Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa
File:                     9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa (raw, json)
Hash identifier:          rFtmyHWQ1enJ5ES6eB/dwYm+LTMfkCgJMAEilktovcs=
Subject key identifier:   F5:AB:67:7C:D8:EB:11:B8:9C:DF:48:38:68:73:A0:A2:02:36:C4:D6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CEA5D0442CCA17352B6CB3F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        104.23.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:04:42:cc:a1:73:52:b6:cb:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=8baf8c3e-7034-4f4d-8a90-82196e967794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:a0:4e:fc:93:d7:b2:f4:8a:77:b9:8e:0f:
                    62:88:f4:28:91:bc:ae:07:ba:0b:1c:fe:cc:0c:ea:
                    fe:0b:de:d4:32:c8:a7:08:cf:c8:1b:ed:d9:5d:fe:
                    07:ba:f0:d0:79:da:b3:3f:39:1e:fe:2c:f4:67:80:
                    be:c2:c8:11:83:ae:8e:6a:59:fe:93:69:16:a7:7d:
                    ef:ce:87:df:02:08:67:48:92:28:0e:3c:b3:94:ec:
                    d5:78:54:61:e1:a3:56:04:8b:ab:ae:2b:e8:04:bb:
                    d2:5e:1c:b9:3a:50:70:98:e6:ff:e2:02:2b:c4:69:
                    be:cf:21:b9:c3:0d:85:d3:d6:52:05:0b:1c:4a:1c:
                    d4:f4:19:3c:f0:18:fa:92:08:86:b6:a6:2e:2a:85:
                    bb:36:62:a5:c0:7a:39:b4:7a:6c:aa:a9:12:7b:54:
                    e4:08:3b:7e:2b:38:56:30:de:c9:3f:2a:cb:a1:ac:
                    36:2d:93:c7:a1:28:ba:50:11:a3:53:f0:30:8f:01:
                    3a:71:4a:8a:9a:05:f2:78:c1:61:af:34:1b:fb:92:
                    37:40:ac:c4:80:ee:18:cb:32:60:5a:20:f5:30:5f:
                    9a:ea:e1:72:5f:f5:f6:24:f0:e4:6c:91:9a:19:ce:
                    9f:54:fd:4e:b9:f6:40:40:bb:db:ec:66:25:6f:84:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:67:7C:D8:EB:11:B8:9C:DF:48:38:68:73:A0:A2:02:36:C4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:8f:e9:dd:f5:a6:80:58:2a:65:9e:4b:b8:26:cb:2f:87:
         94:e9:e3:ec:68:af:0d:d9:93:a8:ef:a1:2e:71:b8:55:ec:74:
         55:44:09:6d:42:26:1c:ae:1c:aa:31:5f:f2:ae:d1:22:15:11:
         f1:a7:22:8e:48:ad:04:4f:c3:02:b2:8f:a0:b2:15:fa:37:4c:
         dc:d9:02:53:5f:c1:07:c4:95:ed:82:1e:67:36:4e:3b:f3:1e:
         e7:c8:ed:19:9c:04:1f:d7:5f:0f:33:e5:9d:b2:67:da:3c:04:
         72:c6:a1:e3:f8:43:b4:c8:ea:d0:1e:6d:d8:df:cb:9b:c0:49:
         e9:87:88:9c:7a:34:c0:e7:eb:b6:76:6b:6f:70:47:e3:78:c9:
         c8:dd:d5:cd:ad:5c:95:55:81:a8:8c:ff:ff:5d:07:65:3c:1c:
         30:84:7d:aa:f4:ef:e0:c3:90:9b:c2:cd:1f:e3:c0:66:84:64:
         36:3b:62:ce:b1:1c:d2:f6:63:a0:66:2d:9b:95:19:ea:58:6b:
         92:72:6a:a2:79:b1:72:46:c8:37:26:12:97:c6:be:f9:68:10:
         05:a1:5b:61:e7:48:30:71:7d:73:b7:46:6b:20:c1:99:d4:40:
         69:d7:8d:e3:59:87:23:a9:0e:7d:ad:8a:07:14:dd:df:93:ea:
         67:8a:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:28 2026 by rpki-client