Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
File:                     ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa (raw, json)
Hash identifier:          CZIu7HDta4O7K0MTG20ybcJ+grdVbgbdRdoOgMhkosc=
Subject key identifier:   76:94:1A:F4:79:1E:15:69:D8:64:7F:47:FC:B6:31:D1:25:78:02:D7
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F4328584D8EF57915295BE12B8EFE3180
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     401104
IP address blocks:        104.167.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:79:15:29:5b:e1:2b:8e:fe:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=7c92feba-2fde-4d79-a0c0-2db39cb12c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:18:60:13:83:3c:28:30:d3:29:29:07:27:
                    48:fa:cf:fe:c0:f1:60:91:84:13:ea:4a:ce:bb:fe:
                    10:dc:8c:11:c7:46:08:43:bd:0d:db:17:e4:9d:c1:
                    c5:ef:9f:75:6c:35:bb:22:95:9b:31:7d:68:fc:49:
                    89:c4:8a:9f:20:03:55:54:e7:54:7b:2f:cb:ea:61:
                    6b:43:db:d1:e8:9e:08:03:b7:67:8e:7f:83:f0:9e:
                    11:aa:22:18:e4:b5:f1:83:d4:e9:46:83:e5:1b:f3:
                    fe:e6:e2:63:05:7a:63:4a:dd:57:b4:fd:92:4e:93:
                    58:4b:09:98:57:da:11:18:06:27:e6:89:b8:bd:3a:
                    c5:41:76:8a:8f:c1:dc:cb:b6:fe:8a:3d:ab:0f:4b:
                    46:9b:70:4f:4a:47:4b:81:9a:47:e4:91:4b:91:96:
                    dd:24:0c:02:96:bd:9e:c0:1c:d0:aa:22:17:37:4e:
                    13:20:0a:5a:e1:0e:85:2b:df:e8:ee:50:2e:98:aa:
                    a9:e2:39:3d:59:00:2d:9a:e7:d7:a0:d9:73:8b:12:
                    eb:ed:ae:e5:43:eb:6d:7c:a6:91:6a:db:37:f1:7a:
                    da:69:82:77:08:55:8e:ab:74:58:d8:7f:50:e8:c9:
                    fb:71:e3:ad:42:8e:fe:3d:84:e4:d3:af:db:ca:11:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:1A:F4:79:1E:15:69:D8:64:7F:47:FC:B6:31:D1:25:78:02:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:2e:45:00:23:d5:a0:49:95:54:0c:57:7e:d4:99:69:44:
         7a:d7:78:cb:20:d8:71:e1:b5:21:45:d5:07:2c:b7:1a:1b:e4:
         b9:3f:70:20:ab:d4:4a:6a:cb:59:70:57:39:0f:7c:29:f1:07:
         9e:9c:da:c5:28:62:ec:2e:02:85:18:48:ca:44:00:48:e9:0f:
         eb:e6:9e:f9:79:8b:ad:87:e0:8b:89:4f:5b:9e:55:49:fb:d5:
         b5:b5:73:bd:d8:33:1c:99:9d:80:10:73:1f:a5:a9:f2:d5:08:
         57:79:87:b6:2a:49:1d:96:ca:ce:77:1e:f4:e1:db:30:5d:d9:
         bb:8c:e7:43:ef:9b:bb:d2:29:df:c5:14:8f:08:b2:33:90:96:
         94:ae:5d:46:ff:2a:d6:0a:ee:c2:a0:0c:e7:21:18:2a:69:5d:
         f7:65:a8:9f:f2:8f:2d:6f:d7:71:a1:ed:ef:78:07:81:81:cc:
         29:63:3b:0c:dd:af:32:af:c6:17:fc:cc:99:36:1f:1d:3c:ce:
         bd:71:0e:55:6f:77:a8:42:4d:d9:0d:12:3d:4c:72:80:d3:ef:
         5d:d7:68:2f:94:18:f9:36:ab:46:9b:b1:e4:76:e1:72:67:c8:
         5b:f7:82:1f:a5:3c:0d:79:1e:be:21:d0:3f:bd:d1:5b:6b:47:
         8e:66:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:26:51 2026 by rpki-client