Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/ec0bc2da-5239-3185-af32-dd45cd0437ce.roa
File:                     ec0bc2da-5239-3185-af32-dd45cd0437ce.roa (raw, json)
Hash identifier:          22jFCkFP9bPN9lPAOVK9hod3VRX3zG0ra7TEdpLiCLw=
Subject key identifier:   D7:4C:DA:75:2D:56:C4:7E:3C:5D:E4:7A:D5:F6:FC:23:62:20:98:7C
Certificate issuer:       /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial:       010D0C9F4328584E709F72A38E20F6E05ABAD520
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/ec0bc2da-5239-3185-af32-dd45cd0437ce.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     401165
IP address blocks:        104.219.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:72:a3:8e:20:f6:e0:5a:ba:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=40f81d19-50e5-48d2-9f41-5a6379f4fc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:aa:a0:f5:c9:95:35:75:70:b9:cb:8a:90:
                    f8:ca:22:6c:05:3c:c5:c6:09:58:2f:eb:a5:c7:87:
                    64:85:7e:77:d4:20:d0:25:d3:9b:dc:a6:b2:12:32:
                    94:ae:f6:1b:2e:e3:b3:66:44:02:26:48:cb:f1:a6:
                    7f:1d:3b:59:58:49:c2:d5:48:d5:6e:79:95:41:d8:
                    5a:ef:37:0d:5c:af:8a:28:95:60:29:77:bf:e8:0e:
                    6f:2a:24:f5:73:e4:5d:f2:45:5f:14:35:07:36:d1:
                    0e:18:7b:2e:e6:e3:57:ae:3a:23:fd:2e:32:5d:88:
                    a5:97:aa:9e:e1:a3:9c:5c:0b:53:aa:03:62:36:93:
                    60:17:04:2d:8a:a9:27:41:99:d4:c4:00:b4:9f:b0:
                    b3:d6:be:f0:53:72:f7:3d:23:a2:17:96:b2:2a:fd:
                    65:7d:02:5c:29:62:0f:86:36:22:9e:29:db:52:75:
                    0d:b3:5b:e4:0c:7c:88:e7:8a:fd:e6:85:06:38:4c:
                    8a:58:f5:f6:7c:4a:78:3a:9a:30:87:81:ad:60:bf:
                    6c:bb:d9:9b:c7:46:9f:b7:0a:6a:73:c1:c5:2c:e8:
                    5c:28:c5:73:51:85:b3:c0:61:79:31:39:e2:3a:94:
                    d0:c3:4e:8f:2d:65:94:27:9e:8b:c5:03:42:54:6d:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4C:DA:75:2D:56:C4:7E:3C:5D:E4:7A:D5:F6:FC:23:62:20:98:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/ec0bc2da-5239-3185-af32-dd45cd0437ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:89:a9:d4:58:e5:84:7e:b5:cc:be:19:18:65:b4:70:e5:
         84:e8:8d:3b:6a:1c:b2:bf:1b:6a:f7:16:e1:5b:c2:ae:c2:e3:
         99:c6:5b:07:9e:9c:47:8d:57:6e:a3:54:d1:4c:c8:6f:30:4f:
         2e:2e:50:a8:20:d7:a0:48:32:f9:81:77:48:af:40:25:3f:ec:
         ed:be:eb:e5:d6:ee:ce:0f:bd:7e:04:7f:a6:52:9d:5e:e5:3f:
         ec:98:f8:b8:47:55:1f:6a:35:49:35:01:11:02:d0:ee:31:15:
         7f:f4:58:7c:a4:fd:72:7d:8a:cf:0e:2f:d5:39:64:b3:c3:94:
         80:b1:ed:a7:d8:19:3c:9e:cb:8d:9f:38:7d:06:97:16:cb:87:
         35:e0:8c:dc:dc:38:ed:92:c9:c8:28:7e:04:f4:48:79:58:82:
         73:a7:89:be:a3:ad:e3:fd:32:35:61:55:72:e6:b4:0e:6c:66:
         2e:3c:92:85:fa:bc:8e:45:2e:f6:ac:ce:77:fe:84:ea:a2:bd:
         a8:49:89:3a:fb:33:c4:bd:d5:0f:07:47:52:46:01:ff:cd:90:
         25:02:f7:c3:9f:28:8d:d1:cd:d8:e5:1f:2f:2d:c3:21:d8:00:
         88:f1:60:28:c2:41:ec:90:71:63:1a:c1:92:02:63:12:7b:02:
         77:a6:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:13 2026 by rpki-client