Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa
File:                     aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa (raw, json)
Hash identifier:          lel4LRJTSPP8+UjBsPMMiqIT8USSIFckhIecobCbFAU=
Subject key identifier:   65:1D:C4:5C:47:ED:7D:B6:8C:67:E0:F1:2E:B5:84:F0:B4:3D:06:AD
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584EA790ACED4EEFCC5019E09200
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33548
IP address blocks:        104.247.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:ac:ed:4e:ef:cc:50:19:e0:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=405f9e03-53c2-4ca6-911d-bed6ab3c052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:97:c3:0a:ec:6c:2b:43:a1:48:b9:2d:ee:
                    5c:71:e4:2a:6b:54:46:59:4a:2c:16:b0:d4:23:38:
                    64:d5:d1:9c:ef:ff:cd:53:f2:7a:b8:01:d8:51:d9:
                    7e:1d:3f:9c:8e:02:b6:00:14:e2:6f:92:8e:2b:15:
                    e0:70:17:74:e2:fa:34:b3:44:64:36:49:a6:fd:87:
                    4c:d7:50:71:c7:02:1e:8c:6b:1b:fb:1f:1a:33:3f:
                    56:e7:3f:76:d2:53:3a:1e:c6:53:7f:81:19:3a:08:
                    7a:85:b2:c6:52:f3:79:cd:82:09:57:32:cb:df:6a:
                    56:22:4d:1b:60:4f:45:ee:a5:b8:73:38:65:c4:0e:
                    cf:90:2a:62:3e:ec:c8:0d:93:07:5a:e4:9e:35:69:
                    65:02:a9:c8:fe:66:43:a1:08:fc:28:95:0f:66:28:
                    5c:08:23:66:93:cc:21:43:d8:cc:fa:32:3f:ef:9b:
                    bf:92:57:ee:8b:9e:4c:94:20:d4:f7:08:0c:84:b4:
                    74:03:82:4b:e6:3d:cd:02:ba:47:93:2d:60:37:28:
                    99:4c:17:36:dd:e6:d3:00:b4:b1:f6:f3:00:01:61:
                    74:29:89:d9:df:1d:07:cd:b5:67:81:eb:ca:2c:aa:
                    06:de:4f:47:0b:20:35:79:b9:2b:e8:94:5d:65:33:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:C4:5C:47:ED:7D:B6:8C:67:E0:F1:2E:B5:84:F0:B4:3D:06:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:9d:fd:eb:18:a3:3d:c8:ed:8e:5b:4d:b7:c3:3e:7f:cb:
         9f:4c:41:8e:f4:00:ab:71:69:f4:5e:69:ca:45:18:48:9d:10:
         71:30:cd:a1:d8:51:e4:ba:69:cf:f6:48:04:dd:6a:60:f0:1f:
         99:49:08:37:6f:f7:51:f0:c8:46:4a:82:60:cd:a5:2f:d8:c1:
         02:bd:91:b3:f7:ef:57:ef:a6:39:5a:8b:20:24:9d:bd:31:ec:
         fb:eb:6e:af:e8:d4:68:b4:f7:1c:4d:bc:de:6b:e8:93:72:40:
         aa:25:c4:f6:20:b8:5d:35:17:95:87:6f:d0:75:5e:e4:9e:fb:
         f8:ef:53:67:ec:20:c1:1f:0b:0a:f7:b3:ea:47:af:18:5c:c3:
         40:c5:55:45:2d:87:d3:13:bc:df:16:c5:3f:d8:b7:94:90:79:
         41:87:11:3d:ac:9e:16:91:91:67:ac:d0:02:26:46:6a:7f:e3:
         3d:b3:b0:79:df:33:9c:e9:5f:11:af:c9:f4:d4:9b:a9:c4:44:
         96:a7:dc:5e:fb:b3:61:26:b8:76:7e:d4:c1:9e:09:65:e7:a3:
         69:5a:5e:f9:0b:f6:0a:e1:4e:ff:e4:81:4e:1b:d8:53:52:c8:
         37:0a:a3:af:fe:8c:52:45:24:58:ed:77:7e:dd:95:84:c1:c8:
         64:eb:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:39 2026 by rpki-client