Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa
File:                     bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa (raw, json)
Hash identifier:          CSdvXSDzRgCqjM+OWQuwtZ4djONCXiBBxuS7GGIFpjk=
Subject key identifier:   73:0D:2E:E1:70:C9:83:77:1C:E3:78:5F:5A:07:81:B3:27:01:E3:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFD421ED39AF56E06EDF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.16.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d4:21:ed:39:af:56:e0:6e:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=801efd62-114e-4af2-9cee-0d5167316450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:32:32:d3:74:ee:88:82:05:cd:4e:47:c5:
                    99:c9:58:d4:bd:57:1d:07:76:b4:fb:fa:b5:ab:1b:
                    c0:ed:e1:dd:07:d4:a5:61:77:4d:75:b0:1f:7b:9f:
                    a0:e0:39:37:94:cd:a2:a3:1d:bb:b5:11:a8:c3:cd:
                    d8:4d:56:db:34:f0:11:39:40:21:09:86:9c:32:27:
                    10:ca:b5:17:d6:3d:e3:84:05:60:98:aa:6a:79:27:
                    39:42:ee:04:fb:1e:9f:13:a7:46:ba:c1:ca:76:2f:
                    5d:4f:df:32:61:4a:18:1b:29:4e:b3:fa:a0:95:3a:
                    62:72:2f:12:4a:08:1a:b7:17:cd:a9:9c:a7:12:09:
                    ab:41:da:df:51:e6:b9:cb:41:93:2f:bd:15:ce:8d:
                    5a:92:a6:92:36:ee:40:55:08:cd:41:49:3d:e6:a7:
                    76:8c:5e:bd:fa:2e:4a:48:69:db:99:3f:f9:24:f6:
                    d3:1e:76:18:36:a0:4c:8c:ee:13:53:41:7d:47:4d:
                    74:b0:24:af:6d:7b:4f:c5:23:cd:70:c2:f8:ca:8a:
                    71:cf:5d:d4:bb:db:b0:e7:f1:81:f1:59:29:86:b8:
                    68:31:d5:ff:9f:96:39:79:c0:0a:a9:5d:91:03:2b:
                    b4:72:b1:62:e7:8d:d4:52:4b:c3:44:96:4d:d8:18:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0D:2E:E1:70:C9:83:77:1C:E3:78:5F:5A:07:81:B3:27:01:E3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfde0d99-aadf-3231-b6cf-df9c5c6eddfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:a3:bb:13:0b:e1:e1:c9:51:1a:94:36:a6:90:dc:3a:6b:
         c8:b1:57:51:f4:ce:08:c2:4a:84:70:ff:04:97:7b:3d:f3:d2:
         45:60:28:08:62:98:e8:78:f7:0f:56:3d:3c:02:84:fd:e8:64:
         7c:44:4c:9a:08:00:23:ab:05:41:b5:6a:c2:75:00:82:00:30:
         33:54:10:c6:b3:31:b1:a2:47:b1:0c:a5:63:d0:5d:9d:b9:a3:
         dd:5c:0f:43:9b:bd:a5:39:c8:e5:0b:04:96:5e:98:28:09:b6:
         3f:40:dc:d3:fc:67:18:94:5a:2c:48:99:92:6d:b4:10:a0:81:
         5d:64:cf:a9:b8:e8:14:51:35:cb:88:3b:49:05:0c:70:3e:c0:
         9e:2c:9d:35:3e:d4:7c:8e:6a:89:05:77:63:ce:04:34:45:a8:
         78:50:ad:13:a9:12:f6:7f:17:3d:02:4d:bc:86:17:67:42:a2:
         6f:56:2a:1c:7e:d9:05:18:19:6b:57:fa:4f:ee:a9:c0:ac:79:
         a0:9f:2b:d9:a9:f2:a5:4b:9c:35:a4:8b:d9:98:9f:12:2b:7c:
         bc:ea:67:94:3f:8d:d9:92:b4:08:2a:33:de:23:0b:ce:39:cf:
         37:19:dd:82:8f:a8:fb:04:6a:27:28:a5:53:68:04:4d:d0:99:
         3c:b1:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:34:46 2026 by rpki-client