Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24129d1d-8bee-3a49-9c26-ee9d3f7e9e8c.roa
File:                     24129d1d-8bee-3a49-9c26-ee9d3f7e9e8c.roa (raw, json)
Hash identifier:          r1eOCN3/jt45wGSit7JzMhjR9EEec13Rcv7s9f+Bud4=
Subject key identifier:   9C:88:A2:95:B5:DF:8A:FA:28:C4:56:61:FD:A4:B4:0F:A5:8C:86:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E8E257084231D7F0F5AC10140
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24129d1d-8bee-3a49-9c26-ee9d3f7e9e8c.roa
Signing time:             Sun 19 Jul 2026 22:48:44 +0000
ROA not before:           Sun 19 Jul 2026 22:48:44 +0000
ROA not after:            Sat 17 Oct 2026 22:48:44 +0000
asID:                     834
IP address blocks:        104.247.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8e:25:70:84:23:1d:7f:0f:5a:c1:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 19 22:48:44 2026 GMT
            Not After : Oct 17 22:48:44 2026 GMT
        Subject: CN=90d2d7d9-a7c5-4716-b338-2c647365aee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:d3:7a:ff:c6:d5:96:f3:50:7a:6e:d7:d9:
                    1c:4d:53:0d:83:fd:a2:67:03:54:96:96:09:8f:ab:
                    f9:5b:2a:c7:a7:49:d4:d8:de:3b:73:73:6c:61:d4:
                    09:a5:eb:f8:6d:76:50:73:81:05:e2:29:10:0b:09:
                    a3:7c:72:e5:ec:4e:52:2c:be:f2:b2:31:e6:fc:60:
                    64:60:74:8b:e6:b9:c2:28:88:69:b4:30:04:7b:f8:
                    93:18:6e:52:16:73:b3:f1:6d:ed:09:5d:02:c9:33:
                    7f:99:4b:e8:e3:bb:b7:9e:b5:1b:99:75:f4:89:83:
                    36:f2:a0:42:d8:d0:22:4e:28:df:2c:0b:84:8e:dd:
                    f9:7e:89:9e:34:08:6a:52:50:e7:fe:a5:4f:ab:83:
                    2d:be:18:d4:87:43:99:a1:ab:28:7c:a0:3f:9d:04:
                    e3:7b:7d:10:eb:7a:09:2f:ab:5c:83:be:3b:1b:dd:
                    7a:bd:90:fc:0b:7e:f8:f8:59:9a:6b:d8:56:60:9d:
                    50:74:78:67:9c:f8:ea:bb:7a:59:78:44:49:10:a3:
                    cf:10:0b:99:bd:23:c5:90:a7:af:0f:0e:74:3a:17:
                    77:e2:2a:da:4e:f0:1f:2a:95:36:b9:ff:36:1c:83:
                    0f:56:42:2d:2b:61:25:24:97:24:ca:f6:ce:f2:6a:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:A2:95:B5:DF:8A:FA:28:C4:56:61:FD:A4:B4:0F:A5:8C:86:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24129d1d-8bee-3a49-9c26-ee9d3f7e9e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:13:ce:65:41:0f:f9:48:31:96:fa:63:04:a3:0a:3f:af:
         9d:34:c4:47:2b:71:b6:0b:c2:9b:14:cc:f7:ba:d8:90:39:97:
         f6:8f:3f:02:56:23:df:7e:d5:60:ac:98:96:b5:f1:7a:52:32:
         e1:56:0c:eb:27:36:18:67:b3:a3:b9:72:f8:03:ce:62:fe:71:
         ed:01:a2:1f:20:cc:81:bf:32:16:ae:52:4c:89:50:0d:5f:21:
         71:d3:c7:b5:1d:9e:7d:b3:ea:b2:7e:69:81:3e:95:c0:9f:74:
         4c:14:57:60:75:c7:a3:a8:d0:81:69:6a:0d:5e:99:df:a5:64:
         1a:54:0a:85:e2:61:da:6c:f3:31:c7:aa:4c:f9:d0:fd:ee:a3:
         61:fd:4c:73:4c:62:2e:5b:0e:f8:2b:d0:e7:f8:46:3d:69:c0:
         12:e8:7b:61:6f:e2:ed:46:08:52:24:09:6f:71:92:02:f9:ae:
         ed:bf:da:ab:60:c8:9f:c6:97:c9:82:1e:26:66:24:b1:af:95:
         a2:71:f4:1f:4a:bb:e2:d0:ef:f2:c2:7a:09:c1:8d:83:eb:b3:
         6c:37:60:cd:2c:55:10:14:9a:b2:0e:98:b6:30:4f:d4:7d:6e:
         21:35:3e:19:29:17:a9:f1:01:65:d3:b5:b1:0d:57:10:27:1e:
         3d:5f:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 21:43:44 2026 by rpki-client