Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa
File:                     b1b9a4af-067f-3d2e-8910-c15ad31de484.roa (raw, json)
Hash identifier:          Z9b9Of4rItz7E1nLnLi/TR6cOFk23ulC5aqgRLufFLw=
Subject key identifier:   7E:F9:EA:AA:F5:E7:11:4D:49:10:A3:53:52:36:CE:A7:10:24:69:6F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFD481557FA110C8C51180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.17.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d4:81:55:7f:a1:10:c8:c5:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=eee695ab-6686-4167-a644-1feae52ebce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:8d:c0:5f:35:0d:07:17:00:2c:d4:e6:c8:
                    93:a0:30:fc:a3:ff:8b:95:07:29:3f:c0:a3:0d:89:
                    cd:3a:c3:c2:b6:1e:68:1e:0e:47:3f:7c:3f:11:09:
                    45:a0:1a:c6:a9:1a:4f:d5:f7:0f:4e:7f:bc:2d:e8:
                    ab:5d:06:f0:9a:a0:85:4b:d5:d9:98:a9:72:ef:12:
                    87:f6:51:e0:1e:72:78:96:db:e7:5a:ca:85:52:b9:
                    fa:8c:49:e8:8b:d5:b6:aa:3d:3e:a2:48:9f:fd:53:
                    a7:51:4e:1c:84:89:9d:de:18:d8:b8:74:13:75:c5:
                    a4:97:db:3b:19:77:91:e7:80:1a:8c:38:cd:9c:c6:
                    d2:67:fc:a3:5c:32:71:ab:a6:12:f6:fe:40:23:1d:
                    d9:59:93:c6:10:ce:6f:89:0b:c7:e9:56:f1:bd:d2:
                    43:b1:dd:56:95:13:28:71:95:81:12:b7:26:6f:e8:
                    9b:de:21:b0:e0:a4:32:50:37:28:cb:be:2b:a0:56:
                    b7:4f:30:31:99:0a:2f:1d:0f:a0:1f:c2:6e:45:27:
                    90:98:9e:12:29:e6:ef:ff:e9:dc:ae:f8:50:de:85:
                    b7:47:c9:16:4f:89:ce:4f:9f:36:cb:73:3e:08:01:
                    3c:3f:ea:e4:c0:cd:ba:c2:db:34:6d:60:6f:99:97:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:EA:AA:F5:E7:11:4D:49:10:A3:53:52:36:CE:A7:10:24:69:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:fd:f3:bb:f0:f1:7f:1f:fe:5e:19:80:ce:d3:83:a3:b1:
         6b:17:5f:b4:b3:b7:dd:c0:15:3e:c3:1d:76:51:e9:b7:b8:39:
         9f:71:ec:db:64:56:ef:c8:a1:9c:fa:4a:fb:fc:a0:4f:7c:61:
         d1:11:5c:66:aa:4d:20:67:54:29:dd:af:eb:71:31:8a:92:93:
         ab:1a:fc:94:1c:97:ce:16:d7:73:10:ab:3b:6e:ca:47:d0:0c:
         ca:62:79:18:87:79:77:7a:2d:1d:29:3c:50:9f:49:ce:02:ce:
         54:29:02:9f:11:ca:b8:e7:af:24:45:6d:eb:b8:e6:7d:ea:c3:
         e9:e9:ea:2f:08:44:d1:14:2a:01:a1:9a:99:52:e0:0f:60:13:
         d3:05:60:f0:22:8d:87:24:88:82:2d:22:6f:9d:e4:0d:42:0b:
         1f:62:82:c2:25:22:63:3f:ba:80:9a:9b:8a:68:d1:db:58:58:
         ef:e9:52:4c:32:ef:e5:bd:87:8e:db:e6:e3:09:f2:a9:af:9e:
         ba:49:6f:99:d0:97:e4:04:10:bf:74:a3:af:8c:36:c0:eb:d8:
         26:44:00:8f:82:c1:a4:e6:b2:5e:74:19:98:8e:2b:d1:45:5f:
         8b:3c:04:26:b5:34:f8:77:f4:6f:af:63:fb:ad:87:ef:35:39:
         d0:7e:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:45 2026 by rpki-client