Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa
File:                     e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa (raw, json)
Hash identifier:          4yoUEZUs80UHW3DBgQ0ME/0KMgl0iHSlBbh/Y0nzlh8=
Subject key identifier:   32:4C:1D:E5:C1:E7:9A:82:CF:84:91:AD:E6:63:71:0A:16:F8:77:BD
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584EAFE70AEB9C36D2C314BF7080
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     18934
IP address blocks:        162.208.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e7:0a:eb:9c:36:d2:c3:14:bf:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=6892a858-e27a-41dd-8928-f7201661f741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:f7:b6:a8:b9:ea:b9:e6:c4:d9:b9:4b:25:
                    d4:7d:32:5e:48:19:c5:41:0d:85:08:11:d6:74:e4:
                    9d:7d:13:00:95:59:92:56:fc:2c:85:b2:68:fc:1f:
                    4b:a8:1d:5e:38:99:c7:bd:d7:5d:14:e1:dd:47:7f:
                    99:c0:98:d4:cb:44:9c:9e:5f:eb:41:5d:eb:7c:02:
                    da:b2:6d:36:19:9b:40:1c:0b:1f:82:1c:d9:67:8d:
                    79:92:13:a2:e8:a2:26:b5:39:d5:6c:5c:4d:4d:63:
                    03:7c:a5:3c:a5:75:9e:23:a2:a5:66:c5:95:16:d0:
                    5f:3b:3a:70:c1:4a:b5:4a:53:88:09:99:21:e0:3d:
                    0f:cd:34:0e:1e:cc:50:c9:40:b0:47:2a:c0:b5:75:
                    70:3d:91:13:7c:f7:ef:94:1e:36:9f:a9:cb:eb:20:
                    7b:c3:dc:c6:2c:07:6d:62:e7:16:8a:a0:5d:08:ea:
                    7c:bc:21:1a:49:01:52:8d:e7:dc:a2:16:c3:aa:d0:
                    8d:48:58:e6:19:9a:2e:58:55:e7:aa:b6:c6:fd:da:
                    ea:8e:13:0c:c2:f8:d9:c9:df:c7:8c:96:1c:5f:ad:
                    38:ca:1c:43:e6:9c:8b:4d:6b:39:60:05:b4:98:f0:
                    19:ad:20:cb:c6:4c:ab:1b:94:9d:67:db:66:1d:30:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4C:1D:E5:C1:E7:9A:82:CF:84:91:AD:E6:63:71:0A:16:F8:77:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:a1:63:8c:d9:c5:36:2d:20:91:b2:12:c1:7c:f2:43:bb:
         e6:08:5b:c3:f2:e7:ec:1a:66:fb:dd:5d:88:17:7c:0c:16:a4:
         49:ca:04:14:5b:26:94:68:f6:66:c6:c6:d9:02:a9:6f:b2:0c:
         91:73:9f:83:f1:a8:f1:0b:dd:ed:47:33:72:52:82:43:e4:66:
         d9:90:79:56:d5:d7:ad:ac:00:80:fc:57:46:a1:80:a3:51:c0:
         14:5e:6e:9d:a7:01:83:ca:89:af:c1:1d:94:f4:8b:2a:76:7a:
         51:66:2f:27:81:11:3a:36:50:cf:f1:1a:e1:5d:71:cf:e1:48:
         aa:8b:13:00:39:87:3f:57:b7:47:a1:c8:92:50:ad:60:01:bf:
         cd:39:ea:c6:df:96:9b:38:e6:04:94:cd:00:7e:48:84:16:0c:
         ba:3c:2f:6e:82:5a:5e:c8:fe:38:c6:03:e6:f1:19:bb:79:43:
         57:56:ba:45:66:1e:ae:ad:f4:12:54:91:ab:bb:f7:f8:cf:e5:
         18:64:14:f8:e7:21:1b:9e:e0:02:c4:57:1b:4f:23:34:1a:b5:
         46:72:8e:1e:0d:4f:ee:50:40:b5:c9:f0:54:2a:08:fe:2f:07:
         87:01:ce:8e:f0:a3:60:48:5e:8f:42:f1:85:52:2b:04:3f:99:
         04:3f:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:07 2026 by rpki-client