Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa
File:                     f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa (raw, json)
Hash identifier:          wfiJdM1knNzMNonX9EFh/yywOHjjKiircfwQHgXJWKs=
Subject key identifier:   C4:08:74:ED:42:4D:C5:47:40:1C:4C:5D:7F:CC:64:DD:7E:11:D8:78
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584EA79B00CF9DDD888E1C9FF168
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        104.237.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:00:cf:9d:dd:88:8e:1c:9f:f1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0737f741-925c-4715-9e51-0c4dcd2c1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:bf:7e:4e:1f:17:57:b8:7d:75:68:6b:22:
                    79:41:8e:9c:61:54:74:d0:5a:ee:51:6c:7c:94:2e:
                    96:af:e7:6b:1c:3e:2d:f4:57:57:23:87:21:a6:1c:
                    30:23:d3:41:d5:65:92:cf:77:e0:13:8b:9c:2d:09:
                    28:ff:6d:6d:65:3c:88:1d:61:b9:72:41:a4:fa:dc:
                    03:90:d3:ad:be:79:6f:39:3b:95:6d:6f:cc:63:ce:
                    4e:68:5e:6f:3d:f9:f5:5b:71:47:e9:70:9c:b5:7f:
                    6b:1c:f3:53:ba:2c:3c:69:c6:10:9e:4a:b9:82:10:
                    60:e6:8c:b0:67:fc:3d:f2:ce:a6:20:81:f5:09:25:
                    97:f0:b6:99:3f:7e:08:ae:1e:72:b9:c6:dc:b0:9f:
                    db:f7:d3:b5:de:d3:a3:f5:18:78:ac:10:7d:ea:7c:
                    0a:1a:f0:8f:0b:3d:80:5b:94:18:58:ae:2e:ca:b7:
                    78:2f:40:4e:b6:ed:a3:ce:c9:cf:b0:17:e0:66:af:
                    39:51:ce:ba:4a:89:6d:fb:66:06:78:80:f0:09:7d:
                    29:00:e7:b3:ee:b0:65:6c:c0:c8:51:8d:c4:84:38:
                    85:e5:82:69:a1:eb:1a:20:e7:37:6d:8b:e9:9b:09:
                    ed:85:88:76:e6:3b:64:b9:58:88:f7:27:49:c3:18:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:74:ED:42:4D:C5:47:40:1C:4C:5D:7F:CC:64:DD:7E:11:D8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f79fda2b-c390-3e7a-a708-2b95ca80e33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:8b:4e:8e:b7:4e:8a:89:94:00:76:7d:ea:a6:45:63:13:
         17:32:26:34:08:23:bc:61:6d:6a:04:d1:e7:8b:8f:74:d3:ab:
         be:b7:c7:75:97:6e:51:fc:f6:2a:48:05:0e:af:a8:32:ee:ac:
         91:24:cd:7e:a3:d6:07:78:87:fd:cd:cb:f9:a7:16:83:b1:7a:
         fe:ac:1f:8a:ae:8f:9f:3c:dd:f5:e6:18:05:0b:4b:16:62:49:
         83:0a:23:b1:fc:af:16:12:88:31:37:17:e8:b2:b7:c0:f5:9b:
         e6:9c:00:2b:61:af:59:b1:70:94:5e:f9:33:ad:df:a0:92:92:
         4e:bf:38:bd:cb:45:bd:04:42:08:b3:6b:4f:cc:cc:cd:b7:e2:
         be:bd:d9:48:80:fe:74:e5:0a:6f:5a:fe:4f:f3:d4:c5:bc:93:
         9d:07:06:da:2d:92:2b:98:16:dd:0f:5e:5b:a3:5e:c6:9f:0b:
         e1:a0:4e:8b:09:99:f7:af:e4:02:63:6c:52:ac:52:f6:5d:13:
         69:3e:63:ad:e2:fc:4b:ab:4a:b3:82:a7:ac:cd:88:ad:68:47:
         6d:ec:18:3f:7a:7a:e1:aa:3e:20:ff:93:5e:b0:11:fc:01:0e:
         61:4d:a1:ac:be:b3:c2:40:80:71:29:2b:b7:cc:77:24:0b:10:
         9b:af:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:41 2026 by rpki-client