Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
File:                     d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa (raw, json)
Hash identifier:          9pC27Jc1tsvLBQ8ZRxThNlqs1U341gU7nM6yWSMPJrk=
Subject key identifier:   9F:31:11:F2:8D:EC:79:4F:7C:72:8C:A2:A3:6B:80:7C:C5:A3:D0:12
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584F02422A48E7737297B128CD00
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     1640
IP address blocks:        104.245.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2a:48:e7:73:72:97:b1:28:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=3051042a-daf0-4d7b-8926-0038f6eb0886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:b2:0e:e1:a1:e1:1e:04:00:49:d0:e4:db:
                    db:5a:3b:3f:4f:90:3d:79:ce:9d:1d:25:6c:31:b3:
                    20:ab:e2:5c:e7:23:f0:35:2b:d8:bd:3c:a2:42:19:
                    88:f3:e8:2b:33:e8:93:de:04:d9:2a:b9:ff:65:09:
                    2c:85:27:28:f0:12:50:21:0b:7c:dd:66:f4:f2:1b:
                    18:fd:f5:29:4f:56:08:e8:8d:11:64:ec:e6:05:ed:
                    24:95:61:c9:26:4f:e8:a9:be:5b:cd:c4:e9:67:1f:
                    d8:6f:30:7a:72:ce:5d:1e:b1:08:8d:23:be:f0:9e:
                    c5:5c:be:cb:0f:8b:d8:32:77:b3:fd:cf:86:44:c3:
                    36:fd:20:97:32:01:48:11:66:ec:3d:96:1e:65:9b:
                    0a:b3:ed:09:07:77:1c:38:ba:c1:37:b3:59:a9:4c:
                    00:d8:52:4d:89:af:ac:3d:60:b1:df:ba:1a:3a:64:
                    1e:11:96:22:e1:84:04:92:8c:b1:fc:df:60:8a:10:
                    bc:6c:44:eb:8c:7f:33:c9:6d:00:97:e5:c1:ed:62:
                    4b:d8:3c:e8:7f:3b:f7:e8:9c:5a:8a:cf:b6:d7:fa:
                    2a:7b:22:a2:e2:56:0c:df:32:55:1c:4b:71:09:29:
                    25:5b:ff:84:e5:b6:37:0e:1a:1d:70:3d:01:6b:2d:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:11:F2:8D:EC:79:4F:7C:72:8C:A2:A3:6B:80:7C:C5:A3:D0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/d9a0d91b-f651-32a8-9df2-3fcbe2a7083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:76:5b:28:1d:8c:78:80:b5:39:01:32:d7:28:0b:a5:87:
         5e:1c:c9:37:8e:84:42:32:79:d7:9b:a9:fe:7f:d0:64:de:26:
         dc:84:a3:ab:91:80:9d:29:c6:40:9b:07:04:dc:d8:ed:62:cd:
         2e:9d:69:73:f8:e5:01:9b:bd:c9:9f:85:c2:87:ba:1e:51:04:
         df:a5:7a:80:a0:94:c2:7e:bc:8f:02:68:f4:b2:e7:61:37:a2:
         0d:19:b5:a6:a0:52:48:7c:f6:1f:6d:a4:0e:25:99:23:67:d0:
         77:66:30:36:ed:41:68:4f:ca:10:92:cc:00:a1:1c:c1:7c:a1:
         6f:0f:4a:de:da:cb:cf:a4:79:c0:5d:cd:19:92:6a:19:79:67:
         a5:5c:0c:41:b3:5c:b8:e6:77:fa:10:2e:24:34:38:80:c2:24:
         09:69:d6:c9:2b:5a:0c:56:f3:d3:e5:3c:7d:be:e6:b2:cf:e3:
         a4:58:a1:6b:76:50:04:e5:9f:f7:6b:ad:bf:06:eb:02:3b:ab:
         5b:94:1c:58:73:78:11:e7:98:88:c5:7a:e2:7f:16:f3:b6:77:
         26:df:f9:e4:9e:71:65:e9:20:15:7d:cc:2b:93:69:6b:60:cf:
         bb:9a:5d:78:2d:98:66:50:4f:7b:4f:6e:78:cc:f6:31:15:01:
         a3:c4:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:01:17 2026 by rpki-client