c:
                    1d:ae:87:7c:b3:e8:69:34:eb:0f:06:b7:13:2a:af:
                    27:2b:15:f3:66:ab:fb:59:b9:7b:bb:d3:13:31:1d:
                    45:73:94:fe:da:2f:91:b8:a1:97:49:83:f4:fc:52:
                    e9:f4:1a:07:c9:1c:b7:ad:da:9c:df:98:95:95:aa:
                    c8:77:19:b7:ea:73:94:3d:7b:77:5c:e4:df:9e:c0:
                    46:df:69:1b:c2:fa:e8:8e:49:cf:aa:b0:3d:11:b6:
                    95:6b:0e:6a:b0:53:1e:fb:45:c0:3a:4c:2d:77:1a:
                    c1:3f:b5:c8:1e:cc:60:41:69:b8:5c:d4:4e:72:28:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4C:73:ED:AD:86:FD:62:9C:55:F1:6D:32:83:84:8D:F5:21:43:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/035b5f20-dc11-3ab2-aea9-25fce532f437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:1e:7e:4b:11:21:14:05:cd:88:2a:7f:10:2e:1a:f9:03:
         34:93:96:8a:7f:ec:3b:a1:3e:50:a3:9c:e0:66:ca:54:88:63:
         d5:6d:a0:e9:b8:00:96:b1:26:bb:d9:df:e8:a4:24:2a:5b:d5:
         b1:02:b4:09:6b:51:d2:b2:13:72:2a:82:2e:a9:49:03:07:1a:
         00:30:bc:19:42:73:bb:27:f1:42:68:e6:e6:51:f1:e6:16:bc:
         75:eb:38:02:36:08:46:36:8e:6d:c8:61:f9:17:7c:36:7e:96:
         09:36:e0:81:89:19:f5:23:83:a1:07:c6:db:9f:ef:e9:22:bd:
         d9:4f:ca:e3:e6:dc:0b:10:b3:e7:a0:18:94:04:22:78:c9:ec:
         af:73:38:92:9e:38:d7:2c:8b:27:28:0a:90:08:e4:77:14:ed:
         36:01:c7:5e:ca:84:34:a0:9f:98:00:fb:1e:f9:20:8d:49:03:
         5f:82:8b:0a:10:a0:56:9e:87:54:80:1e:e1:b5:95:56:13:e7:
         38:0d:79:e7:9e:28:68:d1:27:ec:1a:b7:f6:37:f6:66:b0:98:
         e2:b7:7f:9d:6c:ba:5f:2f:b7:30:ae:6e:1e:37:67:10:e6:31:
         f1:9a:cc:0f:9c:23:6f:d9:f7:b6:c5:23:2a:d4:73:cb:da:77:
         9e:c1:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:50 2026 by rpki-client