Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/2e38d2da-021b-34a2-8fd5-d85825239091.roa
File:                     2e38d2da-021b-34a2-8fd5-d85825239091.roa (raw, json)
Hash identifier:          RTNrolsaEKVLVGztwqznXyGSxyv7hkJUqnH0zGn/wOk=
Subject key identifier:   5C:DF:7A:73:B7:65:C8:FF:9C:C8:79:E8:3B:C5:2D:FB:47:3C:EA:29
Certificate issuer:       /CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
Certificate serial:       010D0C9F4328584E9C238F628E1FE2B0C17B6320
Authority key identifier: 2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/2e38d2da-021b-34a2-8fd5-d85825239091.roa
Signing time:             Fri 24 Jul 2026 23:06:16 +0000
ROA not before:           Fri 24 Jul 2026 23:06:16 +0000
ROA not after:            Thu 22 Oct 2026 23:06:16 +0000
asID:                     17274
IP address blocks:        207.229.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:23:8f:62:8e:1f:e2:b0:c1:7b:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
        Validity
            Not Before: Jul 24 23:06:16 2026 GMT
            Not After : Oct 22 23:06:16 2026 GMT
        Subject: CN=ab2e7908-3835-4985-a2f0-99827f7a2f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:bf:ab:7e:e6:2c:06:18:9f:a6:9a:fa:3b:
                    cb:89:86:00:06:7d:e4:dc:ba:3f:78:39:aa:16:f6:
                    3e:b7:0d:c2:07:65:50:9e:69:aa:a3:5b:6e:4e:2d:
                    90:24:4d:03:21:bb:a6:e5:69:07:45:a5:6d:1c:2e:
                    a4:fc:d5:52:a2:34:64:8d:86:62:f4:8e:d0:61:43:
                    2e:4e:1d:f0:22:43:fe:1a:e7:ea:a5:e7:52:a5:54:
                    5d:7c:be:6e:fe:44:83:4f:d0:75:e5:ef:17:5f:ef:
                    47:72:1f:f6:b1:cf:fb:f3:aa:aa:a0:d9:1d:25:d9:
                    4e:4e:18:74:61:22:37:27:43:10:97:99:97:2f:ef:
                    72:8d:4e:d1:b1:4a:db:1d:4a:e3:63:c2:e3:df:8a:
                    0d:ac:9f:91:6d:77:89:41:37:e9:41:6e:5b:6f:ff:
                    7a:ca:c0:ae:47:a6:7e:99:5e:e9:a9:fd:b9:4e:b0:
                    4a:ff:f2:57:8a:67:1f:e9:ff:83:e7:3d:07:8e:7d:
                    c7:2b:d2:e3:7f:a2:c8:77:ea:43:72:ed:e3:1c:8c:
                    1a:1a:fb:da:bf:19:21:56:3a:28:92:c5:c7:5b:d7:
                    ac:ee:e3:7c:9d:ad:a0:58:05:18:42:1a:5a:12:e4:
                    c2:87:13:94:e2:7d:0a:b8:93:4d:72:43:b9:2a:7b:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:7A:73:B7:65:C8:FF:9C:C8:79:E8:3B:C5:2D:FB:47:3C:EA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/2e38d2da-021b-34a2-8fd5-d85825239091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:02:27:69:27:4c:7f:12:33:1e:06:87:69:b3:1d:0d:a8:
         28:ce:1d:d8:1c:aa:63:42:fc:ee:18:26:2a:84:96:11:77:64:
         ff:eb:e3:97:fe:a6:f1:8c:0a:8c:94:24:3a:42:ab:26:f5:ac:
         85:24:1b:7f:a3:48:77:fb:b7:18:5a:22:53:db:00:c7:6f:20:
         14:6f:73:a2:fd:bd:ce:bf:92:a0:33:a2:6a:4a:94:f7:24:da:
         78:79:17:1e:61:02:de:74:60:a1:35:bf:ed:39:68:d9:42:c2:
         81:f1:d2:9f:59:89:83:32:8f:7e:6e:85:a0:f7:19:21:29:50:
         7a:65:b7:a0:96:ab:8a:4f:9b:ca:9d:37:d6:a8:93:9f:b1:b4:
         37:24:82:95:ea:2b:bc:61:e1:ec:eb:5c:5f:a6:b8:61:39:d7:
         6b:8c:a4:e0:d4:c6:ec:63:36:8c:e4:7a:24:ad:e5:18:98:22:
         4b:e3:87:46:9d:2d:ff:0a:29:f8:93:e2:c4:76:82:f8:d5:5d:
         46:0a:f0:42:af:a6:a7:42:79:cf:e6:1d:f7:cc:c2:05:61:f2:
         60:44:34:e7:e4:53:81:69:0b:12:22:84:ab:47:86:31:64:a2:
         00:93:e0:ee:2c:7d:75:59:5d:1e:6c:89:3b:cb:d8:45:d4:b6:
         e8:95:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:25 2026 by rpki-client