Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa
File:                     74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa (raw, json)
Hash identifier:          H4vbey++jQoikQT1ekT/TQIgMou1JoRUujR17sXe9Ro=
Subject key identifier:   2E:A1:0D:B7:AC:EB:06:31:A4:E8:0B:9F:A4:FA:A0:7B:9C:C7:6B:FA
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584F6F22E5EE7083EBA0AE243F80
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     5645
IP address blocks:        104.246.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e5:ee:70:83:eb:a0:ae:24:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=c90a735f-06b7-4419-9138-fbf8f06222e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:fe:5b:e8:d8:a0:ba:c0:02:87:4e:61:ad:
                    71:04:26:8b:50:c1:be:29:e0:cf:70:95:b9:f0:c1:
                    29:c2:ca:26:81:38:9e:98:23:e1:7f:2e:24:9a:76:
                    34:00:4c:4e:f7:31:d4:90:f9:29:d6:c4:63:6d:b4:
                    e8:cf:06:b8:ca:8d:e8:2f:b3:71:e8:42:85:03:dd:
                    8e:b0:7e:02:3f:b6:2c:91:85:28:59:3e:a5:ca:e6:
                    02:34:f4:3d:c2:27:75:bc:fd:2b:9c:5c:cb:34:25:
                    a4:2f:d7:c5:11:e9:eb:36:50:fb:06:a1:b7:3f:33:
                    eb:59:11:78:bc:5c:35:6d:e1:60:e3:ba:d2:b8:cb:
                    2e:50:4f:6b:2d:d0:82:af:46:49:f7:02:8f:e9:c3:
                    2b:ad:7f:85:66:2b:92:b5:34:4e:6a:7d:1e:ae:02:
                    fb:00:00:6f:3c:3f:56:dd:f1:ea:29:a9:ed:25:ac:
                    fc:e2:5a:df:74:34:50:0e:5a:5e:62:9c:f3:c3:35:
                    97:b6:f3:ed:8d:b1:60:01:41:44:9c:e1:31:ff:c4:
                    be:05:7f:cf:d1:c5:cf:ee:d9:a7:ab:b1:73:66:b7:
                    ea:05:26:a8:2b:87:f3:1f:49:33:e5:bb:50:92:29:
                    9b:95:a3:8c:96:b9:af:b9:eb:77:2d:4f:69:c6:34:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:0D:B7:AC:EB:06:31:A4:E8:0B:9F:A4:FA:A0:7B:9C:C7:6B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.246.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:69:08:95:d6:3e:d1:ad:98:0d:67:cd:17:85:52:02:80:46:
         80:be:db:32:7f:26:79:bd:fb:18:42:5b:d5:5c:28:95:50:12:
         e0:e1:3b:d0:c0:b7:04:89:f2:1c:9a:30:2f:96:8a:59:a2:d8:
         13:57:d6:06:f3:6d:bf:42:01:71:15:cf:fd:f5:01:fe:49:64:
         a8:45:06:f4:89:39:d1:bd:f0:af:12:65:0d:81:8b:3a:e5:25:
         31:db:4f:fc:24:d6:64:74:01:cd:5e:fe:28:94:db:7e:bc:d9:
         1f:4f:e3:41:d0:4b:db:4e:7e:7b:82:b3:86:82:52:57:f9:30:
         85:4f:38:09:0e:65:bc:fa:c0:f8:ad:89:3f:74:5c:d7:b7:38:
         83:08:25:24:06:f2:51:3c:5a:df:4d:55:d6:8d:8c:43:c3:08:
         41:9f:02:99:53:8a:77:7f:6e:d0:57:cc:89:9a:d4:92:59:fc:
         2f:7c:17:a2:f1:39:b9:9c:fc:93:d8:55:bb:c5:d3:7d:1f:7d:
         d6:9f:7e:79:29:1b:be:10:0f:93:10:4e:4c:4d:38:8d:10:ba:
         56:8b:dc:65:8c:50:bc:0a:6f:db:dd:24:86:45:9c:ab:75:98:
         01:73:55:85:05:7e:3b:45:c3:6d:0b:55:4c:40:58:d2:75:84:
         31:5d:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:35:11 2026 by rpki-client