Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fd58ad01-b8b5-31f9-9575-c8c6a17d7d22.roa
File:                     fd58ad01-b8b5-31f9-9575-c8c6a17d7d22.roa (raw, json)
Hash identifier:          wvwby8MnQOjxHUx3HVjd20rvca11lKiiM2c9Ns+/PwA=
Subject key identifier:   6F:FA:B7:E6:DF:E9:48:8D:B8:74:CB:69:EA:EB:AF:A2:73:84:8D:67
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EF0569CF5512B478BC241A4B0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fd58ad01-b8b5-31f9-9575-c8c6a17d7d22.roa
Signing time:             Mon 24 Aug 2026 02:57:02 +0000
ROA not before:           Mon 24 Aug 2026 02:57:02 +0000
ROA not after:            Sun 22 Nov 2026 03:57:02 +0000
asID:                     3257
IP address blocks:        104.166.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:56:9c:f5:51:2b:47:8b:c2:41:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Aug 24 02:57:02 2026 GMT
            Not After : Nov 22 03:57:02 2026 GMT
        Subject: CN=6a668d06-1f06-4ac6-b828-5bd19066d3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:d3:f2:ee:89:76:63:74:9f:2a:4d:89:58:
                    7d:fb:21:11:95:b0:3f:79:7d:67:8e:00:c4:bb:7b:
                    d9:11:b9:61:e3:c8:c1:3d:80:ff:f1:e5:1f:78:98:
                    47:34:18:ef:c5:f5:63:28:8f:5c:d3:35:aa:69:c3:
                    9f:fb:4e:ac:e9:cd:50:fb:e0:7c:f2:b4:be:23:a2:
                    89:62:d0:52:5b:35:c0:50:3d:30:e3:65:a4:59:23:
                    d6:6f:68:04:e1:63:15:00:54:2d:b9:e0:6f:26:7f:
                    21:ed:78:e6:1f:35:01:99:9c:2d:08:6a:e8:94:34:
                    a0:fe:35:44:b7:c1:33:9e:72:7a:df:46:dd:f2:99:
                    19:d4:8a:e0:50:e9:19:2d:a4:3a:9f:44:7a:5d:d6:
                    b1:64:0e:83:e7:fa:d2:7f:b3:de:2b:12:a4:26:a8:
                    8b:9c:70:e3:a4:2f:d1:75:27:32:00:af:f3:ff:fa:
                    bc:60:5a:3d:af:3f:0c:70:de:7f:a0:4b:40:04:c4:
                    44:6e:2f:7c:91:ca:e2:58:4a:c9:e0:ae:bd:6e:a6:
                    e4:7f:79:85:e4:f2:f9:ab:2c:98:86:0b:cc:6f:48:
                    bf:60:37:d3:37:82:8d:52:c7:a9:98:25:a1:f3:dc:
                    c0:68:43:0c:79:9d:05:f3:3d:9f:3b:d8:70:94:da:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:B7:E6:DF:E9:48:8D:B8:74:CB:69:EA:EB:AF:A2:73:84:8D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fd58ad01-b8b5-31f9-9575-c8c6a17d7d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:d1:30:08:5b:76:7e:c3:14:e3:f0:b0:83:d6:8a:0e:dd:
         6d:27:73:df:81:7b:02:d0:6c:96:05:39:0a:71:a1:df:56:4f:
         7c:cb:57:fd:c7:35:ae:d4:75:ba:77:f4:b7:cf:68:dd:fe:07:
         ef:81:21:fd:1f:ae:ff:d4:d5:df:f3:e6:89:8c:b3:60:b7:bd:
         00:1a:2e:d8:2e:25:49:1f:c5:3f:16:62:cf:42:4d:48:90:1b:
         f1:6d:d3:c3:3f:a6:f7:f1:43:6e:cc:5e:71:4d:ab:6d:88:ee:
         0f:65:9b:65:66:4c:2a:81:98:88:21:bd:cc:a8:f0:ba:2a:e8:
         78:74:3e:f9:67:5a:73:e6:99:73:21:5b:19:ee:17:9f:f6:8f:
         31:7d:68:2a:48:43:30:65:de:36:3b:52:f0:ac:86:24:2c:55:
         86:6a:aa:cc:a7:11:b5:78:73:81:ea:e1:41:6d:41:d9:e8:94:
         38:6e:14:2e:87:e3:d2:86:16:91:24:ee:ed:86:29:a1:f5:88:
         1b:c4:31:b8:4a:57:1b:0d:43:aa:4b:02:76:3d:6e:84:d9:80:
         1e:6f:d5:13:9c:55:8c:4e:f3:36:71:55:73:00:19:ea:81:84:
         2b:24:48:4c:af:33:18:23:58:c4:f6:1c:f1:13:a9:10:16:6e:
         7d:a6:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:08 2026 by rpki-client