Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
File:                     37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa (raw, json)
Hash identifier:          aJs+p0AB2opUj8rWQD6ZFwKj1OxhhTyJdlHLETLabc4=
Subject key identifier:   98:2D:B1:AF:1D:5F:84:27:37:8F:11:FC:E6:3A:F4:E5:4F:BA:38:B9
Certificate issuer:       /CN=110a5b23-7e5e-47cb-81e1-4e9068274549
Certificate serial:       010D0C9F4328584EA79159A992619ABD94CE0300
Authority key identifier: D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19186
IP address blocks:        208.103.169.85/32 maxlen: 32
                          208.103.169.222/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:59:a9:92:61:9a:bd:94:ce:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110a5b23-7e5e-47cb-81e1-4e9068274549
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6623ed41-d1a1-44e6-85e9-f3ce4c6db84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:24:c0:fd:eb:23:79:88:9c:33:f2:a0:be:
                    8f:3f:3e:a8:40:1e:37:09:80:03:c4:8b:33:ac:8b:
                    48:63:fd:74:c3:47:7f:b3:ec:b6:cf:c7:8c:51:7b:
                    58:00:dc:87:2c:93:3c:5e:fe:ff:bf:9f:bc:da:4c:
                    68:f8:1d:e6:ed:13:68:15:92:10:2c:ec:6d:38:2d:
                    ae:71:b1:1d:2b:06:40:e4:10:58:02:3e:14:cb:15:
                    b9:47:05:32:02:0a:ad:ce:c5:40:31:3b:52:b0:ac:
                    af:d2:b7:69:e8:90:93:f7:49:da:6f:4e:9a:2a:62:
                    0c:ed:15:3c:c1:d5:69:e1:74:ff:d4:e3:da:38:d0:
                    e7:5c:ea:e1:4e:19:55:39:c4:7a:2e:fd:da:de:e9:
                    0b:b2:1e:c3:ff:30:2e:b6:1d:ff:1b:85:44:4e:3c:
                    4b:15:e7:f7:ae:14:ef:98:54:c6:d3:92:ad:d3:67:
                    69:f8:46:d5:d2:a2:ff:4c:a3:a2:7e:80:7d:7b:21:
                    a9:49:36:7b:33:0f:19:f2:1b:63:2c:5c:de:46:03:
                    b7:2e:49:b4:51:fb:4a:68:1d:5a:3a:6e:da:75:0a:
                    b5:ac:7b:6f:58:64:a0:86:89:fb:0b:94:e3:e2:78:
                    6a:0a:d2:4e:9b:f0:49:06:19:e7:ca:d5:84:95:7c:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:B1:AF:1D:5F:84:27:37:8F:11:FC:E6:3A:F4:E5:4F:BA:38:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl

            X509v3 Authority Key Identifier:
                keyid:D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.169.85/32
                  208.103.169.222/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:8a:8a:67:c1:92:b6:a8:71:51:96:26:59:05:00:19:2c:
         84:14:7d:00:f2:b5:27:00:3b:8a:ef:d3:d8:d2:7b:fd:72:b5:
         6c:cd:e6:e6:9e:67:6f:b6:90:c5:15:cf:16:de:e3:07:26:fa:
         05:b2:20:49:72:77:cb:f9:ea:e5:ff:b7:6e:2c:c6:d8:60:51:
         8a:ce:33:6c:42:c7:70:ba:49:60:d6:1c:6d:6e:b5:38:57:3d:
         47:0a:23:6f:b0:78:1b:3e:bd:c8:4a:c9:e0:88:ba:5f:91:5e:
         52:8b:d0:0b:a4:f8:ae:d3:05:ad:ff:f4:f1:86:6d:42:ce:7c:
         c6:6b:6e:70:4a:00:57:06:de:36:98:99:9c:82:45:59:52:c1:
         a5:db:4c:77:cb:11:74:3c:47:08:96:43:4d:65:e7:a3:2c:fb:
         26:09:05:5f:43:80:8c:38:e8:d3:be:66:30:30:3e:83:de:09:
         19:1f:3b:ed:60:46:85:51:5b:a7:bd:0e:71:33:ea:c9:ae:f8:
         fd:eb:c6:87:05:8a:45:d7:35:6d:93:87:47:d8:6c:8a:56:80:
         a4:c0:9f:9e:30:79:97:3c:49:70:d9:66:ed:28:96:25:fd:7a:
         df:f9:41:9a:b4:1c:d3:ff:34:53:79:b5:c1:fc:9f:40:a5:6f:
         f9:91:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:50:27 2026 by rpki-client