Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa
File:                     ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa (raw, json)
Hash identifier:          XerapRgddR0lVS90VB2L1XKNx0/wwk7vXfPAsc9cmaI=
Subject key identifier:   54:0A:4B:F9:0B:AD:44:F4:F0:CF:AA:5B:47:64:ED:13:A1:A7:38:FE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CEBC228DD2872B7EC0CD91B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     13335
IP address blocks:        104.23.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:28:dd:28:72:b7:ec:0c:d9:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=bb9e3082-e1c4-42e4-b3f6-4538c2b7a2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:8b:09:c8:af:98:17:45:ce:21:4c:0f:95:
                    50:70:48:a8:fe:49:b7:a3:11:9f:2e:a4:ca:18:4d:
                    b9:0d:f5:8d:2a:61:bd:64:10:25:ee:2e:c7:97:99:
                    0f:e4:d6:43:46:e0:76:fa:e8:1c:9c:98:ea:f5:0b:
                    07:83:97:80:31:36:78:1e:ab:2b:92:f9:39:41:37:
                    96:e0:e9:bb:cf:c2:92:61:25:30:75:ba:af:22:bd:
                    2b:d8:33:2a:db:7c:2f:7b:57:cd:b1:49:6f:16:79:
                    b9:98:d6:93:fa:7b:70:23:10:1a:d3:89:a0:3a:ae:
                    63:b5:86:66:32:1d:cf:c4:96:bf:80:92:84:37:a7:
                    91:1e:4e:6f:ee:7d:cb:02:cd:b5:48:d2:6c:bd:4f:
                    d1:c1:f6:73:98:a6:c1:ad:0b:08:27:37:44:75:c0:
                    71:e2:72:fd:6e:97:c4:fd:c0:da:77:a5:3f:e4:9e:
                    27:b1:e5:9d:c9:7d:ba:25:ff:05:52:45:fb:db:c8:
                    b3:d3:a5:77:16:bc:e4:07:52:57:50:59:bc:2c:ed:
                    02:e7:51:22:8b:91:c5:05:24:e1:d6:7d:fe:11:37:
                    0e:d6:fb:f2:da:78:8e:7e:4b:c7:93:22:e7:69:76:
                    3f:85:1a:60:de:4a:05:7a:61:d3:91:a0:bc:b5:a1:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:4B:F9:0B:AD:44:F4:F0:CF:AA:5B:47:64:ED:13:A1:A7:38:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea27c6c3-0f09-3f58-a201-de77cf8a5f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:45:9c:d0:e8:e5:2e:fb:07:0e:0d:ae:31:a4:dc:83:1d:73:
         68:5b:f2:79:95:80:b6:4f:f6:05:13:f6:30:44:c1:59:bf:e5:
         1b:05:57:13:41:81:2f:ad:96:aa:7c:00:64:5b:d3:8f:0d:e6:
         93:29:f4:89:3b:dc:a5:5d:54:ad:4e:61:61:4e:a9:f8:f1:a3:
         2c:46:a9:6c:1c:d0:62:8d:cd:e6:b7:c0:84:03:b4:fc:7e:7d:
         46:d6:6d:d9:22:db:d7:c1:a6:c0:8c:f3:81:e7:17:87:5e:38:
         0f:fa:e3:8d:16:c5:f8:ce:08:3c:86:ba:48:2d:82:22:2b:08:
         0a:8f:17:4c:cd:23:28:be:43:73:91:d0:9f:82:be:21:36:4e:
         76:e1:10:dd:82:89:a3:f4:d5:ae:8f:34:d1:d0:c4:44:55:81:
         64:f0:c0:86:77:c2:ac:44:81:9b:46:50:ef:b7:88:e0:ad:79:
         14:fa:9f:23:b3:be:28:0d:7b:7e:00:5a:c0:09:06:30:e8:91:
         bd:7e:d7:c4:b7:94:20:4c:b2:cf:a4:27:50:74:7d:7c:35:3d:
         13:0a:25:fa:6a:11:97:9a:2c:4c:72:9a:77:cc:03:75:d3:0e:
         28:5b:48:72:f3:63:b5:a2:2f:15:94:b7:e0:9f:92:61:67:82:
         e4:9b:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:29 2026 by rpki-client