Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa
File:                     ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa (raw, json)
Hash identifier:          PicspJuO+2FFU2dYfWEWNE8RV67YIOZ2+WUch580z6k=
Subject key identifier:   35:AD:37:F6:8C:2B:E2:F0:5F:BA:1E:1B:10:3C:A9:15:9D:E6:36:61
Certificate issuer:       /CN=01442de1-f586-40f5-9267-bc35d3b70cac
Certificate serial:       010D0C9F4328584EA7881FC27863E96185206A40
Authority key identifier: 5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13457
IP address blocks:        104.167.194.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:1f:c2:78:63:e9:61:85:20:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01442de1-f586-40f5-9267-bc35d3b70cac
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=560f1aa8-235b-40b1-b068-7a0aa474324b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:f6:f9:ee:13:37:09:46:8d:37:44:17:d3:
                    e7:61:fc:c8:2b:2c:97:c3:3d:79:1f:41:76:d9:3f:
                    a1:0d:c3:b1:a9:6c:93:28:6c:e1:55:cd:af:4c:85:
                    1a:65:6c:ac:d4:c5:a5:f0:5f:15:38:bd:1f:0c:80:
                    5f:b8:e7:ef:d2:46:f6:b6:3a:ac:3c:bf:d3:43:81:
                    0d:68:24:fb:01:73:e6:15:6c:fc:26:ed:74:76:2a:
                    e7:8e:6b:83:83:6a:39:2f:51:72:4d:9a:cd:66:5e:
                    51:c4:a6:37:3e:82:d5:0f:58:e9:bb:10:9e:5f:90:
                    85:91:cb:cd:12:be:0f:72:05:c9:14:e3:10:1d:88:
                    37:9b:e9:57:f1:0b:b8:0f:64:fd:00:dd:96:97:e7:
                    c4:fc:8a:8b:6b:46:3b:8c:00:78:33:e4:f7:37:e8:
                    05:9f:b9:8b:fc:97:41:2a:b1:47:2f:96:63:3c:10:
                    2d:0b:db:c3:29:f8:db:b0:c5:48:cf:ad:ac:76:d5:
                    66:2f:a4:89:a4:cc:e2:ac:a8:70:5e:f6:13:ac:09:
                    6d:99:67:54:ce:d2:b5:ab:e9:e0:15:e3:2b:02:1f:
                    31:bf:9c:e0:e6:8f:03:14:1d:34:48:b3:ae:e8:3f:
                    4a:87:2b:14:3c:4c:42:35:ca:b7:a9:24:ca:c3:6a:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:37:F6:8C:2B:E2:F0:5F:BA:1E:1B:10:3C:A9:15:9D:E6:36:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:86:9e:d3:1d:90:8d:3e:40:2e:f8:cf:18:2b:6d:24:09:af:
         a1:95:aa:ee:41:0b:d4:0b:6c:bb:98:fb:ae:4b:c0:2d:94:db:
         b4:67:29:13:bc:02:83:6b:27:ae:79:88:f8:fa:6e:f1:cd:e5:
         38:bf:fe:ed:bb:a2:59:1d:34:1b:7a:4a:cc:f9:e1:a5:62:64:
         2b:83:f4:52:ef:7b:4d:db:56:3c:fc:12:c0:7c:e3:a0:05:56:
         56:42:88:f4:84:b8:d4:34:f0:ac:e0:d1:2a:6a:b2:dd:37:ac:
         2c:9f:c0:76:4d:b5:9f:f5:e7:47:08:12:99:fe:ac:d6:ae:d5:
         cd:0d:0e:65:63:b6:19:b4:3e:63:7e:c6:6e:af:7c:3d:4d:72:
         31:4d:48:5e:91:a3:21:54:b5:b4:b7:e5:f3:a2:d2:14:51:05:
         11:6d:34:65:2d:9c:2b:f7:3b:2c:d1:87:fe:b1:19:c6:60:30:
         61:d5:dc:72:88:10:0a:a0:1f:72:45:c1:d1:eb:cd:72:1b:48:
         3c:a2:93:5d:76:58:f6:d6:e2:8d:26:4c:6a:83:0e:5a:00:9d:
         53:91:7b:79:75:b4:23:0f:da:ee:51:23:eb:1c:41:f9:40:3c:
         01:b3:35:1f:c8:2c:35:53:00:b9:97:97:90:65:16:d6:bf:6d:
         00:fc:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:42:10 2026 by rpki-client