Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/352a5bb3-727a-3a78-ab0d-e62fe791971f.roa
File:                     352a5bb3-727a-3a78-ab0d-e62fe791971f.roa (raw, json)
Hash identifier:          UQlCU7UqZdJ9IRqPVOXakhDoVGmZ5DwPl194ej5qotM=
Subject key identifier:   89:62:8B:5E:4C:6E:9C:1B:64:04:21:10:AB:85:76:3D:FB:A2:57:82
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584E779A259D32969BE43062A100
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/352a5bb3-727a-3a78-ab0d-e62fe791971f.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     64245
IP address blocks:        104.250.112.0/24 maxlen: 24
                          2602:ffb0:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:25:9d:32:96:9b:e4:30:62:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=2d61ecc6-fd73-49ee-b38e-032070cf752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:b2:1a:2b:47:4b:93:65:cd:91:25:5c:3d:
                    b5:5b:12:bb:42:3b:4e:c7:49:aa:21:bd:80:76:99:
                    53:f6:1f:41:b2:2e:89:c3:3d:66:3c:df:49:4e:ef:
                    41:e0:f5:32:66:71:78:d2:c1:73:bf:f6:57:49:82:
                    68:f9:29:71:02:64:ca:59:00:35:3f:b8:ff:01:da:
                    bc:69:8a:c0:2e:a7:79:13:7a:70:33:db:a2:88:f6:
                    c1:e6:7c:8e:6a:1b:e2:80:58:84:3f:e6:72:1d:11:
                    61:4a:28:d0:f6:8f:71:5b:03:a1:24:96:cf:8f:a4:
                    54:6a:45:2a:c0:30:2d:3c:44:54:16:65:5b:66:6a:
                    c7:80:ad:f4:ab:02:e9:8b:d6:ca:1f:f9:d3:8e:b4:
                    e6:fb:a3:7f:ce:67:a8:25:d3:1b:df:5c:eb:ed:03:
                    a9:79:db:ab:ab:80:ab:34:77:8e:e9:71:88:66:38:
                    92:11:3b:33:50:5a:f4:c0:6d:99:28:86:f7:82:a5:
                    58:26:c5:b3:9b:38:ab:ca:4e:09:4a:2c:08:3f:19:
                    4c:2d:d7:5f:62:cc:39:dd:36:7e:14:02:1e:b3:a4:
                    6b:3d:b4:46:67:63:dd:bd:35:ef:2c:84:69:ba:84:
                    eb:b7:29:5d:24:cf:b2:35:85:64:84:3e:23:31:b1:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:62:8B:5E:4C:6E:9C:1B:64:04:21:10:AB:85:76:3D:FB:A2:57:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/352a5bb3-727a-3a78-ab0d-e62fe791971f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.112.0/24
                IPv6:
                  2602:ffb0:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:83:7e:57:d6:4b:7b:04:53:d0:1d:c5:a4:29:bd:41:21:
         5f:69:25:85:ec:83:a8:5d:36:2e:34:99:c4:ea:97:b8:27:6b:
         93:2c:8d:19:e1:7f:a7:9f:97:dc:91:f3:17:a5:71:56:3d:4e:
         59:71:af:94:b9:39:ed:61:eb:19:b3:80:b5:56:5e:ab:7d:46:
         f2:52:c3:b8:cd:5e:65:71:83:40:80:6e:23:87:3f:3d:23:4e:
         9d:63:09:c8:58:0e:e8:08:c1:75:35:b6:0b:1f:c4:00:2d:0b:
         b4:c2:e1:f5:ba:2c:01:57:48:d3:32:34:7a:ba:34:1a:a1:fc:
         ea:12:65:5a:aa:d6:aa:a0:85:4f:29:22:1d:d8:05:69:25:a0:
         49:f2:1f:f4:87:ef:6d:8b:87:34:c4:11:2f:72:3c:45:32:86:
         32:11:13:44:91:0f:ca:84:a8:45:0e:61:4d:e4:c1:11:da:a0:
         a2:52:72:34:ed:9a:98:fe:a4:b8:72:80:27:c9:33:43:5c:c0:
         17:a0:3c:db:3d:80:92:d2:75:e5:e0:f5:85:94:c5:b2:ba:e6:
         4c:c9:90:00:9d:07:04:00:aa:fc:9c:fd:2a:94:23:b3:51:17:
         36:36:ee:09:46:07:cd:27:d0:b9:fe:df:e2:5d:b9:8b:b3:57:
         ab:fa:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:56 2026 by rpki-client