Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa
File:                     fba7741f-d7cd-3d32-850c-1efffef1bce5.roa (raw, json)
Hash identifier:          p3aJ61rRE9oW90EmpCu8engVfhNzF15VhJV4ERzm1Ws=
Subject key identifier:   E3:4F:38:03:F5:CA:5B:AC:8C:5E:E9:47:04:D0:D0:8A:37:FC:B5:CB
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F0D6CE7AA7F815AF9E8C412E0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     1239
IP address blocks:        104.218.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e7:aa:7f:81:5a:f9:e8:c4:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=bfd69102-593f-4d9f-a19b-4f263c3acd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:cb:26:6f:45:32:bc:5f:8b:a5:98:28:4f:
                    32:5d:3f:b4:1a:6c:12:69:71:35:6f:d4:cb:c5:1c:
                    09:2d:58:7c:b9:2f:23:bd:d9:cd:a4:d4:5e:7d:40:
                    92:1f:88:c8:e8:ae:93:54:1b:79:cd:83:5a:63:08:
                    2b:a8:81:f3:52:e1:e9:38:eb:97:06:1f:f6:56:99:
                    44:fd:7b:c0:d4:c6:d3:1f:0b:30:a5:9c:07:82:60:
                    4c:94:da:c1:a0:de:31:70:95:f9:60:d7:5f:00:94:
                    2b:e3:aa:e3:8d:31:7c:be:7b:7f:cb:c3:4b:d4:77:
                    82:b9:82:06:bf:15:5b:9c:29:98:e4:f8:b4:84:1e:
                    11:46:18:fe:b9:ed:ba:b8:b4:3d:25:a9:e9:f1:73:
                    b9:51:b5:76:03:d9:e2:20:fd:80:78:0c:77:88:bc:
                    78:c4:28:58:54:16:cb:28:0e:56:63:63:e6:21:2a:
                    85:cb:6b:f0:5e:37:9f:d3:1e:2e:9e:d1:c9:21:cd:
                    18:de:f7:83:b6:47:43:f8:c5:e8:8c:be:08:ec:c1:
                    1d:8f:09:6c:07:b1:50:59:c1:a7:38:38:31:1e:34:
                    4a:4c:a1:a4:16:02:7a:2b:c9:23:1f:65:9e:1d:d4:
                    70:3d:0f:ae:ae:43:08:f9:3a:9b:ab:9a:cd:97:64:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:38:03:F5:CA:5B:AC:8C:5E:E9:47:04:D0:D0:8A:37:FC:B5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:cc:2f:61:7c:b7:e4:3a:0e:1d:83:59:d0:63:b0:88:6e:
         6b:84:f9:8f:51:12:6a:3a:62:be:c0:87:89:ac:9f:7a:42:85:
         bb:64:ba:c2:c2:3e:9b:60:6f:71:b6:56:08:73:1c:90:c6:de:
         4e:3a:2c:e2:cb:32:90:74:06:37:b9:fa:17:00:9b:33:de:23:
         6d:89:68:7c:9e:89:09:83:11:6e:1f:a5:41:6b:bd:45:08:eb:
         e9:50:6e:90:b3:ec:a6:ba:ad:9e:b5:b4:80:c7:09:78:ca:55:
         e0:e1:28:3d:a9:92:93:46:99:ab:99:b1:8c:ca:75:60:bc:10:
         56:2f:51:e0:59:f8:b4:3c:a4:68:24:3b:1a:b2:df:e3:ce:21:
         80:7f:cb:e8:a6:2e:67:19:27:ee:ee:54:a6:7f:bb:9d:27:c0:
         58:98:ca:11:7a:83:64:8f:53:92:9e:11:b9:a6:b1:85:cc:1d:
         92:41:4d:ed:e5:03:d4:54:bf:14:56:1a:bc:17:d0:35:14:94:
         c2:ec:29:2d:45:e4:68:82:17:11:e9:41:9c:b7:b6:01:c9:cf:
         b6:bc:a1:e0:db:a3:d2:e0:d5:04:25:e3:71:ed:e4:1e:90:48:
         8a:8b:8d:21:72:dd:89:64:96:e8:73:60:f3:23:9d:61:53:84:
         53:06:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:55:01 2026 by rpki-client