Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa
File:                     0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa (raw, json)
Hash identifier:          R8K5LZNX4t2Ep1kHqbwFyQpEOeBUd+EDIzNmVXOGVEU=
Subject key identifier:   9A:FC:0E:15:D7:2B:90:7B:6C:10:C6:98:F4:2B:9E:9C:81:5D:DD:E5
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584DEF45DBA91E3A54F2B152DE00
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     399883
IP address blocks:        104.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:db:a9:1e:3a:54:f2:b1:52:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=ad10695f-2a82-4af4-8df4-3c78f36f1179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:fc:69:7a:c6:9a:3b:90:08:15:5b:d6:7f:
                    3f:2d:38:32:42:b5:89:90:76:a1:1c:fc:f6:1a:f6:
                    5f:d7:bb:56:42:34:bc:48:02:bc:8c:ae:95:e1:6a:
                    61:6f:65:46:57:d6:26:f3:a6:67:22:5c:a6:dd:65:
                    9d:8c:57:92:99:04:59:36:a5:d8:ea:d1:93:f7:c9:
                    e0:ca:ca:2e:bb:ca:27:95:25:44:85:0c:04:81:0b:
                    97:a6:71:4e:28:a9:ad:21:f6:2b:4c:8e:89:1f:be:
                    91:15:a0:38:17:e2:c8:c0:c3:08:b3:94:b1:20:54:
                    f8:9e:37:18:56:a5:56:60:22:2e:08:29:79:0e:df:
                    a5:a7:6c:e6:e4:bf:20:84:18:e8:e1:92:ae:b4:6a:
                    69:f1:e0:3b:a3:bf:d1:a2:df:ec:43:bd:3c:6e:5e:
                    d9:be:53:ca:ff:f7:2b:38:0a:0d:02:68:43:41:ea:
                    3b:e6:d7:70:a7:cd:7b:0d:7a:11:ba:d5:3c:5f:a2:
                    f9:a6:29:01:0b:77:4a:b0:54:a5:51:3b:07:35:36:
                    e9:09:69:ae:34:d2:f0:a7:7a:00:0a:9d:52:0b:3d:
                    9c:fe:7f:46:05:27:da:e4:9f:bd:ce:8a:f4:e2:a1:
                    c8:c1:46:56:80:f7:29:b4:f3:ea:c1:49:75:c2:47:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:0E:15:D7:2B:90:7B:6C:10:C6:98:F4:2B:9E:9C:81:5D:DD:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:99:a4:a8:0e:3f:87:37:fd:8d:75:2e:20:c4:c4:8f:96:
         c8:35:a2:c1:ad:cb:db:fa:66:fb:a2:6c:44:67:b3:04:d0:f9:
         7c:30:74:80:fa:e6:c0:fc:60:1e:1e:bb:31:be:67:7a:fc:20:
         ae:9c:72:e1:ea:8e:c4:3b:b3:34:db:47:cc:f6:6a:b4:e5:dd:
         cd:4e:d0:86:08:97:12:8f:a6:b8:da:70:9d:3a:ba:e5:41:c7:
         7e:0c:2f:c2:af:54:37:9c:87:1b:24:ae:9f:c4:18:81:9f:db:
         df:0a:cc:89:31:b5:a8:ee:0c:6c:4f:77:5d:57:c7:fb:bf:15:
         4a:bd:f2:66:2a:b8:63:29:97:1d:89:4e:f7:ff:ba:9a:fb:c0:
         e8:b0:7c:51:8c:80:6e:63:d1:e5:db:35:b8:43:23:c0:22:fa:
         8e:4e:0a:84:6f:13:31:ef:e9:de:c5:ee:3d:79:09:d8:f9:f4:
         1f:3c:a6:a3:53:3c:40:59:4e:d8:7e:09:8d:40:5f:4a:54:b6:
         42:5d:6a:fc:c4:9b:a9:fb:e8:bc:11:be:19:df:64:f5:4a:46:
         ec:21:b2:a0:35:e3:dd:65:88:10:23:16:31:8b:e3:d4:16:56:
         0b:bf:97:9a:3d:d6:bf:19:bb:64:7f:10:0d:62:cc:90:4a:30:
         67:de:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:19 2026 by rpki-client