Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa
File:                     79a51892-55ea-3370-9e2d-09102a1cc80b.roa (raw, json)
Hash identifier:          6CF+bGaKADFJc5MssarQG05B0m5ZZ84JA3H1vBPMgg4=
Subject key identifier:   D3:4D:56:02:28:52:78:84:2A:86:40:E2:44:C9:67:12:1C:71:DE:29
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584E84B0D299B36151F80B468300
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa
Signing time:             Thu 16 Jul 2026 13:31:29 +0000
ROA not before:           Thu 16 Jul 2026 13:31:29 +0000
ROA not after:            Wed 14 Oct 2026 13:31:29 +0000
asID:                     7352
IP address blocks:        104.166.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:b0:d2:99:b3:61:51:f8:0b:46:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Jul 16 13:31:29 2026 GMT
            Not After : Oct 14 13:31:29 2026 GMT
        Subject: CN=f00784e5-f141-4a3c-b51c-505b1e6ed2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:b9:25:21:f3:c7:6f:e9:fa:42:5b:69:be:
                    53:f0:26:f8:2e:58:26:45:a4:c8:9c:4b:cc:b6:2a:
                    70:37:93:fd:53:a4:69:3e:c6:ba:10:84:59:d0:95:
                    4d:ce:c9:7c:25:3d:74:c5:36:85:cd:97:48:02:e6:
                    2c:ec:fb:c9:89:fd:fc:84:ed:e3:7a:5f:e6:2d:dd:
                    7d:cc:0f:b4:3e:43:ca:23:8c:ca:c3:14:c8:16:18:
                    cc:85:94:a3:b7:e4:e5:8f:24:cc:87:e4:b7:70:8e:
                    37:4f:be:13:fd:17:3d:56:2c:50:43:7d:8d:d9:04:
                    f5:8a:94:55:ac:09:0c:13:b8:64:db:2e:5a:e7:e2:
                    99:b3:ed:ab:68:27:aa:a3:6d:45:1d:f8:90:0e:81:
                    7e:30:fc:e7:32:83:e6:c1:b4:f3:7f:34:96:a4:9c:
                    99:9b:d6:f0:06:18:fb:ef:76:58:46:2f:38:87:a9:
                    21:33:4f:42:d1:5d:63:c3:2f:0e:38:79:b0:6f:5a:
                    07:ee:36:85:da:99:ea:eb:f1:4e:43:36:d7:30:e8:
                    d8:52:f5:ef:89:04:58:2b:d0:6f:04:bd:89:55:d6:
                    81:90:f8:56:d5:fe:bc:fa:6d:e0:f9:1c:4b:a5:f8:
                    f3:dc:36:13:48:13:d9:fd:dd:70:ed:67:71:6d:88:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:56:02:28:52:78:84:2A:86:40:E2:44:C9:67:12:1C:71:DE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:fe:b2:f1:94:28:c4:ef:de:17:00:03:40:2f:92:c9:eb:
         84:66:48:8b:b2:72:d9:79:0d:64:29:45:b8:d8:cc:a8:7b:da:
         ea:26:61:9d:8a:06:5e:83:3e:80:6c:7a:ec:3a:f8:43:b6:91:
         f6:23:99:50:c8:57:3d:1e:90:c3:44:c3:a3:94:9b:7a:df:30:
         fe:70:2c:2b:ad:ae:df:93:b2:f6:38:5e:0c:e7:c8:52:27:dd:
         5d:fa:51:c1:ad:b9:10:8b:b0:0d:28:f7:cf:12:42:6c:fd:15:
         8b:a9:84:73:d4:44:0a:33:f5:62:1f:ac:a6:5e:cb:60:af:71:
         36:13:31:e2:02:7e:52:76:96:09:0e:05:72:d7:49:5e:dd:e1:
         26:e3:a7:2c:d4:37:e7:40:35:ae:3b:28:d5:24:d5:01:3a:66:
         73:c3:50:c0:00:6a:85:5f:99:3b:bf:fb:3c:a6:ea:fd:ba:e2:
         44:71:f2:b0:82:32:6e:1f:9b:92:d5:57:38:bd:91:d5:c0:6c:
         b2:6a:7a:64:0f:ff:a2:94:24:b3:99:01:fc:2f:5a:c8:06:47:
         af:37:03:1a:a7:3f:76:33:7f:ac:6b:ed:e8:76:08:4e:6f:6c:
         d3:4f:14:2c:71:fe:a7:2e:f7:cc:fe:92:50:3d:b6:dd:7d:b4:
         fc:0e:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:33 2026 by rpki-client