Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
File:                     79af2351-bc12-3c89-8202-a27c2b80b2b1.roa (raw, json)
Hash identifier:          sljsmLe+/AFUJxGmrJ8e/KriR1UduTayhAvwWj+4JG4=
Subject key identifier:   CD:04:2D:EF:D5:DB:5B:05:53:9E:4B:1C:F7:B3:48:0F:6D:85:1B:75
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584EE38CA44E1893341B6A94D480
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     209453
IP address blocks:        173.246.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a4:4e:18:93:34:1b:6a:94:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=783564a1-22d8-4365-8ca0-541e50744aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:ee:bb:c3:c1:71:92:06:b2:01:30:c3:00:
                    eb:49:57:4d:79:ad:7c:df:63:99:70:85:01:cf:ca:
                    80:9f:cd:d1:a6:fc:bf:96:14:e7:2b:1c:5a:07:c0:
                    7f:7d:e6:14:1f:6f:a2:98:36:3d:65:b2:81:82:19:
                    45:da:5d:a2:cd:18:28:1b:81:2c:79:9e:af:2c:e4:
                    b4:33:1b:f1:e7:de:3f:a9:46:e6:12:8e:a1:b0:7d:
                    a8:e9:de:af:2a:ac:30:55:02:1a:c3:43:ad:e2:2a:
                    0d:e2:ae:89:11:8e:9e:21:36:3f:92:d7:45:a4:4d:
                    d3:62:5d:ca:25:44:04:87:87:9a:65:c0:25:fb:b9:
                    bf:fb:31:c1:21:2a:35:d5:08:6f:4d:c8:fa:97:fc:
                    14:af:88:cc:1e:b4:41:86:10:5e:1f:a7:76:04:80:
                    3b:54:ea:88:7f:67:fa:ef:91:95:54:9c:bc:ed:be:
                    44:0a:ba:da:73:cf:19:86:f0:dc:4a:7a:22:3f:f6:
                    71:74:46:25:b8:1f:5b:6c:ff:db:61:7d:43:ef:a9:
                    2a:10:8d:18:6f:52:27:94:75:f3:38:d4:c9:52:5f:
                    2e:fb:8c:27:dc:a4:4f:80:a6:83:c3:48:ee:cb:f0:
                    13:f3:75:ba:27:c6:70:ab:ca:d5:5b:a3:ee:d2:4a:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:2D:EF:D5:DB:5B:05:53:9E:4B:1C:F7:B3:48:0F:6D:85:1B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:f5:a8:d6:2a:5a:39:c9:dc:00:0f:e9:5f:04:b0:17:49:
         99:62:8c:9e:23:25:9d:0f:8b:1a:aa:8c:00:67:75:65:67:bc:
         ee:a0:48:ef:dc:a1:ab:40:eb:00:1d:a1:48:23:9a:dc:ad:ea:
         4e:9d:9c:95:32:7d:2c:9b:af:05:40:d7:3e:0b:ef:c7:ef:70:
         c2:aa:8e:9f:93:ad:f8:d5:af:4f:6e:cb:80:21:c4:21:d2:2e:
         d1:03:b6:c7:e5:7f:6d:12:80:8e:f5:f3:e0:75:d9:f2:49:c9:
         92:11:13:e3:53:e1:f9:e2:00:f5:0e:d6:17:3f:ee:f9:52:ba:
         ec:ff:82:ea:bf:7c:17:e6:48:29:98:8f:32:68:b2:c0:b0:6c:
         f5:2b:ec:fd:9b:42:37:78:f8:32:8c:98:4d:94:0e:77:6d:6d:
         ad:c7:b8:45:9f:87:1e:f0:7a:76:ac:29:cc:76:35:e5:0e:9c:
         c1:49:78:d6:1c:99:46:a4:6d:64:2e:f5:6d:f8:bd:35:09:4a:
         ba:91:01:79:57:e1:83:09:c9:96:a0:3c:b4:bd:3c:a1:9c:ef:
         ee:85:04:7f:b3:63:ef:f0:18:bb:15:6f:60:f8:a7:3c:9c:13:
         23:6d:f6:e9:9c:f7:d0:c0:c0:14:e7:b0:47:04:63:fc:7e:99:
         7d:49:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:09:54 2026 by rpki-client