Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa
File:                     0b95849b-a821-3b29-86e2-82b650dfd913.roa (raw, json)
Hash identifier:          ZZdAJWsd4Af7crL3RnKkwDzgQUxVIR/Yr3Sgio2pxI0=
Subject key identifier:   FB:A9:79:EC:B8:75:17:80:0B:3B:6F:E0:D2:3A:1B:4C:C5:5C:BA:48
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584EA79A5392E08544C9CE92B240
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     59920
IP address blocks:        104.167.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:53:92:e0:85:44:c9:ce:92:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d4e756d6-7b43-4de2-bffc-5b93eeea5184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:9d:ab:0c:76:e4:b5:75:db:2e:54:fa:d8:
                    18:d2:9b:e3:67:34:f1:b4:28:f6:36:00:36:a1:74:
                    3f:f1:41:9b:18:6f:7d:b5:34:36:f4:18:a0:56:62:
                    46:a3:f2:65:e8:19:df:45:17:c7:55:79:35:b6:49:
                    44:b6:d4:21:07:b9:49:71:3e:83:46:2c:40:a2:89:
                    f8:1e:bf:e0:3d:e4:c9:a8:bf:4e:82:af:bf:ea:f5:
                    a7:0c:b7:98:a4:a8:44:77:94:e7:47:e1:c5:99:e9:
                    3a:c6:29:cb:f1:c9:8b:ff:fb:28:83:64:f9:1e:eb:
                    b4:1d:85:a5:4a:fb:cc:88:e4:19:88:71:a4:89:47:
                    b1:91:ae:a7:30:0e:75:99:5c:9b:16:33:f2:2d:77:
                    6f:65:1f:44:99:fc:c9:ce:e4:7d:43:c6:23:a0:94:
                    3e:29:9f:76:b1:bf:24:1f:b6:e2:37:cf:87:07:4a:
                    3d:a2:5d:d9:0a:72:f2:07:e1:0a:8a:70:a7:08:f6:
                    71:fd:66:c8:bf:86:aa:48:3a:04:bb:be:a3:c1:51:
                    68:09:54:47:16:64:b9:9e:41:7e:d9:45:18:69:c7:
                    ac:b9:fc:bb:de:c0:2c:65:32:b0:4a:df:ed:df:18:
                    51:dd:aa:7a:4d:1c:08:3c:72:f2:b5:8a:e3:82:34:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A9:79:EC:B8:75:17:80:0B:3B:6F:E0:D2:3A:1B:4C:C5:5C:BA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b95849b-a821-3b29-86e2-82b650dfd913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:24:08:1e:e0:c9:e2:28:5d:14:76:ac:c4:12:2f:7f:e0:
         cd:23:c5:1d:f8:bf:04:28:fa:8d:23:52:a9:94:3e:2d:3e:d7:
         e8:2a:2b:a8:26:38:fe:27:6f:83:e6:01:79:3d:a0:b7:b6:8e:
         4b:bc:c7:fe:ec:23:db:b7:0c:8c:ed:6b:33:41:e6:18:30:26:
         55:e4:57:0d:5d:75:b9:b1:90:9f:1b:79:47:84:e4:3f:cf:cf:
         ae:74:23:23:39:61:a8:42:4c:8a:9a:1f:7a:c0:48:de:77:bb:
         49:23:89:43:77:00:4e:98:1c:38:56:8e:66:c7:ac:bb:2c:c3:
         fa:13:5e:58:63:62:93:4e:d4:32:c2:41:4a:2a:e9:62:07:11:
         8f:d6:fa:73:68:6c:eb:d1:f9:0f:1c:9a:2f:39:7d:2a:c0:f4:
         3e:9b:76:71:e5:8c:7b:68:34:ac:e2:ba:e8:6d:47:8d:e2:23:
         4f:c1:b1:d7:a9:be:39:9b:74:79:ff:18:fa:c4:a0:fb:48:a2:
         b9:d2:b4:4e:0e:36:37:13:ad:46:4a:6d:db:ac:b9:0a:3e:9f:
         cc:8e:2d:a0:2a:16:41:4e:75:21:79:b1:82:33:7f:6b:77:21:
         d7:eb:f1:db:d2:a3:57:58:b8:e1:cb:a8:cc:1a:7f:70:86:24:
         80:cd:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 13:09:10 2026 by rpki-client