Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7150d8e2-6e23-357a-a201-8d89a8a43e6f.roa
File:                     7150d8e2-6e23-357a-a201-8d89a8a43e6f.roa (raw, json)
Hash identifier:          Ld4Ghr6inGWLfJ3OZFDbZA6WunxiRyMP1RwFr47mAjE=
Subject key identifier:   22:66:33:19:E1:38:C2:B4:7B:DF:3D:AD:C9:B3:E6:8E:8E:CC:CF:E9
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328584EA79BBB28824522A385760757
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7150d8e2-6e23-357a-a201-8d89a8a43e6f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     265867
IP address blocks:        104.129.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:bb:28:82:45:22:a3:85:76:07:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5aa315ed-84af-4281-ba97-bdae69e69ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:dd:e2:dd:31:62:bb:6c:a0:4c:05:2d:fd:
                    b8:07:d8:46:20:c9:b6:78:9c:4e:10:b1:6d:56:13:
                    99:d4:7c:24:fd:9b:5a:9f:14:be:91:26:bb:32:05:
                    e5:d1:ee:31:44:4c:f6:7a:57:c3:bb:c3:35:26:97:
                    f5:48:33:83:67:a6:b2:24:fc:a4:c0:77:75:0f:96:
                    a7:7d:00:f8:ac:6a:14:5a:a6:d8:72:a2:e5:f0:57:
                    d7:3f:8f:9e:b8:ed:9f:ca:ff:6a:da:ac:fd:84:78:
                    4e:5a:16:e4:a1:8b:45:91:c0:4a:07:e7:10:39:5b:
                    b5:6c:bd:97:9e:9c:e0:97:51:c3:8c:53:c3:c2:b5:
                    a0:59:b5:a3:a0:8c:21:55:65:b7:ff:4e:d6:4a:25:
                    da:c9:7b:04:55:d5:42:14:da:88:0b:1b:e0:79:4c:
                    0a:9d:88:04:85:6a:19:4d:36:e5:52:ea:53:53:ae:
                    ea:1d:54:aa:30:64:69:e5:99:bd:93:22:5e:11:16:
                    1f:16:86:5c:ca:e6:ef:92:8f:91:2f:b5:c7:e5:40:
                    8b:e1:86:f5:01:eb:41:09:e2:d1:cc:0c:dd:18:14:
                    0c:5e:8d:95:03:2f:b9:11:cd:83:4c:77:0d:74:5c:
                    12:43:8e:05:0b:ed:36:73:fe:68:04:68:26:0d:27:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:66:33:19:E1:38:C2:B4:7B:DF:3D:AD:C9:B3:E6:8E:8E:CC:CF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/7150d8e2-6e23-357a-a201-8d89a8a43e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:f9:0b:b4:4f:18:e1:cd:1c:e7:dc:a5:fa:d6:84:2e:d9:
         fd:b8:7f:60:9f:1e:5b:46:36:8b:70:06:56:61:ac:19:11:f1:
         65:26:93:ea:67:12:9a:5b:e1:19:ec:47:78:91:a3:ed:07:8b:
         54:06:20:d0:2d:5e:ab:22:fc:ce:b3:d7:73:c5:8e:de:8c:50:
         00:94:6c:e9:e0:37:9e:28:bb:76:11:1f:45:67:85:aa:0e:bd:
         c4:a9:08:ae:9b:7f:58:44:b0:53:71:48:be:b2:ca:93:3d:ec:
         c0:80:e2:6a:9a:e6:f4:74:62:52:f9:96:49:83:36:bd:2e:f7:
         c5:71:bf:14:3f:06:fd:5a:b0:91:e5:4c:4a:86:77:6b:90:73:
         af:f8:d9:05:3e:8a:6d:38:64:f1:bf:9a:7c:1c:df:29:24:48:
         34:52:6b:d0:a3:37:9f:5f:00:42:68:01:d4:8c:34:b7:e8:82:
         ad:09:44:66:2e:3c:47:dc:d9:b3:f9:d6:e8:3b:28:91:a8:6e:
         7e:37:e9:f6:79:5c:c0:26:9c:9f:6e:d1:4a:96:7e:fd:e5:96:
         92:f3:34:7f:90:54:a9:ef:26:9a:b9:3b:a3:ae:7a:4c:76:f7:
         5b:3d:51:a2:2a:ef:a4:14:3b:56:2d:48:fb:6d:ca:d2:6e:2c:
         a3:de:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:55:02 2026 by rpki-client