Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa
File:                     ddb04251-90f5-3588-956d-3043b86ff3dd.roa (raw, json)
Hash identifier:          JNjFFIol9rEH51CXW1t+9gCLhs2/pl7fkyZ1Vlk+gnw=
Subject key identifier:   B1:C3:47:AD:00:3A:CF:DB:54:F1:B1:34:1E:5F:1C:41:45:A8:C2:29
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E8FFB2B7AD1B659D02D262540
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa
Signing time:             Mon 20 Jul 2026 14:35:11 +0000
ROA not before:           Mon 20 Jul 2026 14:35:11 +0000
ROA not after:            Sun 18 Oct 2026 14:35:11 +0000
asID:                     10279
IP address blocks:        164.153.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:fb:2b:7a:d1:b6:59:d0:2d:26:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 20 14:35:11 2026 GMT
            Not After : Oct 18 14:35:11 2026 GMT
        Subject: CN=c835b2e8-ac65-4583-92f5-23df72d6f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:d7:06:32:5c:34:99:4e:bd:cb:7c:6d:5b:
                    45:92:ee:8a:5d:2a:ab:fe:ad:5f:68:9b:ca:f6:ad:
                    2d:e6:13:bc:7c:4c:02:3b:2d:84:5d:91:94:3d:ab:
                    13:e2:7b:da:7d:e4:32:c9:84:62:93:00:51:1c:68:
                    1c:6c:c3:ac:21:7b:6c:44:65:b2:8c:b6:6a:00:e7:
                    07:80:12:a3:43:a9:97:bb:f0:01:5b:35:63:de:10:
                    e1:ac:37:0d:b4:d5:c9:1b:13:44:3e:90:f2:06:e0:
                    23:00:7e:93:48:4a:c4:da:6e:20:20:f3:a5:cd:64:
                    70:fc:c0:34:d4:08:1a:52:a9:ad:db:51:35:0e:f8:
                    bd:fd:6b:d0:f2:26:77:1b:51:eb:d5:af:27:03:16:
                    84:f5:f2:ec:9b:74:05:1f:70:1a:a8:96:ed:b0:0d:
                    c2:91:c3:45:ed:11:8d:5d:9d:28:d8:9f:5b:bc:cf:
                    d5:d4:0b:40:58:cc:b6:e5:67:30:cb:f3:eb:fc:e5:
                    5d:f9:59:73:a1:c3:38:0b:18:62:c6:af:97:fa:a3:
                    5f:68:1c:6c:5a:10:22:58:44:aa:34:af:19:a1:58:
                    70:2a:0e:48:e9:f0:17:3c:30:a7:ba:04:fa:b5:d6:
                    fb:7b:af:76:eb:e0:f9:bd:a3:99:11:11:42:a3:9a:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:47:AD:00:3A:CF:DB:54:F1:B1:34:1E:5F:1C:41:45:A8:C2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ddb04251-90f5-3588-956d-3043b86ff3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5e:b8:a4:40:c3:93:e3:1e:6e:02:2d:2c:70:dd:7b:68:2f:
         f7:60:70:51:d0:53:d6:18:30:29:42:29:92:5d:f7:a3:bf:9c:
         5f:e1:f4:66:e0:5c:2d:74:e6:6b:5b:03:d0:b6:7c:77:03:ec:
         01:fb:7f:0b:48:d6:48:ab:9e:78:04:69:f0:8c:c6:41:98:81:
         ab:50:b6:39:a2:95:f5:24:0b:90:1f:16:bd:4e:52:9d:05:e8:
         5c:5d:61:ca:41:2e:4a:db:2e:7c:8d:b5:51:a7:ca:ba:c3:7c:
         b5:3f:cb:c0:1c:bc:96:3a:38:10:e1:c5:46:14:07:15:ab:62:
         b7:c4:2e:1b:5f:7f:83:56:75:81:65:01:1b:6f:c1:6d:10:1e:
         0e:4c:62:da:ab:3d:8e:46:23:53:2b:8a:6d:ae:4a:ef:96:09:
         92:11:62:0b:bd:9e:52:8b:76:6b:03:e2:db:9a:3a:a5:28:7d:
         e7:f1:c7:28:13:11:80:72:15:c2:d2:b1:19:5d:95:e3:3b:e7:
         97:26:e4:c6:5c:d8:57:4d:bb:97:5f:f7:ae:d4:a4:ad:24:17:
         19:07:03:4c:5f:9c:9b:f8:0c:e4:55:a3:e3:25:84:ff:3a:42:
         9c:b9:69:c7:3d:cb:bc:62:42:ee:1f:f2:c2:2b:fa:20:3b:94:
         9c:31:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:58 2026 by rpki-client