Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa
File:                     ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa (raw, json)
Hash identifier:          cG7OcDioH/wJ1ZHsOrSegOJHrMkLc/aS4J/sePDIq9g=
Subject key identifier:   65:CC:2F:76:9D:BE:78:94:D0:AB:27:F2:CF:4C:4B:96:33:16:E8:73
Certificate issuer:       /CN=01442de1-f586-40f5-9267-bc35d3b70cac
Certificate serial:       010D0C9F4328584F49888467F316072B2F1D3E00
Authority key identifier: 5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13457
IP address blocks:        104.167.194.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:84:67:f3:16:07:2b:2f:1d:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01442de1-f586-40f5-9267-bc35d3b70cac
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=358d6d3b-4dc2-4628-9044-79f99b377f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:81:98:3d:95:0f:1c:0e:49:ed:6d:94:e1:
                    6f:ef:4e:b2:ca:c0:4d:7e:3e:ac:81:a8:8a:70:8a:
                    a4:33:e4:16:88:34:1c:64:6a:de:d1:7f:f0:85:3a:
                    69:9d:c9:6a:21:08:33:52:85:15:a2:9d:4f:90:73:
                    71:52:e0:88:0a:c6:e1:9b:ac:37:f1:2e:53:ce:22:
                    ea:38:32:a7:6c:2f:54:1a:eb:0f:4e:0a:c7:bc:83:
                    cf:39:f5:c5:a2:ad:bc:a6:66:48:1c:2f:53:ac:bf:
                    d9:9a:3a:8d:f4:69:b8:74:f7:9d:e2:7f:79:a9:c2:
                    74:f9:10:e3:61:66:33:34:87:c9:9f:14:b9:6c:76:
                    29:95:64:b5:a1:9f:60:bf:61:85:88:58:95:3e:2d:
                    3b:28:5d:57:dd:a5:5a:a6:2a:43:35:75:c7:e7:9b:
                    1e:a3:c9:ee:0a:5c:9e:ee:e2:3b:99:ce:ba:52:7f:
                    83:43:c4:9e:0d:95:cd:ec:69:50:0b:fa:4b:ec:42:
                    8a:fb:6c:75:29:1b:c8:e8:eb:9c:b9:71:14:16:cc:
                    99:3f:0c:6f:9d:0e:88:a2:16:d1:6e:7f:26:24:55:
                    4c:7d:54:a8:76:cd:8f:06:5c:66:2f:b5:3e:10:42:
                    9e:c3:ca:30:15:93:0d:c6:e6:35:7f:cb:2f:05:33:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CC:2F:76:9D:BE:78:94:D0:AB:27:F2:CF:4C:4B:96:33:16:E8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/ce5b5bb0-0760-32ae-bdce-1ed7b12ecd05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac/01442de1-f586-40f5-9267-bc35d3b70cac.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0B:CF:B1:5F:79:00:31:FF:83:DD:E9:9E:15:1C:5C:25:E4:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01442de1-f586-40f5-9267-bc35d3b70cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:23:f9:48:0c:b6:82:69:97:37:25:86:76:9b:45:86:2b:7b:
         27:88:38:5a:88:40:6e:85:c3:fd:5f:80:b6:14:f7:b7:15:d6:
         24:41:a9:cd:b8:06:fe:47:3f:c8:ef:f8:33:c2:ba:ef:0a:2f:
         0b:f0:d7:28:2a:48:0b:40:53:91:4a:a0:2c:fe:f2:df:5d:e9:
         3a:1b:9e:0b:41:bd:79:eb:d5:bd:72:0f:c9:f2:33:5e:72:93:
         58:ec:27:e2:f9:2a:46:e9:51:86:17:42:21:d5:f8:d0:a8:94:
         35:2b:f5:68:ee:d9:44:f7:63:35:d7:52:45:46:a2:54:a1:da:
         3c:18:60:00:4a:e4:5a:e5:91:fe:a0:43:ed:8e:81:3d:b2:34:
         34:31:fc:8a:8d:43:1c:25:76:ab:a9:5f:38:40:47:a4:a4:36:
         0c:b3:70:b3:2f:0d:23:36:61:eb:3c:1f:0f:92:9b:7c:20:15:
         d6:14:5a:b7:8c:72:ed:24:0a:13:bc:4d:4a:04:a7:81:18:1e:
         fd:ab:0d:53:38:b4:30:99:fe:6b:08:67:67:dd:3f:14:36:22:
         60:05:59:b5:3c:ff:6e:2f:a6:55:b2:8b:8a:50:88:c4:9f:81:
         5e:c3:fd:1a:7f:2d:2f:39:0a:9e:21:a8:34:20:78:85:f7:93:
         dc:65:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:29:13 2026 by rpki-client