Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
File:                     d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json)
Hash identifier:          lisQLbxnqcI5KilbtYVfJgcyZhHwi6U0t6Yqxah5DMM=
Subject key identifier:   CA:73:B6:FE:32:35:14:3A:4D:50:53:36:A6:11:6E:4A:FA:E9:6B:0A
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F146795340BC20CE85587BE00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     23470
IP address blocks:        104.251.85.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:95:34:0b:c2:0c:e8:55:87:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=88d2156d-08be-439f-9179-0c0cdb5ab24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:c7:84:f1:a3:0d:62:ad:eb:4e:cd:a9:8c:
                    5e:11:17:7c:0b:d3:0d:5d:cb:bf:39:44:62:22:e8:
                    9b:5e:13:6c:2b:fb:56:a0:83:30:3d:b6:c6:e6:f0:
                    34:77:b4:e9:b3:09:b9:88:94:c2:d9:59:8b:31:aa:
                    44:80:01:bb:38:9a:ef:b0:27:a2:60:ca:28:29:fb:
                    52:cc:d0:4a:d2:15:90:04:46:86:fc:c0:42:e2:1f:
                    0c:65:95:89:44:48:a7:1e:f2:fd:2a:f3:93:62:0a:
                    a5:af:0b:e3:84:6a:6a:bc:ae:1f:a4:41:6b:ff:db:
                    ee:4a:5d:9c:11:ce:46:69:f0:f4:ca:e7:a4:16:a0:
                    e2:dd:78:a0:b0:b9:20:e0:f1:c5:ec:90:9c:5c:3c:
                    33:38:79:57:45:54:37:45:24:23:8e:25:25:7b:e4:
                    e9:ec:0c:b4:c6:5d:a3:6c:84:b0:50:af:b9:72:c1:
                    5f:8d:25:2a:28:80:94:75:9e:d9:8c:e4:9b:f6:39:
                    52:76:7b:6f:9f:eb:e3:3f:a9:bc:05:7c:e8:c2:77:
                    7b:09:3a:6f:90:46:7c:36:fc:5f:f2:0e:81:a9:8e:
                    61:0b:a3:60:1b:01:32:ba:15:99:86:b3:d3:1f:74:
                    db:83:e9:27:01:73:fe:9d:a0:a0:ee:b3:f6:8f:62:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:B6:FE:32:35:14:3A:4D:50:53:36:A6:11:6E:4A:FA:E9:6B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.85.0/24
                  104.251.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:11:12:f7:10:73:81:5d:8a:1a:6d:5b:c8:de:06:2d:49:cc:
         f6:f8:e7:51:a7:50:e3:3f:b3:26:fd:a6:58:db:04:7f:51:b5:
         b9:f1:2a:ba:7f:1d:b8:9d:9f:ba:e3:fb:e5:37:5c:fd:d9:2c:
         41:20:44:c7:dc:67:0e:5a:4b:98:00:7b:a8:b8:f4:29:37:72:
         b9:86:bb:86:dd:63:0b:d5:cd:57:9b:ee:7b:d6:d5:df:0d:87:
         2a:9c:df:66:34:55:20:aa:36:52:96:62:1f:d2:0a:01:1c:ae:
         ee:8d:5c:76:41:ee:8c:27:95:98:3f:8b:5f:08:f8:a2:48:b3:
         fe:17:22:7a:4d:c6:88:8d:d3:4d:4f:4e:a3:76:9d:59:50:b2:
         24:88:2f:2b:09:6e:ed:f3:20:6f:b5:87:75:65:ec:bd:e4:78:
         12:01:83:e0:a5:51:e8:08:7e:cf:04:f7:86:3b:12:17:99:fa:
         06:b0:a5:13:f3:d7:13:c5:54:70:44:35:6b:ed:7e:2e:21:cf:
         95:50:28:46:ae:76:99:f9:cd:9b:91:7b:52:91:7a:bd:6e:55:
         26:c6:59:f8:d6:42:84:2c:c5:1f:b7:c1:b6:f6:60:0d:5d:3a:
         b6:0c:04:a1:d3:11:25:ee:de:27:84:19:8b:13:b8:f0:c0:87:
         44:5a:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:20:08 2026 by rpki-client