Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa
File:                     725d8488-5d9b-3e1e-b301-f67bc37915bb.roa (raw, json)
Hash identifier:          S8fb9LvaSyg/8o/bd/JjbCl7sIH9bxTcqLG2k3VXO5w=
Subject key identifier:   AD:B4:8C:A1:46:76:CE:67:54:E1:8D:61:96:0D:D5:E2:40:91:77:B1
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584F612D610FF12F32668B768D00
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     393950
IP address blocks:        104.251.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:61:0f:f1:2f:32:66:8b:76:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=783a50b2-7c9b-48e3-b807-788c68242010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:85:3e:b6:8e:34:0c:69:2b:65:ce:68:f0:
                    89:4e:46:14:39:0c:e5:f3:2e:4f:74:bb:4b:98:8d:
                    57:47:08:40:05:7b:99:37:ea:f3:1d:e6:52:75:05:
                    04:70:65:79:63:e6:76:0c:14:70:8f:a5:e1:52:5d:
                    61:09:1f:2e:b9:49:c4:65:ad:b0:dc:ce:6e:01:ba:
                    2d:48:47:af:1c:da:8c:a1:57:c9:00:3c:98:09:c4:
                    cb:3a:b8:82:0c:5c:fd:7a:54:d2:c6:ce:f0:8a:70:
                    93:24:ac:47:5a:50:69:b0:d4:97:10:6c:3f:fc:5e:
                    59:ea:1d:ae:9c:f9:b8:f7:72:01:21:f6:49:4f:31:
                    f8:cd:8d:2e:08:70:7e:a1:76:78:d4:30:f9:d2:49:
                    8e:b2:7e:41:e6:27:91:6f:2d:de:53:28:3b:7f:3d:
                    28:8a:9c:12:a6:41:e4:81:69:92:a9:f6:1f:e6:ac:
                    47:2d:2d:80:2d:62:a4:a1:8c:7b:47:f1:82:c8:29:
                    b2:9e:c8:4d:46:07:1f:e0:63:9c:9c:0e:2c:d2:a0:
                    a0:38:14:ad:64:23:e6:53:2a:fa:ad:75:cf:66:ae:
                    d2:7c:69:ae:84:63:26:ff:43:ef:2b:6f:82:7a:26:
                    fa:34:40:26:ea:6f:7f:9e:e4:44:08:bc:e9:3e:94:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:8C:A1:46:76:CE:67:54:E1:8D:61:96:0D:D5:E2:40:91:77:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:c5:dc:7b:c5:29:ac:8c:91:43:bb:b0:d9:d0:43:fe:83:
         af:5b:04:59:d8:60:1c:9e:e9:88:9d:3b:7e:e6:bd:57:f5:bb:
         53:5b:c6:4e:bc:f9:92:2e:c2:26:37:ce:37:03:26:c8:b1:91:
         3f:d1:3b:96:8a:54:15:41:62:38:71:79:b5:12:56:6e:17:99:
         35:51:cc:cb:ff:bd:cf:1f:ca:42:f1:ca:a7:31:da:34:fb:d1:
         d4:43:17:b0:9c:e1:df:c3:8f:b2:eb:bc:87:74:b8:bd:4a:cf:
         3b:1d:4a:e6:31:95:7b:48:12:a6:46:41:48:12:55:a6:8d:31:
         f3:4a:5e:95:46:87:8b:3f:78:c6:5c:6b:c2:80:c3:f8:d1:88:
         3c:8a:4a:25:ce:4d:31:a4:52:6f:35:a7:b2:e2:b6:ec:93:dc:
         9a:eb:69:c6:10:18:d7:19:7b:1c:f6:c2:b5:e9:3e:87:c1:9e:
         03:90:ea:90:bb:7f:35:48:ad:e0:52:de:e8:db:e9:43:8e:12:
         1d:46:8f:e1:8c:6a:26:52:c5:7e:32:50:34:bb:d9:c9:4b:44:
         54:f2:5b:2a:11:0a:c8:a4:c5:23:a5:6c:5d:f9:92:05:2e:48:
         12:04:e9:d7:74:e6:8a:2f:90:94:c1:a0:86:75:74:b7:76:1b:
         8b:b4:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:27:58 2026 by rpki-client