Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
File:                     814253a9-9aad-32ad-b99c-4b4dc604402e.roa (raw, json)
Hash identifier:          nd/b48K9tkPSry/f2d6Tgvh5kkzXE2ra/Im/x95/XNA=
Subject key identifier:   F3:16:53:9D:71:0E:7A:5F:45:4F:D7:8C:39:A4:6E:CD:D0:54:B8:6C
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584CD4076D52EDFA276A37A194F0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     151797
IP address blocks:        104.251.224.0/20 maxlen: 24
                          172.81.102.0/23 maxlen: 24
                          172.81.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:6d:52:ed:fa:27:6a:37:a1:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=e8f2d208-f40b-437b-a62f-eb983512af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:b5:6a:e3:94:8d:7f:dc:27:e3:af:fb:37:
                    8f:0c:7d:e8:dc:d6:29:b8:20:e4:5d:46:c1:da:bf:
                    ff:2a:14:a8:ad:09:b8:06:04:fe:56:4d:b4:70:e5:
                    a1:2f:53:78:8e:da:4f:63:4c:d7:98:5d:0f:b1:dc:
                    22:f8:2a:b9:c8:36:1b:de:96:ad:de:1a:a3:57:95:
                    79:e4:43:d1:be:c2:d5:df:52:20:05:8c:a8:5e:56:
                    04:e6:4c:be:67:18:2e:53:56:ed:f8:d9:e3:61:aa:
                    5a:c4:87:c4:86:30:02:ca:5e:d6:43:fb:cc:0b:8c:
                    ba:94:9b:3c:a1:13:dd:e7:6d:e0:26:f4:46:37:38:
                    5a:df:d6:a4:5c:8e:d6:64:9e:98:28:42:87:e2:ac:
                    3a:1a:97:69:c6:78:2a:52:2b:60:39:18:33:ad:33:
                    11:a7:6e:c6:2e:50:7a:20:66:3e:f7:2c:a8:23:69:
                    b1:b4:f0:05:74:5d:fa:f3:30:cc:bc:d9:52:39:4c:
                    81:12:ac:34:6a:a3:86:49:36:60:db:d6:18:eb:01:
                    5b:fc:71:40:39:24:af:31:f8:e3:f2:04:46:fa:0f:
                    d3:8a:0f:36:9c:f1:7f:db:f3:90:8d:db:e9:ba:eb:
                    ab:dd:8f:27:be:6f:d6:db:f1:30:ac:16:10:2c:42:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:53:9D:71:0E:7A:5F:45:4F:D7:8C:39:A4:6E:CD:D0:54:B8:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.224.0/20
                  172.81.102.0-172.81.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:de:67:1f:59:30:cf:e1:69:02:f9:af:68:51:d7:ca:2b:
         25:54:76:2f:59:91:73:6f:1c:b5:d0:54:f4:1e:a1:84:c3:12:
         a9:a0:5a:ea:06:3d:09:a7:18:7a:ff:0d:6b:c8:aa:59:ce:e4:
         dc:9c:93:d4:7f:c6:b4:9c:e6:7c:b4:a9:f9:e5:9f:ce:bc:20:
         a2:5b:96:0a:45:69:99:c5:f3:43:6b:79:05:4c:81:71:7b:17:
         27:37:f1:13:92:63:ec:19:a5:bc:95:f6:a3:2c:b6:2e:20:10:
         a2:27:40:53:8f:82:a2:52:4f:02:21:74:f4:a0:f2:08:3c:08:
         51:85:36:6b:f4:4f:b1:75:e8:a9:c7:5c:40:14:c3:f1:c6:30:
         44:46:b4:8a:9b:1a:90:c6:99:83:ba:0c:01:23:8b:db:1a:9f:
         78:ba:39:62:66:c3:f4:76:a5:ec:e8:9a:95:85:2f:ed:f3:4c:
         19:f3:f3:0e:eb:6c:f6:83:6b:24:ce:09:b2:8d:10:07:54:a0:
         0e:ab:0a:18:1e:d5:6d:41:19:f6:ec:1e:ea:6b:db:7d:66:ee:
         d3:31:cb:25:a3:0d:a7:39:b1:ef:fd:13:b5:c1:a7:66:41:8d:
         0a:34:55:65:21:47:98:5d:04:b4:17:e7:1c:60:be:75:26:f8:
         35:b0:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:24 2026 by rpki-client