Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa
File:                     79a51892-55ea-3370-9e2d-09102a1cc80b.roa (raw, json)
Hash identifier:          ZXvJ38OS2CrI4cXG9EOV6OXjtcvJorkjryD+fwtPMIU=
Subject key identifier:   6C:6F:AF:13:B0:58:0F:83:61:D0:8E:57:80:7A:47:96:F3:A2:87:80
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584F27F252E71C0EFE494B061380
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     7352
IP address blocks:        104.166.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:52:e7:1c:0e:fe:49:4b:06:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=cf653855-6cb9-4aee-8283-844a9318df94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:44:3e:04:6b:c7:52:3d:71:cc:66:4f:a5:
                    a7:e0:eb:2a:5f:c6:74:79:09:6b:e7:98:d2:6c:28:
                    7e:07:95:17:0a:58:34:81:24:22:cd:95:be:cb:14:
                    39:16:b9:bc:7d:d4:c9:fa:f4:22:1f:5c:37:bb:bb:
                    16:c1:7d:f1:8b:4e:d2:4c:d9:4d:47:33:08:f0:e8:
                    1b:08:7f:6f:ba:dd:08:63:ee:f1:93:09:64:65:4e:
                    51:29:55:c9:c4:3c:24:99:4f:92:76:29:0a:da:3f:
                    22:87:57:f1:c6:80:ee:3e:96:38:88:96:43:49:e5:
                    f0:db:2a:fd:ef:dd:bb:5b:5c:92:21:ba:df:44:41:
                    77:bf:f9:60:5c:bd:ed:3c:4d:59:d5:80:84:52:e0:
                    b4:a5:59:47:7e:bf:85:45:25:ed:19:5e:06:db:7e:
                    8c:e9:9d:ca:b7:f0:83:22:9a:90:1c:97:b2:ed:7f:
                    35:50:ff:59:89:23:6e:f1:d9:07:26:7c:ba:dc:c4:
                    68:0b:74:d8:a0:f1:0c:48:73:b2:0e:29:15:c3:ec:
                    6c:72:ab:85:29:f4:2d:52:9f:f3:d2:bf:26:c3:86:
                    3e:f7:cc:d6:e7:dd:ef:06:42:52:43:5d:42:ac:af:
                    96:1e:76:cf:0b:8a:c0:6d:42:7e:fc:25:dd:b9:e7:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:AF:13:B0:58:0F:83:61:D0:8E:57:80:7A:47:96:F3:A2:87:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/79a51892-55ea-3370-9e2d-09102a1cc80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:16:af:8d:60:62:4c:87:03:ef:2a:f6:a2:80:3e:a7:72:
         0f:04:5f:9c:ea:e3:66:92:2f:ac:89:28:e0:06:cd:f3:f2:2f:
         15:cb:58:37:f7:aa:51:55:41:23:c4:6e:ef:7e:f5:8a:0c:22:
         47:9d:49:a8:a4:68:be:24:3d:1d:70:d2:f4:e6:21:a4:73:56:
         e0:d3:0f:06:dc:7b:4d:91:22:99:9d:8f:40:fc:df:24:2d:e5:
         e9:9e:70:b8:b3:cf:ad:83:f1:85:27:68:d6:ca:5c:d6:43:61:
         96:5f:fc:20:86:55:6e:f0:7c:f4:29:3d:84:6d:8b:b8:9a:84:
         ae:db:ca:d2:6c:69:3e:8a:c5:f9:63:e6:ce:a4:b3:55:7f:15:
         02:ad:2e:65:b2:2c:01:3f:bb:89:5d:ef:77:9e:71:c0:fd:cf:
         04:02:7e:b5:57:b1:58:3c:fa:4f:c3:01:76:a7:dc:2d:69:47:
         54:0e:43:49:9e:a7:0d:94:f8:a5:ca:44:c5:e1:5a:df:ab:f6:
         2b:02:04:58:9d:bc:1b:26:12:17:c5:39:91:d6:2c:f6:7b:86:
         c0:88:cb:2e:86:bf:4c:bf:6f:8f:9a:54:f2:ec:59:38:97:13:
         98:1b:37:31:b7:f1:41:b0:43:fd:e8:1c:38:96:c0:11:1d:66:
         a5:0d:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:29 2026 by rpki-client