Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa
File:                     dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa (raw, json)
Hash identifier:          RUZQ2GsdXE8ttD6yD2l0IFKrGcxRhcnl//Km1p+eoSo=
Subject key identifier:   50:AB:D8:8A:A0:62:F2:74:69:E4:F7:CC:64:41:F0:11:2D:AF:4D:0D
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EC7E0CECCFC675B077C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398478
IP address blocks:        104.233.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ec:7e:0c:ec:cf:c6:75:b0:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=0565fb94-1570-4f6d-a128-d6068bf32a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:b2:d5:fe:b7:bd:16:4c:69:1a:d7:8d:0f:
                    37:08:07:c1:7b:a7:83:2b:2a:46:9c:03:ca:4d:2c:
                    3f:03:a8:3f:57:d6:5f:6a:4e:c8:eb:51:bf:92:e7:
                    d9:37:99:89:2c:43:e2:0c:cd:2a:dc:7f:71:3b:67:
                    af:a4:6d:6b:b5:ad:ee:c6:7e:35:c0:10:58:e4:b1:
                    77:b1:b8:35:d7:9d:4e:22:ff:b8:26:e2:88:4c:b8:
                    bb:61:76:06:6b:5f:cc:5f:66:93:66:f9:6b:53:7f:
                    52:f0:ab:96:50:b2:8c:88:d4:1d:99:6d:d1:1a:60:
                    39:5f:a6:b9:85:c3:fb:6d:61:e0:33:43:04:ed:1a:
                    d6:b8:71:d0:52:1f:c6:c3:53:7e:29:68:24:4f:d6:
                    df:f3:1e:46:f4:24:b6:ab:80:01:b3:89:52:1f:d9:
                    d6:4b:9d:2a:a6:ee:2d:ed:06:a0:2e:70:78:91:5f:
                    07:0e:30:5e:ba:62:5a:fc:8e:5a:f1:69:3f:09:6f:
                    2d:63:82:ef:6b:cf:ff:99:fc:05:22:68:a4:32:0f:
                    ce:fb:0a:03:ee:63:33:e8:d9:0a:10:4f:36:a1:d4:
                    9d:cd:53:0c:06:bf:d0:d6:3b:91:5b:a4:d7:3b:af:
                    be:09:37:18:0a:61:d1:d8:2a:fd:51:c1:8a:ec:57:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:D8:8A:A0:62:F2:74:69:E4:F7:CC:64:41:F0:11:2D:AF:4D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:a8:3d:6f:ae:64:1e:d1:c3:5b:6a:7d:fa:d6:8f:8e:98:
         ed:19:9a:f2:f7:3d:5f:44:7b:81:b1:5e:14:f2:1a:96:f1:86:
         01:1a:49:c0:50:6b:e6:54:18:a5:c9:6e:f4:fe:d6:86:56:e8:
         a8:83:65:28:c8:13:b8:c5:1c:2d:d9:d2:95:b9:11:aa:11:1b:
         f4:d9:bb:8e:d5:5b:3e:b1:f7:36:d6:ce:8d:84:9d:99:94:4c:
         0e:10:74:09:d8:4f:e8:c2:e6:2c:18:b9:97:cd:8f:05:57:5c:
         56:3b:5e:9a:9b:95:5c:67:02:44:f4:24:7c:34:89:8b:4e:e1:
         0f:49:5b:45:49:93:73:df:d2:6b:81:11:fc:3c:b4:e1:39:a0:
         16:23:b5:d4:83:4e:38:dd:4c:12:21:ba:ee:6b:ca:17:05:40:
         5a:ec:74:32:f0:84:43:cf:bb:6f:3b:d5:c4:fe:e9:c3:c3:b5:
         74:4e:c4:de:09:a6:59:98:fc:2c:82:1d:44:51:e5:c7:06:05:
         05:c5:6b:b3:78:a6:5b:92:d0:d6:20:54:cf:e9:9b:61:dd:56:
         bd:b1:96:43:28:de:01:c8:43:8b:ac:fc:42:1a:cb:80:c2:78:
         f8:48:07:db:76:50:e5:50:80:9b:23:4e:1d:73:9c:21:72:3b:
         fb:a7:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:03 2026 by rpki-client