Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa
File:                     d5493c6b-4472-3b6d-b455-daa43223af73.roa (raw, json)
Hash identifier:          8djU27mW1edq/41xPdWfmL6IQZ3rNMT5AXfeoNSLJ/4=
Subject key identifier:   67:15:FD:93:BA:B9:44:CA:E2:BC:46:34:D1:59:B3:C4:DC:F9:C2:96
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584E878D46C4CA94CD2FA3D2D5E0
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa
Signing time:             Fri 17 Jul 2026 14:07:18 +0000
ROA not before:           Fri 17 Jul 2026 14:07:18 +0000
ROA not after:            Thu 15 Oct 2026 14:07:18 +0000
asID:                     7352
IP address blocks:        104.166.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:8d:46:c4:ca:94:cd:2f:a3:d2:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Jul 17 14:07:18 2026 GMT
            Not After : Oct 15 14:07:18 2026 GMT
        Subject: CN=828011db-e2e5-47ab-98ae-041bbe0f11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:a1:3d:e9:ec:be:da:f2:96:b6:20:9e:cc:
                    c0:30:71:e0:78:c2:6f:fd:66:07:47:2e:ca:5c:39:
                    a8:d1:c9:07:a1:a3:ac:53:8d:3e:d6:2f:98:68:d2:
                    1a:7e:1b:81:8b:a7:d5:0d:e4:39:fe:b4:d7:b6:ff:
                    1b:29:c5:96:96:a1:7b:47:c2:92:ea:5d:95:bb:c3:
                    04:f7:86:82:d1:53:aa:cf:14:e6:46:1e:2c:e5:56:
                    20:09:26:db:c4:1d:34:b8:03:51:a2:d4:1d:2b:8a:
                    79:2c:b6:13:a9:3a:91:93:5e:3b:46:1a:b5:20:04:
                    ca:44:68:2e:c7:08:10:68:ca:8a:0f:92:ae:59:dc:
                    39:74:f4:60:32:d4:be:17:13:29:a2:a0:7f:f9:73:
                    1c:2d:c1:eb:8b:01:82:e6:46:ff:9a:f8:39:30:2c:
                    66:2e:bb:d7:2f:7e:95:ee:e5:13:b9:20:df:17:a3:
                    da:b3:71:2a:e7:23:d6:ce:f1:66:be:33:47:8e:a9:
                    57:20:ef:37:a3:0f:10:04:bb:87:9b:6d:23:93:a5:
                    b2:fe:b0:b0:9c:0a:a9:20:b3:6e:91:24:94:98:30:
                    12:9d:be:8b:ce:12:30:d8:60:0c:d8:78:bf:35:e0:
                    58:bf:c7:10:2c:0f:c4:86:74:63:ee:b8:07:2c:f8:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:15:FD:93:BA:B9:44:CA:E2:BC:46:34:D1:59:B3:C4:DC:F9:C2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:78:92:a1:2d:27:2c:c5:82:d2:87:8b:f1:9d:9d:fc:63:44:
         ca:df:e9:bb:5b:4c:8d:31:67:95:58:12:43:3c:af:9a:75:26:
         8f:56:63:93:9b:94:fb:30:17:42:2a:ad:0f:30:21:16:3c:60:
         46:83:06:bd:7c:ba:ed:6e:e8:28:20:8a:6b:ae:a6:55:56:1f:
         33:01:6c:58:13:b8:e3:9e:1f:22:49:8b:29:39:9a:04:41:f6:
         02:f2:a3:34:ef:1d:bc:4d:7f:b9:3e:b0:b8:d7:c1:d2:9e:d8:
         86:a1:3f:2a:a9:63:17:0c:8b:13:ef:51:6f:1c:70:01:76:8b:
         ce:df:dc:2b:40:4c:c7:b6:3b:f8:76:b1:36:19:39:87:35:c5:
         22:31:c3:5a:0f:5e:29:d4:d2:2d:4b:42:55:ee:a6:fd:0d:f0:
         c8:7e:b5:73:b3:ca:6f:ac:c4:d0:2d:dc:74:f6:3d:95:a0:55:
         f0:26:b4:17:4b:e2:f8:9a:ca:4d:1c:83:14:9a:61:1b:f4:55:
         f3:7b:77:5a:6a:9f:0c:dc:f7:5b:4d:22:09:c2:a0:0f:12:c5:
         9f:ee:0a:04:1a:95:7c:42:e0:1f:78:50:ac:d4:fb:4a:ec:bb:
         eb:ed:d6:2a:93:49:a4:0b:00:bf:17:2e:b6:85:8b:84:55:8f:
         34:c1:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:56 2026 by rpki-client