Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa
File:                     ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa (raw, json)
Hash identifier:          kaQH+RnA6g0GaJXsE0XPHtDLWprL0QXDz4JP7F6rEio=
Subject key identifier:   04:2E:6D:FC:EC:65:2D:5E:F5:2B:31:5E:A2:0C:29:D4:2E:38:E4:B5
Certificate issuer:       /CN=f4e57a96-f0bd-4437-a5a1-fec9991b7c6d
Certificate serial:       010D0C9F4328584EA793F90AB3FD39A66156F3C0
Authority key identifier: D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1054
IP address blocks:        198.29.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:f9:0a:b3:fd:39:a6:61:56:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e57a96-f0bd-4437-a5a1-fec9991b7c6d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=97692b06-9adc-45e9-a0fe-92e32d555c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:43:89:a0:9f:82:1e:b4:f6:d8:3c:f1:68:
                    21:14:36:18:fe:3a:59:56:d4:02:59:cf:76:a6:2d:
                    5d:07:09:d2:07:db:fb:a2:d7:c3:9c:08:97:53:38:
                    3a:2e:2b:eb:53:a5:d7:11:e5:11:6e:82:ee:cd:3d:
                    2c:69:d2:4d:18:d2:cc:fb:91:32:99:aa:87:1c:30:
                    8f:aa:af:f8:25:28:14:42:dd:9e:d9:42:65:b2:08:
                    f6:ad:1d:b0:33:69:10:6c:3b:51:1b:05:7f:22:bc:
                    a6:e8:a6:69:eb:1d:75:c1:92:3c:bd:ef:ce:a5:b2:
                    a9:f4:be:f9:77:f6:7f:9c:f1:b6:dc:e1:13:10:3d:
                    7c:3f:2e:c3:31:5b:62:a3:7a:d5:a1:4e:f8:e2:23:
                    97:a8:bf:3e:14:a7:09:9d:e0:74:6a:32:c7:22:c5:
                    b7:7a:05:ae:a7:ba:5d:48:6f:44:ec:55:80:94:b8:
                    2f:de:7c:55:1d:21:3f:48:a8:15:35:d0:cd:2c:c5:
                    f1:44:02:4a:c9:9e:6b:f4:43:83:5f:ac:e1:f1:b1:
                    3b:c6:b4:4d:04:33:cf:4a:7f:ad:eb:db:79:35:d7:
                    e1:bd:42:6f:b4:84:80:72:95:59:cf:0e:4f:c4:2e:
                    6c:39:86:fd:20:8d:1a:9e:16:53:cd:b4:8e:ad:b3:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2E:6D:FC:EC:65:2D:5E:F5:2B:31:5E:A2:0C:29:D4:2E:38:E4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ed47ba77-eea1-39a2-baf7-d60abc08bc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.crl

            X509v3 Authority Key Identifier:
                keyid:D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:02:b0:70:7b:e4:d0:49:b9:04:55:18:55:36:0a:96:67:3d:
         1e:91:f5:c3:17:53:1d:78:60:fb:6f:be:5b:fa:d7:0e:42:f0:
         5c:c8:7a:1b:62:88:16:79:a8:7c:37:b7:be:8d:48:9b:d8:2f:
         27:15:3b:24:b9:df:9e:bb:08:e8:f6:fe:f5:20:7f:75:6b:57:
         c7:19:b4:d2:34:47:d1:8c:64:d7:3c:39:b5:1b:3f:4d:44:9c:
         62:16:79:1d:80:42:cd:71:ab:75:aa:6d:cd:bc:77:66:5b:87:
         8d:2c:ef:bf:bc:ff:34:6e:f1:b4:1f:55:e5:d1:d3:28:31:74:
         de:13:06:e0:a6:77:06:10:2c:eb:90:aa:15:0f:4e:4d:14:ad:
         6d:8e:59:d3:a1:e7:02:2e:dc:29:a3:01:a3:91:23:7d:d0:77:
         bc:25:83:57:98:ee:42:44:dd:a2:be:24:73:32:13:c4:b7:91:
         c8:c7:bf:83:a6:fc:92:7a:79:72:76:80:16:23:74:f0:0c:40:
         bc:5d:55:41:1c:8f:74:08:30:c1:a9:ae:c5:18:a1:38:ee:3f:
         4a:95:61:ce:77:98:55:f0:6a:ca:46:d3:30:30:33:8d:9c:dd:
         52:25:a7:59:2b:e8:a9:8d:84:ad:3a:de:fc:2f:18:44:ec:3b:
         ca:70:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:45 2026 by rpki-client