Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa
File:                     a7def5dc-826c-3418-acab-b934b73d5685.roa (raw, json)
Hash identifier:          cIeKsuL59tS6yfPhWXKiyKKYNveTUaQQN28efG4W/Sw=
Subject key identifier:   56:B9:C4:CB:C4:EF:BD:3C:68:5C:D9:F5:8A:6E:4A:6C:A5:3F:3D:C4
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584CD4074E6C0D799C2CFD63FC80
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     401585
IP address blocks:        104.143.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:4e:6c:0d:79:9c:2c:fd:63:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=a892fb7e-9e55-4886-9843-ddabce306b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:68:3c:48:af:1c:65:76:c9:46:eb:21:58:
                    86:f6:fd:bb:fa:7e:0f:a3:a6:a6:b0:0e:85:ed:1b:
                    fb:53:bb:d3:92:3c:6f:12:ae:78:be:c9:94:26:83:
                    77:88:fd:bc:b2:56:ce:09:db:1c:a2:50:67:55:f9:
                    c3:ab:d3:0b:b1:8c:00:cf:d0:ce:50:d6:a4:73:b5:
                    7a:09:c6:1d:f3:1a:5c:31:7c:8b:2a:4f:f9:57:d0:
                    02:17:ea:d5:76:27:1a:15:9a:57:55:7b:bb:74:32:
                    28:f7:3c:e8:60:c2:f5:6f:af:66:f7:d1:83:80:5e:
                    56:fc:77:ca:27:94:ef:23:81:35:a6:da:21:f2:52:
                    d4:2c:a7:0a:f8:75:86:e2:87:f7:57:d9:ad:8f:a2:
                    94:6c:cc:cc:c8:0d:0f:20:c8:f5:33:b2:8f:83:bd:
                    41:7d:c3:5d:93:e1:63:20:3d:90:e3:a8:1f:65:d7:
                    39:96:fc:d4:3c:2e:15:54:83:98:88:8d:72:f8:8b:
                    3f:fb:d4:a6:20:21:f7:e2:b0:56:df:cf:da:95:9d:
                    be:10:3e:f3:8e:c0:03:99:3f:11:5f:34:c3:9c:22:
                    c5:b0:05:3d:3f:39:48:16:6a:b5:b7:3b:13:78:c1:
                    2b:37:d0:7c:ee:bf:ed:4a:a3:f8:b7:5a:12:9a:25:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:C4:CB:C4:EF:BD:3C:68:5C:D9:F5:8A:6E:4A:6C:A5:3F:3D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a7def5dc-826c-3418-acab-b934b73d5685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:a8:d6:31:a6:77:43:e6:7c:02:93:21:43:72:f9:bc:c6:
         71:5b:51:19:80:99:18:db:37:42:6a:7a:92:99:a5:64:65:10:
         3e:d3:0c:86:c5:cc:6f:b9:2b:b5:dc:ae:cb:6d:0a:56:63:7a:
         43:7c:1f:02:60:b1:c5:49:af:28:2b:81:c8:92:99:ad:4b:8e:
         fe:bd:e1:b8:5b:61:55:85:4f:82:da:81:48:13:5c:fb:39:ec:
         21:da:ca:db:7b:1d:32:60:c4:f0:de:5b:bb:36:c8:90:28:70:
         6e:ad:87:ea:9f:3d:56:c7:62:65:e6:2c:da:f8:7a:52:69:b6:
         33:83:5b:0a:ed:90:cf:37:62:dc:18:40:b9:a7:37:16:fc:d2:
         cf:37:96:ec:ae:0b:97:55:31:a4:f0:f9:53:f2:0d:01:dd:88:
         5c:cf:4f:50:ba:09:f8:a2:8a:41:31:5b:9f:3a:e9:7e:e5:1a:
         f2:35:76:e6:5b:23:79:68:56:85:27:20:42:27:e8:e3:6b:e8:
         89:18:ed:ee:bf:a1:c8:d5:ba:12:c9:75:1e:0d:a1:be:f3:40:
         ed:ac:01:85:97:f9:7c:59:c1:45:a1:8f:f3:fe:25:41:a8:29:
         4e:31:a0:21:75:03:20:c0:7d:6b:1d:65:d1:38:53:e9:dc:d7:
         f4:ae:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:44 2026 by rpki-client