Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
File:                     2bd54a4b-cf66-3ad7-b279-8094b32af154.roa (raw, json)
Hash identifier:          7IeKLP34pHnIvMbV34wBuNtO70DqB9+s+l/bUxdqefE=
Subject key identifier:   A1:BE:1B:5B:70:AA:93:BC:44:6C:FE:85:4C:4D:B1:40:9B:94:F4:E1
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584E94EA50EB20CF198E1CAB43E8
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     47050
IP address blocks:        173.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:50:eb:20:cf:19:8e:1c:ab:43:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=36ab086a-4b0e-4c33-83c7-e5eeb8f5f7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:34:ad:8f:50:6b:74:46:ac:44:29:7e:cf:
                    b5:89:2f:10:14:af:1f:7c:a0:06:ca:98:7a:ee:c0:
                    d6:96:56:e5:9d:d8:52:65:b6:3d:bc:ec:b9:b3:ae:
                    5e:51:61:0b:e8:a7:3e:42:b9:55:77:b4:ad:f5:d3:
                    ff:71:21:b0:bc:7a:92:73:fc:d7:9e:88:43:a4:85:
                    0f:e4:18:74:e4:5a:2c:ec:b1:50:bf:a4:ee:0c:75:
                    49:d6:13:2a:68:02:1f:52:db:06:cd:57:06:b6:5a:
                    49:77:33:c2:a3:c5:9e:8c:40:47:ec:d1:4e:04:9e:
                    9f:bc:25:b4:84:8d:c6:70:bd:9f:5e:66:12:48:24:
                    e5:5c:96:c9:fe:03:76:06:ee:0f:2e:8a:af:3e:1f:
                    f5:01:30:86:1c:0b:78:66:4e:48:ca:fe:20:20:09:
                    6c:d4:1b:3d:6b:16:ac:0e:ea:4a:72:25:c7:d1:0f:
                    06:74:76:a2:36:e3:62:06:e7:56:93:d5:48:2e:ba:
                    42:f0:8d:16:97:a7:cf:29:e0:83:c2:84:30:ae:2a:
                    4d:74:79:d8:3a:de:c0:ae:87:c5:ad:38:18:85:3e:
                    ed:c9:44:e4:10:fc:4b:8a:0f:ca:b9:52:d2:7a:19:
                    08:79:59:ec:0b:ee:c3:fa:16:bd:3e:7e:46:ea:52:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:1B:5B:70:AA:93:BC:44:6C:FE:85:4C:4D:B1:40:9B:94:F4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2bd54a4b-cf66-3ad7-b279-8094b32af154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:97:5d:34:87:1d:89:d5:66:ea:99:e9:78:69:95:f5:87:f7:
         d7:0c:05:4e:01:40:18:3b:4d:fc:e3:ed:66:a2:22:b1:53:c8:
         f4:5e:b7:30:90:31:d2:b1:63:43:4c:11:8a:e7:c0:ec:1f:f4:
         78:a2:e7:49:81:7f:4e:5e:2d:fb:ec:0e:a3:8e:93:f8:00:6d:
         c0:d7:0b:12:79:2b:08:8c:a4:07:6b:76:3d:f0:3b:ed:2f:48:
         0e:46:7a:73:50:96:9d:d8:4d:4a:cd:bd:ae:9a:02:e7:2d:5f:
         87:a1:75:a7:43:78:89:32:1b:4f:d9:e2:bc:13:cc:1f:80:19:
         91:e4:f4:43:78:b8:f4:d4:42:ff:11:47:02:e7:53:40:5a:08:
         da:7b:65:e4:42:ce:8f:df:e9:26:8b:d8:6d:55:44:83:8a:2d:
         a1:d5:bd:e8:50:8f:c8:31:84:f6:26:17:b7:0b:62:c0:32:70:
         8a:52:4a:1e:df:fc:88:fa:7e:fa:37:f0:93:96:95:90:e5:34:
         0a:26:91:45:27:f6:81:48:fe:4c:a9:3b:92:73:68:ff:c6:07:
         92:26:4c:21:6d:fc:07:e1:f8:bd:73:56:34:2a:bc:1d:9c:d9:
         f8:ea:e4:b4:0f:6f:86:79:fb:37:94:2f:fb:c4:96:70:06:74:
         4b:b2:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:32 2026 by rpki-client