Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/2752934c-e740-303f-bf0b-4662ea692b72.roa
File:                     2752934c-e740-303f-bf0b-4662ea692b72.roa (raw, json)
Hash identifier:          Dxd4vYIKyik98baVJar2fgyrQzgqYYGsjRQpjHQC7g0=
Subject key identifier:   D4:E2:C2:EA:02:86:E4:73:79:37:6A:DC:0E:B8:91:42:D5:2E:46:AE
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584EA797553B3384AAD5C618C740
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/2752934c-e740-303f-bf0b-4662ea692b72.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14291
IP address blocks:        204.80.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:55:3b:33:84:aa:d5:c6:18:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2fd8d793-1154-4e6a-ab81-41d8a5b6f11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:01:5c:50:3b:f6:13:34:ed:ca:74:0e:d3:
                    7e:a1:d5:ae:62:f7:22:26:15:ed:62:2f:f7:ab:5b:
                    f8:b1:35:4f:1d:b7:40:25:03:57:50:5d:86:01:5f:
                    22:71:08:68:a0:1f:88:c7:46:a0:6d:a3:4f:cc:e7:
                    84:1b:8e:e5:12:89:48:42:65:44:a6:c7:b1:d9:39:
                    8d:2c:02:c8:0e:f6:e2:bb:af:78:b1:66:8c:81:95:
                    62:58:21:db:19:c9:77:78:62:a0:bc:69:be:e6:34:
                    aa:a7:b8:05:cf:13:40:cb:df:32:86:b1:5b:05:ca:
                    ae:95:15:09:86:0e:ae:cf:ea:ab:51:29:28:cc:13:
                    63:88:90:b5:72:a1:31:2b:bf:f6:f5:74:82:c0:bd:
                    f3:a3:21:b7:48:4e:d3:3f:76:9b:b4:df:f3:23:28:
                    d3:da:af:c5:b5:6b:60:a8:b1:d9:6e:eb:21:9a:9f:
                    c9:0e:e7:91:0e:f8:28:12:76:2c:cb:32:a4:f1:b0:
                    c1:f7:7e:11:22:c3:dd:ce:89:97:c3:fc:4a:17:79:
                    e9:e7:28:cc:5e:41:5f:62:3b:01:29:8b:e7:e3:30:
                    1a:74:6b:f3:91:7e:8b:2a:01:c4:f0:94:68:83:bc:
                    e1:40:4a:01:fc:89:bb:9d:74:94:d5:07:19:f8:40:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E2:C2:EA:02:86:E4:73:79:37:6A:DC:0E:B8:91:42:D5:2E:46:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/2752934c-e740-303f-bf0b-4662ea692b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.80.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:63:e8:35:5f:e3:24:74:c2:cb:01:50:3f:69:26:a1:27:8d:
         f0:e5:d0:5c:14:0d:40:48:22:f5:6f:1d:96:70:54:c9:c8:3a:
         09:50:43:0f:e6:a3:e8:79:6b:fe:38:25:f0:8e:63:d5:1c:70:
         ca:2a:26:6e:3d:8a:49:18:f2:4f:fe:77:a7:df:c4:e3:59:17:
         ee:9b:7f:56:e3:3f:6f:e7:a7:38:e7:b7:f1:97:64:4e:b2:f6:
         7d:58:7d:b4:e1:52:eb:0b:a7:64:51:81:2f:0a:bc:2e:b6:e7:
         1b:2b:62:13:85:bf:f3:3c:88:78:cb:59:47:e6:4f:ec:b9:19:
         8d:cb:bb:13:71:e8:cd:00:78:08:23:31:be:cf:63:19:f6:29:
         6c:1d:6d:50:30:4c:28:86:17:e6:9c:72:58:57:f6:ab:8d:fb:
         b2:a0:45:f3:27:54:a4:75:43:f9:a9:6e:9f:a3:22:5a:bb:4c:
         bc:62:d7:0e:b9:5c:b4:d5:ca:03:d0:a9:ea:80:a1:1a:d6:82:
         24:29:64:de:f6:66:19:f9:e1:ff:09:5a:50:74:5c:a2:c8:7a:
         e3:e3:d7:9a:f1:d2:27:5a:d2:30:c1:39:12:4c:c0:05:02:50:
         ce:d7:80:89:7d:08:96:a2:fa:02:91:f4:19:ad:78:51:82:52:
         84:cd:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:58 2026 by rpki-client