Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa
File:                     f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa (raw, json)
Hash identifier:          E0xXpg557k6PcVlGXfLqD5la3up3bWEPn3LI0D/oMNI=
Subject key identifier:   BF:D6:36:75:E5:A0:84:53:F2:20:8D:2A:46:BD:FA:E5:C7:57:00:34
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584EA786E99DD569D6D213B6E000
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30513
IP address blocks:        204.8.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e9:9d:d5:69:d6:d2:13:b6:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=833f70bf-5225-4a64-bd74-af1e8dc60341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:ef:72:1b:37:03:e3:78:d8:3c:6f:2c:de:
                    c8:5b:48:f1:35:bb:a5:43:8b:2a:12:ff:3a:15:5b:
                    85:bd:fd:8d:0c:81:9e:41:89:70:6f:0e:ba:00:1a:
                    fc:49:41:11:6a:de:fb:54:bd:52:e9:e4:b5:e8:f3:
                    2d:77:ba:42:a4:89:96:16:7d:67:61:7c:f8:fe:72:
                    6b:01:80:55:05:bf:a2:52:81:47:f4:c4:a0:83:b1:
                    b1:41:9c:55:4b:a3:22:a6:e2:53:1d:4e:12:49:26:
                    8a:b4:0c:24:51:ae:ba:c5:e3:7a:3b:36:57:1f:8b:
                    d8:a1:34:67:6a:61:89:df:bd:be:f4:20:06:75:df:
                    c8:a7:a0:3c:6d:56:1c:8d:54:4b:99:7e:58:10:19:
                    a2:2c:f2:c0:df:83:1f:52:14:ea:f1:6c:93:41:7b:
                    8b:de:a0:1a:e7:aa:47:90:22:34:47:10:5f:8d:bb:
                    2d:bb:47:1c:70:05:ec:11:d5:34:a4:13:6d:cf:39:
                    d7:eb:00:78:a0:ab:87:ae:20:b4:bb:12:1f:8e:c6:
                    fb:91:46:56:8f:25:02:4f:de:7b:5b:ec:cb:b5:0a:
                    4e:76:81:38:d9:c3:b9:a5:f9:d2:03:ab:68:f3:87:
                    d3:cc:eb:87:c6:e5:55:ba:cb:34:76:12:22:79:92:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:36:75:E5:A0:84:53:F2:20:8D:2A:46:BD:FA:E5:C7:57:00:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:f3:27:1d:f1:4e:30:8c:1c:88:52:b2:5c:a0:c6:0c:5b:
         a8:18:32:ac:df:e6:46:55:1d:1f:3f:d0:32:40:5a:bf:41:4c:
         f4:c0:d1:01:81:7c:91:57:48:33:2d:1f:6c:3e:10:de:0d:84:
         05:bc:a9:d8:4c:f2:a2:bf:4e:97:59:a7:61:de:f3:74:4a:63:
         a1:b6:4f:2d:d0:a2:9a:54:bc:4b:73:5e:87:ae:22:23:74:8b:
         e0:51:46:c0:13:4f:f8:ed:fc:87:67:63:d6:fe:09:46:f0:ec:
         fe:46:f5:54:8a:78:38:5e:28:40:72:16:29:92:21:a9:e5:0c:
         1d:7c:08:0d:52:14:5d:54:36:c0:92:e9:0e:35:49:ad:42:c2:
         0e:e1:68:44:ea:fd:7b:f8:a3:4c:b3:40:59:40:d6:5d:9f:66:
         b4:63:5b:c0:3e:0c:ae:29:d9:89:7f:36:5f:2d:52:35:5e:04:
         65:1f:54:c4:70:9b:59:6c:a5:c8:84:3c:b3:65:12:c4:7d:e4:
         93:ed:e7:24:82:a4:72:62:4e:d7:6e:80:b8:38:39:5a:c6:21:
         f7:28:e7:e9:ba:93:39:fa:ea:1e:1a:81:dd:58:0d:70:08:2c:
         dc:62:52:91:5a:47:19:8e:5f:8a:a5:03:27:7b:5a:5e:b5:d8:
         ae:39:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:33 2026 by rpki-client