Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa
File:                     4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa (raw, json)
Hash identifier:          L0t2kiJyreYmfMIH7VzvWExaThfNf2ImuxbDs5Pp+Bg=
Subject key identifier:   4A:36:4E:7B:5C:BE:5C:58:39:7F:D7:62:8A:1E:D1:69:C0:53:A2:50
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584EA79C9F40F15AF32A38526B40
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     393262
IP address blocks:        216.122.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:9f:40:f1:5a:f3:2a:38:52:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=355adaae-bd16-4606-9ee6-fa7d99be3c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:a1:30:b7:dc:7f:25:42:d5:4a:e5:00:23:
                    22:8c:84:2f:5e:f6:06:e8:67:4a:d3:c9:9d:58:c2:
                    4f:c6:e6:3c:87:81:ba:20:13:a5:67:02:d1:00:b4:
                    65:6f:7d:f2:ff:69:a5:46:0a:54:8e:42:5c:51:81:
                    92:dd:b3:78:25:51:c3:de:2e:83:90:6a:68:4e:50:
                    18:27:b4:cb:63:fa:c9:1d:15:d1:a9:db:28:bd:4c:
                    d4:02:a8:f3:86:db:92:f6:24:67:4b:11:8b:8b:4f:
                    93:a5:fb:27:8e:43:e7:e2:2f:4f:32:5c:e3:61:bd:
                    72:94:57:c2:93:0c:51:51:0d:23:7d:d8:7d:2e:48:
                    5b:32:5d:e7:e6:76:58:d7:5f:2e:cb:ec:ae:e0:c4:
                    d9:5d:bb:18:e1:04:81:c0:3e:9b:7e:7a:86:70:f0:
                    8d:35:7d:7f:81:36:aa:a3:77:c8:11:77:6f:eb:3e:
                    a5:e6:f2:4c:dc:47:22:08:57:d4:ad:88:8d:ae:f6:
                    01:08:9d:fb:32:22:dc:06:81:36:b6:24:0d:6e:67:
                    94:ad:e8:b4:ca:1b:07:2b:0e:75:6e:1f:e5:b5:3e:
                    0c:f5:5e:8e:ad:3c:30:35:a1:46:0f:60:ff:b5:43:
                    e0:c3:45:3f:22:7a:81:0a:e1:cd:22:3f:bd:ef:da:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:4E:7B:5C:BE:5C:58:39:7F:D7:62:8A:1E:D1:69:C0:53:A2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:4f:b1:3d:3a:54:e5:4c:4d:65:34:10:8d:b2:98:68:6a:
         03:29:35:62:70:52:58:b0:15:28:89:7b:62:97:5e:aa:f5:8e:
         81:19:6e:8a:a2:a1:5f:93:8c:02:78:55:bc:57:3f:4f:ab:37:
         bb:62:ae:3c:7a:47:aa:4c:17:92:1d:41:e3:ab:37:16:28:c1:
         84:89:51:59:47:c5:57:6e:9b:6b:06:c8:97:29:ee:b5:7f:f2:
         96:ef:20:d2:aa:61:eb:db:70:5b:40:4d:50:d6:c1:b3:0c:b2:
         f5:a9:b0:6e:35:b1:1e:c3:7f:0e:41:34:75:a8:5b:1f:21:09:
         81:c7:06:61:3b:a7:e0:a2:95:07:99:57:9a:06:d4:3e:b3:8e:
         4e:01:ad:15:44:b2:2b:d6:80:ca:d4:05:3b:d7:8e:85:23:84:
         a8:20:ed:59:16:38:84:68:8c:56:68:39:4e:a8:c6:b0:26:2d:
         16:ad:10:a4:32:3d:35:b1:12:b2:21:d6:78:d8:9f:77:15:56:
         14:32:f7:82:19:3a:be:22:72:69:03:4f:1d:de:3d:4e:8f:52:
         64:9c:a2:cf:44:71:d9:f1:79:53:ad:66:38:ab:0f:e1:1d:37:
         17:a2:96:c3:11:2f:f5:5f:f8:2b:1f:77:31:38:5c:4d:a7:c4:
         22:21:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:04 2026 by rpki-client