Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/ce2b1426-8a3f-3866-93c2-720934772dea.roa
File:                     ce2b1426-8a3f-3866-93c2-720934772dea.roa (raw, json)
Hash identifier:          gegwqJrexVz6KRUDx0a5A4WPSDxF32tdPxusYbqkAWw=
Subject key identifier:   50:CF:42:74:C8:46:A5:3E:E6:6D:FE:05:B5:9A:88:3D:7A:B8:67:6C
Certificate issuer:       /CN=8b5a35ee-86db-4e85-8064-926e18942592
Certificate serial:       010D0C9F4328584EAF0994E89946973CFFCBC220
Authority key identifier: 83:47:FD:3C:F0:2A:F2:17:B5:1C:90:25:91:8F:52:83:63:9C:85:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/ce2b1426-8a3f-3866-93c2-720934772dea.roa
Signing time:             Fri 31 Jul 2026 17:34:17 +0000
ROA not before:           Fri 31 Jul 2026 17:34:17 +0000
ROA not after:            Thu 29 Oct 2026 17:34:17 +0000
asID:                     14131
IP address blocks:        199.104.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:09:94:e8:99:46:97:3c:ff:cb:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5a35ee-86db-4e85-8064-926e18942592
        Validity
            Not Before: Jul 31 17:34:17 2026 GMT
            Not After : Oct 29 17:34:17 2026 GMT
        Subject: CN=d75c23cf-b94c-44e1-99a3-62d139b7b483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:85:7e:1a:67:22:10:4d:6c:3e:c8:b0:87:
                    48:c2:c9:42:cc:db:ac:cf:01:c3:01:6c:e6:79:f8:
                    11:cc:50:b2:67:c0:80:fc:b8:8c:43:ce:1b:b8:c9:
                    bb:49:13:b8:92:52:c4:f1:42:37:1d:71:51:b2:e8:
                    d1:f7:a4:af:86:16:e6:c6:93:b3:59:6f:08:a0:e8:
                    4a:2e:04:1f:e4:9d:3f:86:00:0f:dd:9e:ee:50:ff:
                    f6:24:62:1f:f1:a1:64:03:38:78:9f:26:19:f3:bd:
                    ca:6d:c5:0a:5f:18:99:26:db:14:8b:4b:c9:39:04:
                    db:3f:fa:86:a6:f5:d4:5b:1e:2b:f0:c4:55:f4:31:
                    8e:a1:6a:f8:72:4e:c0:3c:17:ff:08:1a:1e:0c:23:
                    c9:e9:04:da:8f:b8:51:3f:8b:57:7b:da:98:d1:45:
                    99:d5:02:0f:3f:85:31:39:c0:9c:b3:39:53:60:e7:
                    bf:2e:07:98:95:f7:24:f9:b7:78:f3:ad:b9:c0:86:
                    39:a9:52:14:30:3b:f8:2e:10:1c:c4:2b:73:1f:4a:
                    9f:e0:98:56:d9:43:5c:ac:f3:5a:4c:3d:fc:12:cc:
                    9c:bf:2f:49:c5:f5:e4:8a:06:cd:b9:fb:4e:8a:49:
                    7c:67:8e:3f:18:6b:2e:fa:8a:43:c9:d8:0a:24:b8:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:42:74:C8:46:A5:3E:E6:6D:FE:05:B5:9A:88:3D:7A:B8:67:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/ce2b1426-8a3f-3866-93c2-720934772dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592/8b5a35ee-86db-4e85-8064-926e18942592.crl

            X509v3 Authority Key Identifier:
                keyid:83:47:FD:3C:F0:2A:F2:17:B5:1C:90:25:91:8F:52:83:63:9C:85:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8b5a35ee-86db-4e85-8064-926e18942592.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.104.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:70:39:cd:38:1c:d4:aa:bd:79:b0:97:92:31:db:2a:e0:
         99:74:41:63:23:75:4d:2a:9f:9b:f8:bf:0c:c0:db:0c:5f:30:
         dd:e2:85:a6:da:41:df:46:8b:5d:69:a3:10:58:5d:44:24:81:
         6b:20:24:8d:ca:8c:e4:f0:0c:fb:6e:7a:54:60:62:52:d6:cd:
         90:5c:54:74:31:12:ef:44:10:cb:33:8b:10:07:b0:c8:b5:cd:
         cf:40:46:7b:a0:13:33:69:7d:3e:05:99:c4:9f:95:d0:ef:49:
         43:ac:26:44:ef:a0:47:36:45:5d:b8:51:c4:78:bc:47:46:9e:
         8d:d3:ba:06:53:64:d3:46:18:69:d5:95:d4:47:da:30:9a:41:
         95:c0:5d:6f:2c:40:c6:57:76:24:4e:ff:02:65:11:4f:99:4c:
         45:c3:28:ac:3f:e3:0a:6e:a4:cc:98:d1:d6:76:e7:8b:37:27:
         04:6c:db:e7:44:12:84:61:1f:e6:fd:79:d2:71:6f:21:ed:b6:
         4c:32:fb:39:ac:03:83:66:2a:35:71:62:56:03:41:c0:d0:a4:
         ec:a0:82:a7:18:56:14:d5:df:6e:a4:2c:d0:22:1e:92:61:6b:
         13:af:6b:9e:04:5b:99:de:56:51:e8:16:04:c7:2a:3a:29:e0:
         9d:82:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 00:49:40 2026 by rpki-client