Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa
File:                     e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa (raw, json)
Hash identifier:          CzST5tEs755qP5AUpTM57ORf9XwkYE0PDEtw6gk31Uo=
Subject key identifier:   ED:E1:AC:9C:7B:71:F6:AA:AE:56:52:95:07:3C:85:C3:94:EC:FD:F5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA734633756CEECAB4E340
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        104.156.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:73:46:33:75:6c:ee:ca:b4:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=29fd556e-5005-4f03-96fa-6c30a90e9cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:f6:92:f2:9a:65:f7:88:87:ae:ba:90:71:
                    ae:46:c3:b8:5e:73:bd:82:99:64:11:6d:27:83:3b:
                    43:af:e0:59:9d:44:98:f8:c4:f2:2c:75:06:fb:c1:
                    ca:2a:03:ce:fb:7d:a1:c6:29:14:de:67:20:6e:ce:
                    f0:ed:ec:5c:68:01:b1:09:95:79:9b:16:9c:42:88:
                    d5:62:c3:18:8c:13:63:d8:00:8a:bc:83:ae:d6:80:
                    2d:1f:f2:dc:9e:6f:c0:2e:c9:f4:c0:61:2b:79:67:
                    9a:3c:2d:45:3d:28:57:d9:ad:39:d9:f0:f8:e1:30:
                    a1:90:cb:7c:a8:52:4f:58:9e:b9:c3:94:ea:d3:44:
                    af:e1:60:0d:9f:f7:dc:63:f9:02:1e:1e:7a:aa:7a:
                    45:80:32:fd:82:ca:b5:04:93:cc:72:93:92:d1:91:
                    88:33:71:b5:f4:66:d9:cf:fe:e2:be:34:8d:b2:3c:
                    01:96:cc:66:d9:ac:36:20:47:68:43:1a:58:c5:c9:
                    83:cb:54:5f:d2:2e:f7:21:c9:90:d0:66:3e:c9:39:
                    8b:4a:40:9f:91:a6:82:4a:76:95:f3:59:a9:34:97:
                    9f:a8:f4:3d:d8:2f:e4:5c:38:71:37:a2:8b:08:92:
                    10:d3:bb:11:13:6b:e1:7d:e4:f5:f3:38:8a:95:3a:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:AC:9C:7B:71:F6:AA:AE:56:52:95:07:3C:85:C3:94:EC:FD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e8667baa-0392-3948-bde7-1f50c0c5ff7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:28:41:8e:65:cf:b5:30:53:9c:3b:8a:71:f3:a1:7c:b3:
         f1:9a:1b:61:87:41:07:25:4b:1b:b1:54:cf:84:91:e9:42:2e:
         5b:11:18:63:1a:2f:21:bb:ed:a0:da:54:c0:db:bc:d1:bc:25:
         e5:8d:cd:1a:5c:02:c5:3c:aa:41:a1:3b:a4:20:49:9f:63:20:
         2b:3c:99:1f:fd:c2:22:6e:31:b1:8c:c6:bf:d9:65:23:5f:76:
         ad:0c:d2:61:c3:e6:ce:fe:59:fa:1b:2f:b7:87:08:06:96:58:
         f2:34:a0:5b:c7:41:a1:c2:78:fd:bb:a7:40:43:0c:7e:57:0d:
         e8:a4:55:6e:2c:77:76:5d:bb:19:38:08:4d:fd:18:56:c7:9d:
         be:34:43:03:bb:b2:b1:8c:a1:20:6d:39:a6:ef:3d:17:06:fd:
         8d:e2:ae:75:df:32:f0:c2:da:c3:61:20:91:88:62:20:c4:cd:
         2d:6b:26:aa:2b:f5:6b:8f:34:52:bf:35:6c:a6:2a:a5:3c:89:
         8d:c7:59:18:98:aa:b5:92:83:07:6a:0c:4c:4f:24:16:6f:4d:
         2f:e3:0f:3a:e1:ae:ad:1f:fa:e2:4d:59:e9:ee:dc:68:88:1b:
         4f:c5:29:a3:c4:05:52:57:54:fe:30:7f:a3:c9:3c:b6:fa:58:
         a0:89:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:24 2026 by rpki-client