Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa
File:                     31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa (raw, json)
Hash identifier:          p9ACRJ1naRAuFHyUVSv4Ms0VE+y0HEiu75wWWxfxYJc=
Subject key identifier:   8A:9B:A8:78:4A:0A:3D:73:AB:0C:72:F9:B6:65:DE:44:93:B9:B9:27
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA7873537E4BD9BC8595D99C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        104.23.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:35:37:e4:bd:9b:c8:59:5d:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=14b64d2d-8d39-4169-9847-8c78866f1a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:da:17:a8:9a:c7:3c:4e:cd:0f:c6:ca:96:
                    fa:22:3b:ef:ad:b8:86:c3:29:18:a6:6e:19:dc:87:
                    88:87:51:9e:59:28:fd:a0:50:06:16:ea:c1:09:70:
                    96:fd:92:8e:c6:c5:12:53:af:8a:90:e9:ba:15:82:
                    32:7e:e4:c0:9e:6c:2a:3f:d6:d3:c7:e4:86:8a:59:
                    99:d5:e3:79:da:c4:93:fd:1b:49:11:45:6f:eb:51:
                    f5:eb:b4:6e:5a:2e:b9:69:05:86:a0:fa:88:3a:14:
                    b0:e0:87:fc:ce:14:23:6d:8e:44:fe:10:41:7a:74:
                    a2:ca:10:01:7b:a8:a0:86:b0:1d:eb:c9:1f:f0:7f:
                    1f:20:05:ca:0c:ed:43:7c:fe:41:d8:59:8b:a8:f6:
                    8b:05:e5:e7:c5:bf:9e:16:c2:f3:8c:5e:ac:21:eb:
                    1a:af:86:bb:93:e2:76:4c:62:98:69:40:3e:27:cf:
                    cf:16:47:47:34:ba:de:74:c3:32:8d:e3:c1:3d:dd:
                    0b:25:f1:77:eb:ff:3f:e4:34:72:b6:aa:2e:eb:fc:
                    78:1d:84:1e:8a:3e:54:79:01:25:0c:d6:14:48:d0:
                    20:56:f2:c3:d7:bc:4d:63:74:3f:1f:a4:10:0f:5e:
                    f6:7c:e9:c1:dc:cc:a7:c8:9e:dc:30:ec:be:e9:e0:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:A8:78:4A:0A:3D:73:AB:0C:72:F9:B6:65:DE:44:93:B9:B9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:f7:3c:7d:8d:b5:5f:0b:aa:c5:3e:44:1a:49:21:bb:c5:
         ed:48:cb:5d:00:52:b9:f7:e0:de:f2:6d:c8:55:b5:d6:22:91:
         c2:73:8c:63:e4:0d:5e:b4:ea:d2:79:99:9e:42:0a:f6:d3:3e:
         92:57:4c:23:d1:44:31:0e:bd:45:e1:b1:fe:fe:21:1c:e2:ca:
         e6:d9:2a:6e:a3:e4:b6:ab:bb:8d:8d:2c:75:2c:73:7d:3d:a0:
         23:00:26:84:1d:70:e7:d6:51:70:cb:8d:2f:10:4e:79:a1:32:
         6e:05:a7:1b:e9:dc:8a:f2:3f:7c:8d:16:b9:46:45:d6:71:38:
         78:89:3c:68:c9:e7:f5:ac:08:df:2e:c3:04:92:54:dd:b2:12:
         f7:44:b5:70:c9:2d:1a:a2:1e:b1:d0:8e:50:75:b1:3c:ed:61:
         ca:5b:60:61:88:a9:b5:a0:8a:4c:c6:74:6b:6f:35:a8:2f:e6:
         c7:5f:99:88:00:c6:62:ab:91:68:ab:30:01:3c:70:9a:68:0b:
         18:b2:80:43:f0:98:70:ca:7b:9e:4f:a8:76:8d:8a:94:aa:fb:
         3e:be:96:17:5a:da:b7:e1:ce:fe:7e:59:33:13:f2:2e:e9:54:
         63:c4:d7:eb:a4:f9:ae:01:55:12:6b:a2:df:80:c1:11:69:0d:
         82:73:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:40 2026 by rpki-client