Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa
File:                     24a24568-e066-3278-8563-1461ecdbd47a.roa (raw, json)
Hash identifier:          f/qW70Sst7ZjaeNs72jXnYJvXVbUrPGenn2jtB7GXPs=
Subject key identifier:   96:81:0D:F7:DC:50:CF:36:A6:3E:EF:AC:18:7F:6C:8E:CA:EF:4E:13
Certificate issuer:       /CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
Certificate serial:       010D0C9F4328584E296F035EB723919CCC91D900
Authority key identifier: 96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     7954
IP address blocks:        104.254.52.0/22 maxlen: 22
                          2620:8d:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:03:5e:b7:23:91:9c:cc:91:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=f38174a7-28b6-4f8d-a117-d32a7a1809ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:da:32:d9:a6:ae:c6:a6:f2:55:40:8a:8f:
                    55:c8:f4:a0:48:63:59:5a:26:79:fe:b3:a2:c0:2c:
                    c9:68:b9:df:e4:74:81:fb:01:92:01:7d:38:b2:04:
                    bc:69:ef:88:e4:6e:c7:7c:79:cd:9c:70:d7:8c:bd:
                    90:d5:46:c4:1c:bc:c0:10:58:8d:76:ed:e5:fe:96:
                    d7:d5:ec:ee:fa:1a:a6:52:34:3a:f4:99:78:f7:1a:
                    05:eb:3c:75:40:6f:e4:1d:eb:9c:19:48:d1:52:28:
                    82:7d:d9:ff:12:ec:6b:63:98:f5:65:a7:7d:0b:3a:
                    2b:71:9b:7c:39:f0:2e:82:14:7e:f3:01:cb:59:40:
                    10:19:e9:d0:b8:9d:04:54:a0:ed:35:d3:66:f9:a4:
                    47:af:cd:ea:f4:79:7a:da:ed:35:4f:fe:58:9b:03:
                    db:3b:cf:1c:8e:6f:1e:49:83:af:a6:53:f3:86:fc:
                    01:80:aa:89:66:f0:e0:2c:bb:ee:01:72:2b:32:8d:
                    92:61:2a:77:ed:28:72:d6:61:d5:59:64:f6:1b:c4:
                    b2:1f:91:38:34:3c:2d:4f:69:7b:0c:0d:97:ee:f9:
                    0f:98:49:8c:ff:0b:75:a1:c3:53:11:08:97:93:ea:
                    73:c6:d1:b4:28:80:7c:15:07:d7:67:1d:5c:44:a4:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:0D:F7:DC:50:CF:36:A6:3E:EF:AC:18:7F:6C:8E:CA:EF:4E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.crl

            X509v3 Authority Key Identifier:
                keyid:96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.52.0/22
                IPv6:
                  2620:8d:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ff:01:2c:a7:7a:35:5c:c1:8d:23:e8:cc:1a:45:42:19:9a:
         15:f4:ac:2b:91:e6:94:4b:fe:57:29:74:df:f8:4d:6b:81:95:
         9c:88:42:62:7e:9a:16:2c:32:90:eb:57:26:b4:c3:e1:3d:74:
         1f:10:15:f1:e7:6d:38:8e:74:2a:f0:35:e7:22:30:e8:22:81:
         9e:07:ee:ae:d4:80:3f:00:ea:88:a3:4b:3c:97:0e:c5:dc:f1:
         a7:fb:1a:ed:0b:ec:98:d3:65:5c:ed:af:fa:29:04:c1:07:b0:
         7c:07:80:72:7c:96:3e:82:52:39:7e:a0:f8:41:da:c4:00:d9:
         bc:86:09:6a:04:71:cc:68:aa:fa:10:22:c0:c7:b1:cf:2a:94:
         56:24:01:5f:28:23:b4:04:c7:11:38:d8:20:2d:06:4f:92:6d:
         2a:91:ca:24:17:5c:ab:c0:b5:fc:05:55:4a:f2:b5:55:6d:9b:
         fe:e8:05:69:f2:42:79:cb:db:2c:04:35:a7:5d:f6:9f:96:11:
         49:27:3c:7b:6e:25:b4:be:bb:1a:89:2f:af:75:d8:77:39:1c:
         b9:47:01:22:66:e4:8f:ae:c6:a9:58:21:d3:99:50:1d:82:df:
         d4:89:7c:9d:d6:6b:44:8f:97:3d:36:af:62:16:3d:96:d5:a5:
         75:94:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:12 2026 by rpki-client