Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/dd8d1daf-cc86-3b63-a13d-fc35cab3d7cf.roa
File:                     dd8d1daf-cc86-3b63-a13d-fc35cab3d7cf.roa (raw, json)
Hash identifier:          IhjrLVFN27hDsiKb6ofcL308jjvE1cR7zOBrDcR0YI4=
Subject key identifier:   04:43:48:B6:B5:E5:05:45:5F:39:0D:40:B7:35:98:B1:61:FA:08:E7
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584F7782D6BC76BAAD8B85A2ADC0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/dd8d1daf-cc86-3b63-a13d-fc35cab3d7cf.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     142617
IP address blocks:        104.171.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:d6:bc:76:ba:ad:8b:85:a2:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=2b17d216-4217-4e6e-8e1c-0b644f715809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:d5:25:e4:38:75:1f:68:a2:65:eb:60:e0:
                    36:5e:18:01:c9:d9:8e:00:d3:28:74:a6:9b:6a:e4:
                    fe:e3:bd:c5:ff:79:81:33:1e:22:eb:64:a4:3b:53:
                    d0:cc:48:b3:76:d1:61:38:d8:36:ec:6e:9a:3a:aa:
                    11:6d:71:44:16:16:25:60:83:8a:a3:45:9d:ab:3e:
                    1a:ee:14:4a:b9:b1:27:d2:51:bf:ca:dc:8c:5f:18:
                    b5:22:5a:1f:8b:3f:d8:90:45:6a:76:af:36:56:4d:
                    54:a9:2f:ef:06:21:b4:68:bf:08:0a:32:ff:04:6b:
                    c0:ba:65:a0:e6:26:95:ee:d0:c9:25:c9:f4:0d:17:
                    e7:59:24:93:6e:b9:36:24:30:1f:b5:a5:73:91:60:
                    a2:38:9c:b0:c5:c0:21:40:d3:ff:8d:c8:a3:3d:6e:
                    1f:bb:25:59:59:dd:4b:53:12:2a:40:40:da:6d:57:
                    f2:3e:b9:3f:89:66:07:ae:8a:6a:97:83:7b:84:3a:
                    67:54:6d:a5:f4:43:82:36:29:d9:93:18:49:e2:94:
                    5f:26:e8:5e:32:ab:06:4b:3c:24:6f:28:30:a2:cc:
                    92:ff:d9:3a:27:55:f9:96:33:29:b0:f7:ce:59:52:
                    19:e0:04:14:73:29:4c:15:84:91:8f:cd:37:10:fb:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:48:B6:B5:E5:05:45:5F:39:0D:40:B7:35:98:B1:61:FA:08:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/dd8d1daf-cc86-3b63-a13d-fc35cab3d7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:fa:e2:b4:9f:9d:39:f9:b3:76:e5:83:dc:1e:1d:fd:6d:
         93:c2:38:4b:c5:7a:d0:bd:f3:87:b5:6a:b0:2c:8f:98:be:5b:
         0c:56:8e:84:50:96:bc:6d:a2:a4:9b:b1:be:9b:d7:ca:88:af:
         0c:73:e3:12:d7:44:9e:b2:05:13:12:40:39:4c:f0:96:4e:fd:
         0d:69:54:01:05:34:5f:a9:94:44:64:a1:e4:4e:cc:62:87:a9:
         92:17:02:33:19:b2:98:a1:b0:46:ad:03:ff:0d:24:5d:5a:96:
         b5:fa:b7:78:e9:ff:8d:29:1c:98:f1:2c:02:c7:3b:62:21:22:
         fc:31:21:69:e6:aa:ec:1a:19:8e:8d:1c:af:7d:65:9e:38:96:
         0b:1e:ea:e2:e5:54:db:eb:7b:ea:f2:c1:e4:4a:0e:98:31:f7:
         35:47:95:3e:fe:08:58:98:1d:4f:61:2d:03:bb:f0:bb:19:ba:
         78:c9:47:f6:0e:99:a2:80:53:89:c9:8b:2f:a6:6e:ce:5d:bb:
         cc:a1:f5:aa:e5:37:8e:a3:45:49:f5:f9:9c:5f:33:22:1b:3b:
         df:e9:2c:b9:0a:9f:db:3f:3d:2a:3c:8c:c3:d4:8a:24:66:04:
         3a:c6:1b:62:6b:7c:d9:0f:6f:b2:90:70:31:99:2e:b4:78:10:
         0f:64:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:23:46 2026 by rpki-client