Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e678b447-d497-31f4-acde-296be9d2bd9a.roa
File:                     e678b447-d497-31f4-acde-296be9d2bd9a.roa (raw, json)
Hash identifier:          jtWecP8jtNk77BS7jlLRTk0bpbpHfdSLGm0vTRJYqsY=
Subject key identifier:   D7:65:D0:8E:25:E3:67:8A:9C:8B:FF:AE:E4:D5:68:64:36:09:33:A0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E2175A63CF1F2D3A207F3BDD0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e678b447-d497-31f4-acde-296be9d2bd9a.roa
Signing time:             Thu 11 Jun 2026 00:27:14 +0000
ROA not before:           Thu 11 Jun 2026 00:27:14 +0000
ROA not after:            Wed 09 Sep 2026 00:27:14 +0000
asID:                     13335
IP address blocks:        104.22.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:75:a6:3c:f1:f2:d3:a2:07:f3:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 11 00:27:14 2026 GMT
            Not After : Sep  9 00:27:14 2026 GMT
        Subject: CN=223b32a5-6acd-4cc5-9dd1-4a0ca6d9f55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:77:87:6f:7c:90:73:5f:16:c0:b1:e1:b4:
                    bf:dd:71:c8:53:84:ef:1a:ca:3a:a6:f2:80:cd:b8:
                    58:54:e9:ae:a2:a3:9f:df:77:d2:c8:e9:74:53:e0:
                    4b:47:0a:0e:5a:8c:b2:ff:d6:00:32:9f:73:52:15:
                    66:f2:a0:6f:55:b3:94:57:b2:ba:52:de:28:69:a5:
                    a9:6b:09:56:c4:19:76:e4:30:12:94:38:f1:ea:7e:
                    4e:4a:4f:07:ae:8a:aa:7c:01:8b:54:c2:b1:eb:f9:
                    42:22:a2:42:8d:f9:5e:1b:74:45:77:ec:dc:0f:68:
                    b3:5e:6f:e8:3d:ae:e0:6e:44:62:1f:52:f5:4c:c4:
                    94:c4:70:76:76:5d:58:51:a0:ff:d3:9f:0d:69:1d:
                    11:e3:74:4c:4a:6f:f7:a2:1e:0e:70:73:6b:48:80:
                    0a:b2:fe:6a:90:dc:98:6f:57:bc:70:7b:17:7e:79:
                    03:55:4a:11:ad:b6:8f:3f:68:2c:f0:bf:ad:1e:e2:
                    4f:05:3e:a1:02:3e:25:57:98:7f:57:ca:70:71:d8:
                    1f:fc:f8:22:5f:05:51:04:39:1b:16:7e:05:22:8d:
                    5f:ac:16:e4:a7:4e:c1:cc:56:6c:72:e1:1e:94:36:
                    97:b4:58:0e:78:03:ed:27:dc:68:59:e4:60:f3:e9:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:D0:8E:25:E3:67:8A:9C:8B:FF:AE:E4:D5:68:64:36:09:33:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e678b447-d497-31f4-acde-296be9d2bd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:20:f3:e0:30:8e:17:74:e0:61:94:a5:58:0b:9a:65:4b:
         d6:1b:d7:a7:04:78:b1:9e:ef:34:14:e3:53:b2:a0:30:ca:54:
         7c:a9:7d:eb:f1:f1:16:8f:33:db:3e:3f:e3:20:5f:20:b7:79:
         0d:ed:53:80:54:28:07:7b:18:73:89:40:9a:93:76:df:b3:29:
         20:d2:d7:55:66:f9:5b:e6:96:ee:ff:14:1d:6d:a5:d1:b2:07:
         b3:5f:70:27:31:80:5d:c4:8d:98:40:91:fc:ed:2a:6d:e5:b2:
         1e:11:ca:84:ac:a9:3b:a1:30:29:f0:30:4b:cb:8a:95:76:f8:
         22:d7:84:72:2a:a5:53:2e:64:c6:76:0e:07:c7:a4:79:12:f6:
         41:e4:88:a2:a5:96:00:6a:a1:b7:7a:15:4c:90:48:62:5a:73:
         fc:b1:03:69:7b:50:ba:fc:a9:05:20:33:17:83:38:0d:6e:41:
         72:ec:6f:34:aa:8e:92:04:4e:ea:42:39:c1:25:32:fb:02:de:
         e6:3f:3b:9e:54:ba:86:8d:8a:9e:a5:67:90:59:72:61:22:b6:
         f2:60:ee:d6:7e:36:d3:fe:d1:44:c9:7d:08:ff:88:e6:2b:2d:
         1a:5a:3d:04:b7:ca:a9:f5:af:d7:f4:59:7d:57:c0:b6:81:82:
         ea:f1:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:11 2026 by rpki-client