Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9089b086-86f1-302f-9f53-701604b16344.roa
File:                     9089b086-86f1-302f-9f53-701604b16344.roa (raw, json)
Hash identifier:          cs13OVUO1QEsAn24ERNFn33IpkPPmLtLRNnCpeix9xM=
Subject key identifier:   CB:69:F8:57:0D:C2:9C:2F:7F:98:DE:E6:C2:45:29:B4:AD:87:74:39
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F82ADAEA01170C52B1C804B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9089b086-86f1-302f-9f53-701604b16344.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     13335
IP address blocks:        104.23.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:ae:a0:11:70:c5:2b:1c:80:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=35b212e1-17e9-42f9-b407-8cfb7db80b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5a:e1:73:72:24:6a:67:1f:4d:55:51:a3:7a:
                    40:91:d7:54:73:ac:7f:a3:ac:b8:fd:12:c6:d8:6e:
                    18:d1:18:9c:ee:a5:09:38:2b:e6:d4:7d:9d:8c:ca:
                    60:82:1c:27:02:7f:32:27:74:93:cc:a3:ce:bf:00:
                    7c:3e:21:11:fc:e5:b1:3f:7e:19:09:e2:b5:a0:60:
                    b6:a3:cf:4e:16:27:2a:a9:6b:8f:34:d8:a4:09:b7:
                    77:39:dd:8b:74:1b:e6:9f:69:5d:d1:2c:dd:1e:ce:
                    79:d8:e4:79:75:bc:de:de:ff:e6:34:e1:90:db:a3:
                    ef:0e:56:27:fe:b3:54:d9:d0:5d:19:5a:7f:04:b8:
                    12:9a:35:09:d8:32:62:16:79:f2:ef:27:3b:03:f5:
                    e1:60:bf:ec:ec:28:3b:ad:22:83:66:94:c7:89:be:
                    95:91:81:08:8a:73:26:3f:69:64:e9:2a:0f:bc:1c:
                    39:e0:d1:07:3d:93:97:81:1d:38:48:80:c2:c9:58:
                    f3:a7:6c:dc:1c:25:89:69:0d:e1:cd:fb:b8:25:8f:
                    83:8f:4b:9a:5b:0f:c0:72:a8:af:df:bf:f7:34:49:
                    31:41:2b:52:0f:d5:f8:ea:19:c8:3f:8f:2d:49:39:
                    f7:c8:bb:3f:68:66:1a:a7:2c:7e:96:1e:57:e5:10:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:F8:57:0D:C2:9C:2F:7F:98:DE:E6:C2:45:29:B4:AD:87:74:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9089b086-86f1-302f-9f53-701604b16344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:55:14:10:9e:51:52:fe:2a:fd:43:91:ee:03:80:eb:7e:
         2e:d0:04:16:4b:9d:3b:54:02:66:c2:32:59:80:23:da:f1:2b:
         bd:7a:e1:8b:54:55:65:d6:de:4b:19:64:de:6d:d2:27:94:bd:
         7b:3b:7c:11:05:34:66:5f:bb:fd:d4:aa:86:2b:06:11:41:4d:
         1f:97:87:45:3b:4c:e6:b8:b8:4a:1f:6c:15:6a:48:dd:82:32:
         b9:83:b7:f1:d4:f0:6a:58:79:52:94:9c:f8:a7:f5:c6:6e:66:
         16:c7:12:82:c7:8d:4a:19:36:09:eb:0b:d8:eb:51:21:d5:c4:
         7a:ae:63:46:7d:3c:3d:66:27:6c:b9:99:56:6e:25:1f:60:e3:
         90:fa:93:34:8c:5a:7b:1b:de:62:37:fa:9e:b8:25:42:f2:75:
         09:45:99:66:1e:9d:c9:2c:3f:71:ac:7b:15:5b:3e:90:22:72:
         90:c6:37:e0:37:93:7f:86:2a:7f:fa:17:68:21:97:e4:78:60:
         c3:26:c6:74:83:87:12:a5:b1:fb:f2:8c:a6:d6:41:2b:73:0a:
         01:13:6e:c2:f4:b9:fd:1e:cd:b3:b7:3d:a5:20:e0:70:50:9e:
         cc:ca:e1:a5:7a:6f:a5:ab:32:ca:49:c1:a0:37:00:bb:7f:05:
         12:b8:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:13:28 2026 by rpki-client