Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
File:                     40cb8bf8-b7f4-317f-8740-a10807e3806b.roa (raw, json)
Hash identifier:          1k61HNXboF7xzW3rhmA/ehDo7chxY+soB7g6w+BLwZA=
Subject key identifier:   60:0E:31:05:DF:1F:E7:3B:50:6B:B7:60:8A:C0:70:40:7C:F3:AF:92
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584EA78730F04EC062DDD4ABDD80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        169.150.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:30:f0:4e:c0:62:dd:d4:ab:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ceef4ad-25b1-414c-9761-7647197bb811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:5a:e3:5e:65:db:05:62:ad:62:7c:9f:d2:
                    3d:37:8f:e4:3f:b2:f5:da:ad:61:c3:cd:ce:77:8d:
                    b4:03:34:7b:b1:95:e4:8b:39:97:9c:d3:80:62:3d:
                    c7:ec:62:c9:ab:0b:bd:10:ae:11:dd:3b:3d:90:76:
                    25:48:f3:f8:19:47:30:cc:92:75:13:e4:74:52:89:
                    af:b7:d2:30:1a:4b:22:1f:bd:a0:f1:48:2c:96:70:
                    0d:fd:11:4f:d4:93:05:32:ea:ff:66:eb:81:84:1d:
                    2f:d8:70:7d:5e:12:2b:91:04:17:1e:75:c9:2b:fc:
                    0b:2b:43:92:3e:2b:3a:75:8d:91:48:ad:f4:5f:7b:
                    fa:c5:9b:1b:5b:f5:ff:04:00:7b:0c:3f:3a:c5:c6:
                    c2:de:82:8a:89:1f:7b:ae:75:14:f7:2d:34:dc:96:
                    f7:ea:f3:ff:a8:94:9a:17:ce:df:4e:fa:f2:0f:4d:
                    c8:92:4f:f0:ee:91:9f:0c:e4:69:fd:40:3a:7f:e4:
                    48:c9:a4:44:da:9d:77:c7:29:d9:72:2e:cd:cb:00:
                    19:b4:1b:57:83:1e:2e:11:e0:9b:4e:1d:cc:bf:e5:
                    20:bf:ac:03:1c:89:f6:6b:33:b8:3d:f6:52:2b:c6:
                    90:70:f5:c4:2e:b1:11:7a:e8:34:74:a6:1b:4b:fa:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:31:05:DF:1F:E7:3B:50:6B:B7:60:8A:C0:70:40:7C:F3:AF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:bf:6f:78:2c:85:1d:02:2c:21:fd:40:25:9a:a7:8c:cd:
         51:64:15:3e:85:2d:b6:a7:9a:1c:78:70:fc:0e:11:51:6a:8e:
         c9:d6:79:c5:93:c8:6e:0c:04:f1:62:67:37:c0:51:1e:cf:e7:
         ac:b3:5d:53:5c:61:00:38:e4:8a:c8:ab:d6:67:10:5b:43:4e:
         51:c4:00:6a:e3:ee:ad:e0:3f:49:df:6e:8c:87:cf:68:85:2d:
         a3:80:b2:26:a5:fc:af:39:fb:8b:e2:b0:60:85:f1:6e:05:d0:
         cc:87:ac:83:d0:db:d2:4f:9e:46:99:69:48:a1:58:02:6e:a4:
         93:3e:c9:1d:5b:db:99:56:df:3a:fa:40:60:88:23:bd:71:d7:
         6f:7c:b6:98:f9:bb:ec:75:cb:ad:38:ae:bf:7f:5a:78:26:6b:
         2d:b9:36:6e:9d:37:ff:42:7f:2a:36:69:1f:a8:1a:a9:5e:fd:
         52:af:85:ff:2c:0b:09:b7:95:24:fc:a0:ba:e8:c9:f5:98:ef:
         a0:74:aa:99:50:73:2b:2c:6c:c2:5a:24:9f:43:16:8f:26:a7:
         ef:d7:3d:50:13:5c:26:6e:1d:5a:f5:6d:9f:7c:62:0a:30:eb:
         d7:7b:1b:95:b6:d5:08:35:e9:c8:d6:58:4f:c6:a6:bd:7e:ea:
         cb:98:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:58 2026 by rpki-client