Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/4a330f6a-2c7a-33fe-bb90-fa3f814d28b1.roa
File:                     4a330f6a-2c7a-33fe-bb90-fa3f814d28b1.roa (raw, json)
Hash identifier:          yXq8Z47beNGDw1mXNLQHFJWvrtoIIZG8rsJwVrm+uao=
Subject key identifier:   56:92:12:B5:22:4B:8D:E4:AA:9E:35:8E:B1:6A:AE:87:43:26:90:CC
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584F000355843AA0DB2BB2CC9FD0
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/4a330f6a-2c7a-33fe-bb90-fa3f814d28b1.roa
Signing time:             Sat 29 Aug 2026 17:42:10 +0000
ROA not before:           Sat 29 Aug 2026 17:42:10 +0000
ROA not after:            Fri 27 Nov 2026 18:42:10 +0000
asID:                     62731
IP address blocks:        104.218.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:03:55:84:3a:a0:db:2b:b2:cc:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Aug 29 17:42:10 2026 GMT
            Not After : Nov 27 18:42:10 2026 GMT
        Subject: CN=454577c6-c582-495a-ae20-96eccb1abc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:b3:f5:62:9d:c8:aa:c5:a1:a8:06:f0:8b:
                    75:bd:43:b3:2b:9b:84:a8:50:ee:5a:cb:18:9c:ef:
                    8b:10:5c:ae:00:e9:e4:80:ba:07:c8:68:fb:2e:ae:
                    88:10:68:74:e4:51:95:c5:41:ba:d9:08:7c:e2:4e:
                    16:72:c0:64:0a:fc:ca:e3:72:b7:aa:8c:d4:8f:05:
                    89:1d:e2:7c:87:45:5a:4e:5b:2f:6a:8c:52:81:09:
                    c5:d4:9f:bb:53:2c:ef:91:01:ee:9e:7c:af:10:32:
                    f8:85:63:a9:8e:7a:d5:c6:cd:3f:5d:8c:7a:c6:50:
                    c8:ce:f4:29:b5:11:98:e5:ca:9a:99:79:e7:d7:24:
                    94:5f:96:7d:ad:2f:fa:17:f0:36:0d:91:05:68:08:
                    c9:01:35:eb:51:50:fc:34:3a:a5:3a:de:26:71:8b:
                    a6:12:1c:ce:3a:41:cd:de:1b:7b:36:c8:f1:6e:a1:
                    ee:0e:28:f1:ea:af:8b:59:1d:3f:a5:e6:a0:b2:d2:
                    82:9c:37:cd:1d:10:15:11:f2:72:7c:a3:bb:21:18:
                    42:f1:bd:eb:50:31:32:59:e3:0e:30:c1:55:5e:0f:
                    6f:cb:b3:61:61:dc:4e:be:6e:ac:43:e0:f5:fe:f9:
                    74:2c:e1:40:72:84:30:10:f3:44:b4:e5:5c:32:24:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:12:B5:22:4B:8D:E4:AA:9E:35:8E:B1:6A:AE:87:43:26:90:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/4a330f6a-2c7a-33fe-bb90-fa3f814d28b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:be:91:14:f5:2e:7e:4e:35:1b:d6:75:e2:f6:65:be:c6:
         65:f7:cd:ee:08:b6:71:86:3a:9b:b2:d2:bd:a2:50:15:59:4f:
         44:94:31:3e:8b:f1:10:1c:ee:6f:85:eb:0a:7b:75:c8:9a:80:
         d8:21:4b:a7:6e:a7:d6:d9:1a:d4:ca:29:42:bb:84:b0:a5:2a:
         5d:d8:85:dd:b8:a9:8e:cb:9b:69:45:e5:d8:59:fa:f1:1c:44:
         45:13:36:69:6b:c3:14:1a:ab:1f:f2:09:2b:4a:3c:c2:ab:a9:
         c3:ad:40:75:f9:2c:ba:62:45:05:bb:d2:f0:5f:54:e2:86:78:
         df:8b:30:a1:81:4a:56:a3:b8:57:35:09:38:02:6e:7b:aa:8f:
         a2:49:cb:f9:81:23:a4:41:aa:89:92:9e:38:46:dc:7f:e4:b8:
         92:3b:56:62:d1:e4:87:37:fc:3e:20:36:73:4b:c6:bf:83:dd:
         57:4d:1a:0c:1e:21:f5:d3:84:92:1d:a0:7e:a5:a5:7d:6c:03:
         72:ce:45:56:5d:b5:f7:c5:b6:ce:c3:a9:bb:e6:bd:64:e5:58:
         9d:ab:2c:24:60:d6:1e:29:80:54:75:3e:ac:95:71:34:f6:6b:
         32:a8:bb:6a:95:46:d8:4c:47:46:18:8b:b0:97:31:24:67:79:
         bd:41:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:25 2026 by rpki-client