Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa
File:                     5b0df316-9ef9-3270-b999-73c30555f12a.roa (raw, json)
Hash identifier:          qxAFiV2NTs0CS3I0PXdd5RKZaR7AiB8mQqYgEvwALT0=
Subject key identifier:   30:A8:3C:25:23:07:7A:09:B0:4B:11:EF:48:10:D3:F9:5C:BD:E9:70
Certificate issuer:       /CN=ae67a0de-7e5b-4366-9901-6c83fac47b0b
Certificate serial:       010D0C9F4328584EC4D7156F7FAF3E1DE61CDE00
Authority key identifier: E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     6652
IP address blocks:        104.204.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:15:6f:7f:af:3e:1d:e6:1c:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67a0de-7e5b-4366-9901-6c83fac47b0b
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=86703740-3e94-4737-9e96-4e37c41f1089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:10:28:f3:5c:59:71:71:21:1c:e8:6a:61:
                    1d:9e:97:81:cf:bb:12:79:a9:43:0f:24:28:40:7a:
                    e2:6b:95:b4:09:53:91:32:1c:fc:27:71:5e:fb:77:
                    74:77:b5:45:48:16:0e:78:be:a2:0f:1e:e5:89:60:
                    d6:1f:a7:94:64:6b:e6:27:37:b8:a9:80:9f:02:1d:
                    c3:24:c7:33:ad:87:cb:22:65:d4:5b:ed:f6:75:ac:
                    eb:ce:6c:75:5e:e3:99:fa:91:a4:d3:ad:9f:6e:c3:
                    34:47:dd:dc:23:3a:62:d7:94:e8:65:43:98:51:52:
                    31:c4:be:b1:35:1e:fc:ff:d4:c1:ba:7a:4a:fe:76:
                    e6:98:d6:ac:4a:d1:dd:9b:39:07:72:bf:e1:19:bb:
                    24:76:80:ba:e2:a1:1d:a5:7a:52:9e:cb:41:5b:5b:
                    66:76:93:a1:11:fd:cd:42:dd:37:0f:16:ad:67:fe:
                    fe:a7:df:c5:98:81:90:9a:fc:03:df:d0:be:c0:17:
                    16:b3:a2:a0:f2:bf:42:fe:00:47:9d:94:9a:3f:bb:
                    67:cd:21:a4:8e:dc:06:c7:20:e6:41:69:39:04:7a:
                    94:9a:a5:de:b8:af:3a:f9:54:74:01:9e:fe:ef:ee:
                    4f:86:2f:33:ff:9e:02:cc:31:05:c3:02:93:c3:f5:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A8:3C:25:23:07:7A:09:B0:4B:11:EF:48:10:D3:F9:5C:BD:E9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/5b0df316-9ef9-3270-b999-73c30555f12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b/ae67a0de-7e5b-4366-9901-6c83fac47b0b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:45:C0:E7:03:12:70:8E:29:F5:A5:96:82:F9:D9:32:93:9E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae67a0de-7e5b-4366-9901-6c83fac47b0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:11:83:db:91:7e:5e:f0:3f:f5:08:f1:a7:4a:dd:e8:55:9b:
         51:e2:05:31:8d:87:e4:48:11:02:83:b9:b5:f1:dd:df:27:b3:
         7d:2e:e0:c5:97:4d:d5:0c:8b:11:22:6f:66:08:d8:30:e9:81:
         4c:49:7d:22:86:ad:4a:8d:61:b6:95:28:30:31:9b:77:7f:44:
         b6:a2:67:d0:61:16:23:2c:67:d7:32:50:26:91:1a:f6:26:cf:
         0c:36:06:03:59:18:ba:9b:cb:7c:9b:14:d2:e9:f1:36:4c:6b:
         42:0c:87:7c:c7:79:0b:50:a2:45:a3:3d:aa:b1:3b:61:71:5a:
         10:02:dc:0c:c4:51:a1:b5:53:4a:29:30:6b:69:76:26:2b:be:
         ef:60:04:73:55:18:55:38:9f:56:55:40:30:a1:b1:fb:13:68:
         5b:d4:5a:1b:8d:3d:3d:5d:54:bf:94:5e:3d:bc:d9:0e:af:cf:
         50:fd:a2:2b:85:b3:62:c7:8d:9d:ac:f8:6e:cb:0e:54:de:c3:
         81:8d:7f:8a:57:b0:24:69:79:48:55:16:d6:a3:46:2d:7f:92:
         aa:18:68:5b:05:4c:f6:9b:2c:bc:2e:94:e3:68:c1:2e:6a:51:
         35:71:2f:55:c6:f4:dc:71:04:e8:4f:9f:07:19:7f:2d:1d:bf:
         b9:10:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:14:18 2026 by rpki-client