Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa
File:                     362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa (raw, json)
Hash identifier:          J/T53MNQeyoeMCJanHcp8fOGZSdd9u/pvNJEAxtf54I=
Subject key identifier:   C3:C3:74:DB:18:44:E7:EF:74:BA:DB:D8:AB:A3:5E:F9:63:73:20:FF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF7335F0F2079E4099D26C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        104.129.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:33:5f:0f:20:79:e4:09:9d:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=a5226aa0-28fc-4f54-a9f4-9d32fd4b3e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:d2:77:1e:ae:92:85:f1:73:02:22:15:a7:
                    3d:e7:15:db:e6:17:dd:99:de:4b:0e:70:45:a6:39:
                    40:92:ad:76:0b:47:3f:bf:f8:dd:d7:e0:aa:28:9b:
                    de:47:f6:30:00:51:71:23:b0:98:a3:ef:73:54:a3:
                    e6:e9:cc:f8:0d:c9:a8:6f:74:bd:97:78:f5:3e:f2:
                    aa:38:7c:52:0e:0b:e7:f3:56:16:7b:29:6a:8d:cd:
                    e1:2e:4d:4a:b2:d9:31:65:cd:05:da:07:eb:ea:95:
                    ba:61:e2:c3:b8:97:af:15:d4:b0:91:2c:8e:86:ad:
                    c0:84:ab:04:25:bb:15:01:6c:b1:57:9f:18:2d:d4:
                    b9:77:55:97:81:88:f7:3e:4a:b3:83:b4:7d:74:b8:
                    01:ae:75:2d:ab:75:4f:b1:8c:0d:6d:1d:86:f2:d1:
                    25:5b:a7:66:f7:71:e1:8d:9f:20:07:cf:da:09:e4:
                    72:46:4f:3c:f5:7a:c7:75:07:6a:74:80:99:20:87:
                    81:03:a6:b1:1c:b3:b0:43:97:58:04:43:6e:1c:ae:
                    e7:3b:c3:b2:d7:77:4a:3e:fe:c2:62:13:a3:c9:d2:
                    bd:6f:ea:33:4f:6b:84:6f:28:df:71:6a:0b:07:ab:
                    d9:30:28:43:59:aa:3b:77:ff:63:37:30:4e:fd:02:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C3:74:DB:18:44:E7:EF:74:BA:DB:D8:AB:A3:5E:F9:63:73:20:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/362b447d-1cee-3ef8-b8d2-3729ca468d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:50:28:58:7f:4e:41:fb:9a:85:42:a9:99:c6:e8:b7:ea:
         c2:c0:60:63:0a:d7:bd:a9:53:a3:29:a4:3e:a8:6f:b0:7f:f3:
         74:00:34:48:3b:0e:86:17:4f:a4:da:f7:49:16:ae:0c:35:e2:
         13:5c:e6:55:ff:02:83:c2:e2:ae:0d:83:77:fc:8c:26:dc:19:
         c4:35:90:06:ce:ed:61:66:c1:ce:83:98:b3:11:13:08:06:8d:
         f7:25:5e:75:0e:33:37:63:97:09:63:d3:c9:f7:95:d3:d2:77:
         9e:f7:ae:8b:20:0b:f1:28:42:db:50:95:0c:2c:13:75:53:61:
         af:74:56:a8:9f:35:66:c6:d3:50:5e:33:83:51:b0:23:5e:51:
         ca:e3:d3:1d:7f:d1:e1:03:ae:df:41:18:ec:0a:f0:b0:7d:1b:
         30:5a:cb:b1:da:7c:01:d8:09:41:ac:83:58:c6:08:5d:9a:cb:
         b6:01:c6:87:12:e8:5a:c9:9a:d9:c4:dc:1d:c6:a0:7e:b0:d0:
         79:2b:e4:bb:2b:2e:cf:2a:2a:b0:3c:76:5b:76:5e:d8:1e:65:
         16:e7:c4:da:87:73:af:ce:b3:99:42:f7:bd:bd:83:ba:d0:5c:
         1a:ee:47:e6:24:2b:50:df:e7:87:f4:a3:74:9b:af:32:e7:a3:
         7b:28:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:15 2026 by rpki-client