Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/242e7536-776c-31c3-a660-c62690a93b32.roa
File:                     242e7536-776c-31c3-a660-c62690a93b32.roa (raw, json)
Hash identifier:          4JSVb1SzQ8oS2ry+wg8gwIeLVkFj0UXZiSzRP7vHQaM=
Subject key identifier:   4B:CF:06:AB:15:85:ED:55:B0:9E:60:B0:9C:C9:B2:0B:C3:83:8A:01
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584E84B00882CC3D7FB15C6715C0
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/242e7536-776c-31c3-a660-c62690a93b32.roa
Signing time:             Thu 16 Jul 2026 13:29:54 +0000
ROA not before:           Thu 16 Jul 2026 13:29:54 +0000
ROA not after:            Wed 14 Oct 2026 13:29:54 +0000
asID:                     7352
IP address blocks:        104.166.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:b0:08:82:cc:3d:7f:b1:5c:67:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Jul 16 13:29:54 2026 GMT
            Not After : Oct 14 13:29:54 2026 GMT
        Subject: CN=0182fa82-f65d-4f3d-87fd-d43a65735320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:a3:37:19:70:ab:19:46:e7:10:e7:09:88:
                    6e:28:f0:74:93:78:92:61:b1:6d:4a:7b:1f:b8:61:
                    cd:25:ee:1e:a1:ce:ac:fc:ff:ba:86:d3:48:b4:f7:
                    c9:b4:27:74:14:22:ea:73:3a:02:b6:d8:53:a6:3b:
                    23:a7:ad:a3:a4:0f:ec:40:fd:df:1b:cb:44:28:f0:
                    f5:68:6d:17:c3:35:ee:27:cc:69:54:4f:66:f5:e0:
                    22:ab:71:f6:45:92:57:c5:ec:19:9d:cf:38:52:26:
                    18:e9:74:7f:f1:5d:60:4f:bd:82:30:bb:59:55:f0:
                    fe:d8:e3:7e:3b:c6:7f:d4:f0:de:65:dd:d6:c9:41:
                    d5:0d:19:3c:d6:c7:68:7c:86:5d:07:c3:82:7c:98:
                    45:ce:9a:b3:d8:d4:1d:10:9e:9a:9f:fb:2b:50:98:
                    19:83:5f:fa:b2:88:2d:b7:db:7b:72:f7:c5:c5:14:
                    4f:13:00:13:ad:86:ab:62:35:46:c0:90:bf:9c:c0:
                    18:09:4e:e7:17:dd:55:81:cd:95:d7:71:a1:ce:65:
                    82:92:63:27:e5:62:40:a2:0a:df:fa:92:21:a6:76:
                    f3:fe:df:1e:05:e9:c5:cf:0c:58:d5:1c:1c:eb:da:
                    8d:3c:37:b1:06:ff:b0:83:c0:8e:94:f3:a6:9b:c8:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:06:AB:15:85:ED:55:B0:9E:60:B0:9C:C9:B2:0B:C3:83:8A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/242e7536-776c-31c3-a660-c62690a93b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:4d:66:14:51:9d:ef:e2:71:d1:9f:22:4d:37:27:c2:56:
         ff:eb:a1:02:f2:a6:24:4d:f2:d6:66:ba:b3:3b:7d:64:4e:2a:
         c5:77:06:dc:41:09:ef:8c:71:06:07:a2:ed:d4:a1:7d:21:55:
         25:d5:5e:c9:a5:fb:7d:3c:a5:c8:81:60:85:b8:4f:60:f0:ba:
         7d:fe:68:0c:f8:ab:b5:fa:fe:36:44:60:67:dc:31:f6:c0:cc:
         e1:d0:20:18:66:ee:30:62:55:80:bc:f6:49:33:48:fc:6b:97:
         fa:a1:1e:d7:a3:4c:75:a0:de:9e:57:c7:9e:2b:a3:e9:28:11:
         8b:bd:d4:b4:32:f2:05:61:91:8c:5c:db:02:8f:89:9e:b5:15:
         41:87:76:ca:b2:16:34:cf:75:90:62:fe:3f:5b:dc:18:0b:3a:
         aa:54:b7:5f:25:32:c7:c8:fa:22:7a:cd:4e:31:78:80:97:58:
         26:c4:68:ac:ad:0a:65:51:23:35:15:f2:06:02:45:67:23:39:
         c1:98:86:12:34:c4:ea:00:ce:a9:71:6a:81:d1:9f:b8:a3:1d:
         fd:2c:7e:30:07:c7:ed:d5:51:26:c1:26:1b:40:b6:40:06:f4:
         7b:2f:60:12:a6:1d:1c:66:66:a9:46:9a:f8:f2:f5:f7:71:01:
         41:cb:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:00 2026 by rpki-client