Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/12bd70e8-259e-3b0b-b80e-2835271bc4e1.roa
File:                     12bd70e8-259e-3b0b-b80e-2835271bc4e1.roa (raw, json)
Hash identifier:          eKURPP5OsZRk91wylGbtQtai8sBUFIK3iC/TTXWzemQ=
Subject key identifier:   4B:5A:9C:12:53:95:23:1F:99:C0:5A:08:A5:2E:3A:C7:F0:A8:72:4E
Certificate issuer:       /CN=9b2a720b-9aba-4f26-97ea-587d2ab70924
Certificate serial:       010D0C9F4328584E00062C2B06AF432104538280
Authority key identifier: AE:90:D9:69:30:87:3A:32:8A:32:F2:B3:15:AF:68:EE:A1:A0:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/12bd70e8-259e-3b0b-b80e-2835271bc4e1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     13335
IP address blocks:        104.244.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/9b2a720b-9aba-4f26-97ea-587d2ab70924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/9b2a720b-9aba-4f26-97ea-587d2ab70924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:2c:2b:06:af:43:21:04:53:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2a720b-9aba-4f26-97ea-587d2ab70924
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=cacefd28-59b8-43ad-b4f7-0ee92ece8209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:0b:8f:c5:09:88:4d:e6:96:7f:d7:3b:06:
                    e0:31:f7:c5:74:95:d4:d7:4c:5c:ac:52:c0:88:dc:
                    53:47:69:7d:25:ab:92:eb:98:15:22:bd:17:19:8a:
                    22:96:69:9d:7d:6f:77:ad:92:74:30:79:f5:93:65:
                    31:fb:33:b8:bb:ce:dc:c6:3b:ca:6d:68:51:58:61:
                    da:e9:10:73:0d:af:13:4c:e1:df:37:08:1d:2e:30:
                    d5:9b:cf:bd:03:ef:03:24:ac:aa:93:6e:f9:d7:39:
                    c1:9e:99:fa:eb:ef:c6:c9:d0:30:18:22:95:58:ec:
                    40:42:2f:fc:f9:04:99:66:9c:49:12:4c:0a:04:66:
                    0e:e0:04:8e:94:54:1d:40:34:26:aa:86:09:a6:0a:
                    c5:ec:07:89:96:8e:92:34:48:30:ea:ab:b5:b0:19:
                    92:0c:d4:ad:aa:09:4b:aa:1f:15:31:b3:1a:ff:22:
                    36:6b:8b:62:53:95:42:a4:da:b0:20:5a:26:41:49:
                    2f:01:64:26:9b:f3:63:fe:a5:34:a4:d8:92:5f:d5:
                    dc:09:0d:a9:82:78:30:46:19:e1:e7:68:af:4b:4b:
                    df:1c:d1:36:ba:93:34:ef:e5:21:75:0b:ac:dc:6f:
                    ea:81:1e:14:e2:39:ad:6a:2e:bf:bd:ab:c4:9d:20:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:9C:12:53:95:23:1F:99:C0:5A:08:A5:2E:3A:C7:F0:A8:72:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/12bd70e8-259e-3b0b-b80e-2835271bc4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924/9b2a720b-9aba-4f26-97ea-587d2ab70924.crl

            X509v3 Authority Key Identifier:
                keyid:AE:90:D9:69:30:87:3A:32:8A:32:F2:B3:15:AF:68:EE:A1:A0:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b2a720b-9aba-4f26-97ea-587d2ab70924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c0:74:7b:45:5b:6a:0f:d5:7e:6f:cc:36:31:af:4e:9c:93:
         e9:19:8f:23:e4:a3:b3:e1:0f:b0:47:9b:6d:5b:ca:d8:79:11:
         c2:53:85:5f:4c:3c:27:55:15:a6:db:da:a7:50:60:c8:8f:c3:
         20:cc:2d:c4:4f:99:24:0d:d9:6d:6f:9c:c1:a5:ae:30:26:eb:
         4b:86:5b:61:bf:1a:33:4b:c4:53:97:c4:bf:d0:c5:c6:9d:ba:
         5e:ff:a5:64:11:45:e7:09:25:92:24:2c:4c:59:f4:0a:0d:48:
         9f:1d:05:00:68:d2:a5:cf:9e:f1:05:fb:bb:44:dd:a3:5f:e8:
         a2:25:8e:0a:cf:cd:41:04:e8:34:b6:51:e1:01:d0:56:0c:d2:
         5b:41:52:7d:08:47:69:2b:c0:d3:e7:40:99:f3:aa:1f:af:bf:
         19:55:8c:29:ef:ae:1e:4a:bc:ee:9d:8a:d1:bb:56:b7:67:61:
         0f:ae:5e:0d:c8:d1:c7:fa:ce:29:64:f8:5d:6b:d6:75:28:5d:
         fa:4e:ae:e9:7d:1c:df:a5:40:2a:a6:86:bb:34:bf:ab:17:3e:
         cc:c4:f8:d3:2d:6c:08:70:54:c3:49:e0:93:1a:3e:cd:ea:4f:
         c1:7b:06:a2:b9:48:23:a9:ed:34:83:1d:b8:ec:e4:d7:32:62:
         5d:26:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:58 2026 by rpki-client