Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249e374f-b8a7-3335-b0b4-cf19d6fa06cd.roa
File:                     249e374f-b8a7-3335-b0b4-cf19d6fa06cd.roa (raw, json)
Hash identifier:          IXrIe9XZyuPQqizGZGNDhvAB6S+lEMWsHetMQeaysrs=
Subject key identifier:   6D:50:B1:36:3D:DA:70:0B:69:CD:52:59:C5:53:21:23:31:8A:46:92
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584ED58C4A5D41EE43148D9A60F0
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249e374f-b8a7-3335-b0b4-cf19d6fa06cd.roa
Signing time:             Fri 14 Aug 2026 12:38:22 +0000
ROA not before:           Fri 14 Aug 2026 12:38:22 +0000
ROA not after:            Thu 12 Nov 2026 13:38:22 +0000
asID:                     7459
IP address blocks:        173.0.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:8c:4a:5d:41:ee:43:14:8d:9a:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Aug 14 12:38:22 2026 GMT
            Not After : Nov 12 13:38:22 2026 GMT
        Subject: CN=0a67dcdf-35b1-4349-a3aa-b0a0946f3242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:75:47:ac:36:63:71:38:5b:cf:e7:ef:71:
                    83:bd:8d:91:ff:18:7d:28:28:2d:9e:49:97:96:49:
                    3f:4c:62:ed:6f:24:79:68:f3:ed:36:fd:c2:d4:76:
                    57:33:0f:cc:cb:ec:fa:0b:81:35:d5:c3:06:59:c1:
                    92:64:7c:3a:a0:0b:40:1e:0e:e0:b5:3a:4e:c2:a5:
                    cb:b4:5d:a8:f4:75:af:52:4b:17:09:1f:4c:c5:0b:
                    11:90:dc:09:ee:9e:a2:f5:1e:cb:bc:46:7f:81:84:
                    92:58:8e:ad:68:50:59:fb:b7:36:b4:e6:38:91:ba:
                    1b:6c:de:95:96:f1:18:7d:41:c3:ca:6f:50:85:da:
                    2e:af:c2:06:21:b5:a5:e4:d9:28:ce:af:7d:cb:25:
                    29:ac:63:aa:45:98:c7:6d:33:3d:5c:a3:69:9c:19:
                    35:f0:91:69:8e:ca:bb:ca:3e:4d:11:72:64:9a:58:
                    51:62:10:da:63:1a:63:ae:ea:f5:46:eb:67:b7:b7:
                    83:fc:c8:86:58:17:04:12:a0:e5:97:03:bb:93:0f:
                    38:77:46:db:41:29:7f:85:5e:62:22:4b:f4:b8:d5:
                    24:ca:79:07:47:2d:ac:79:f5:22:e7:bf:1f:af:7e:
                    06:90:50:c3:1b:a7:b8:8f:dd:69:83:e8:e9:96:00:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:B1:36:3D:DA:70:0B:69:CD:52:59:C5:53:21:23:31:8A:46:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249e374f-b8a7-3335-b0b4-cf19d6fa06cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:69:28:e5:42:3e:83:e1:64:05:67:18:ed:ab:82:ea:91:
         02:01:ab:31:c6:25:10:a3:bb:d1:15:c1:10:c1:37:28:73:e1:
         76:4f:32:a7:2b:5e:2c:a3:b5:c6:0a:5e:f6:0f:83:d8:1f:f5:
         5b:8d:1d:15:98:3c:c3:5f:d5:5b:a7:38:3c:07:db:50:22:0f:
         1d:41:01:8f:34:32:2c:90:f4:4e:17:3d:f2:07:84:84:62:d0:
         7d:e6:22:81:b4:59:4d:26:fc:d0:b7:92:a8:68:90:74:6f:e2:
         2d:fe:f9:c5:10:69:78:51:f8:db:47:18:99:8c:13:f4:e6:3e:
         a3:17:e9:9f:70:ba:f4:1a:58:e2:8b:e3:50:a1:4f:e5:cc:30:
         4a:15:ce:3a:a6:57:fe:c2:20:0d:09:11:22:21:e4:e9:ca:e1:
         65:89:33:c3:8c:07:46:8f:18:33:17:b2:69:0b:24:61:7d:88:
         03:66:80:87:78:22:38:bd:6d:55:c2:ec:67:6a:e4:b2:fb:71:
         f8:86:79:8d:c6:d9:0f:32:4b:62:de:83:8a:7f:95:45:f0:2c:
         fb:2b:dc:98:a6:a0:94:ed:d3:4e:1e:aa:d1:37:23:bb:48:f5:
         69:5d:15:04:d5:a3:7c:0c:0b:e3:a7:65:7b:57:81:2e:60:0f:
         fc:4a:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:15:05 2026 by rpki-client