Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa
File:                     7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa (raw, json)
Hash identifier:          kxu/SY9xBtXAES+8BOggvqgDqG0D2PJGP1tkF84bzoA=
Subject key identifier:   0F:A5:D8:4A:2C:BA:A6:8F:BC:BD:6C:4B:ED:F0:21:0C:94:A5:F2:35
Certificate issuer:       /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial:       010D0C9F4328584F119CEF3EC53DF32DC87BEA80
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        104.247.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ef:3e:c5:3d:f3:2d:c8:7b:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=61c6eddc-24d1-43a1-a63a-c1ed48f3c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:90:db:48:41:79:f9:1f:86:54:49:6e:89:
                    bb:f2:5f:4b:db:a6:7c:12:4a:ed:3b:24:4f:ac:ca:
                    b9:f8:2e:6a:d7:d5:83:a5:b1:f0:f8:89:e9:60:d9:
                    91:5d:1e:9e:e4:2c:79:b5:1d:91:1c:81:2a:a1:e0:
                    fb:15:29:5c:b7:77:21:07:55:a5:85:8e:f5:93:ed:
                    03:68:6e:76:53:40:d8:14:fd:83:b8:ba:dd:a2:4a:
                    2c:6a:15:f4:5c:a5:33:3f:1e:7e:b6:7c:1f:80:ca:
                    ad:bc:2f:20:3c:21:70:db:21:a1:50:5f:87:fb:ff:
                    55:4a:a1:71:11:1a:90:32:d5:8b:8d:d6:15:3d:e7:
                    21:40:4e:79:b9:29:2f:a5:37:a9:30:0f:fc:f9:74:
                    53:77:ad:a7:45:c0:c1:00:02:2b:fa:e7:8f:02:60:
                    15:6e:32:b5:5a:2a:d9:4a:f7:7f:67:a9:71:7f:a3:
                    ea:6a:3a:b1:f6:40:0b:6e:13:5a:22:30:df:2c:b3:
                    25:3e:8d:f2:62:e1:e1:73:4e:63:aa:99:3e:33:94:
                    b7:25:49:d3:28:e7:1f:16:6c:d5:57:1f:10:e8:29:
                    f7:5d:30:c0:56:32:5e:4d:01:c9:ee:fa:20:56:01:
                    34:27:13:bc:d0:4d:b7:6f:2f:e5:24:26:ad:da:33:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:D8:4A:2C:BA:A6:8F:BC:BD:6C:4B:ED:F0:21:0C:94:A5:F2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:26:e9:28:f9:fb:9d:9d:dc:41:37:66:34:bf:83:65:0d:
         76:30:70:9e:3b:8b:2c:c8:6f:80:b3:32:8c:b9:fb:d2:46:1f:
         db:f4:3f:54:5d:dc:86:47:b9:88:1b:20:39:11:d6:0a:c0:ec:
         3a:b8:41:c6:54:08:a9:da:37:22:db:a6:4a:e7:47:fe:66:fe:
         9e:ce:a1:0a:c2:d4:3f:19:a3:25:05:4d:05:f5:90:4e:e0:5d:
         cf:51:b1:b1:b0:39:fa:a7:53:7f:e3:8d:7d:e5:61:3a:e3:2e:
         a9:bb:c1:5c:38:44:5f:39:91:f6:b4:95:81:9e:33:20:cc:df:
         be:64:73:6d:90:5a:f5:02:55:4b:67:33:54:52:71:bd:37:e2:
         95:7b:25:68:6b:51:99:67:46:e6:03:8b:d3:c0:da:11:b0:71:
         cb:06:d8:27:c7:f8:df:4f:5c:94:11:8c:ec:81:71:a4:c9:a8:
         68:81:dc:6e:85:07:06:e5:68:e1:47:2d:ae:5a:d3:37:e8:2d:
         a3:22:32:df:b2:28:24:62:b6:00:da:e6:be:93:d8:24:3f:47:
         47:2c:aa:f6:bf:dd:a5:47:ae:4c:29:06:da:97:38:07:f7:9d:
         d5:3a:ae:b0:29:f6:03:80:ad:56:c9:78:49:01:a6:a0:87:14:
         ca:43:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:11:44 2026 by rpki-client