Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/ea229415-d1e4-3a4b-beb1-8845637347b1.roa
File:                     ea229415-d1e4-3a4b-beb1-8845637347b1.roa (raw, json)
Hash identifier:          ry22jqik2IqPH28zG7LJVtmIPw3mYifbFcmGWhtXKOI=
Subject key identifier:   7D:77:92:77:BE:D6:AD:C7:48:01:83:B6:6B:EF:14:B3:89:2D:04:FF
Certificate issuer:       /CN=0ae76a00-7077-4242-bd8c-2e2f42541f7b
Certificate serial:       010D0C9F4328584F0D6CD6EB02CDE86AB59A6690
Authority key identifier: FA:4A:E6:42:4A:45:89:B3:C2:C7:88:00:7B:31:6B:79:6F:EE:43:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/ea229415-d1e4-3a4b-beb1-8845637347b1.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     33529
IP address blocks:        104.194.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/0ae76a00-7077-4242-bd8c-2e2f42541f7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/0ae76a00-7077-4242-bd8c-2e2f42541f7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:d6:eb:02:cd:e8:6a:b5:9a:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae76a00-7077-4242-bd8c-2e2f42541f7b
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=5dbb6a26-cdd2-4cc1-81fd-d005f6b5a4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:76:0e:1f:88:66:2f:5f:58:fb:b5:db:ff:
                    05:f8:6f:41:36:30:57:87:58:c5:44:e8:a4:c7:d4:
                    aa:0f:b7:ff:9b:2c:ef:bc:75:e4:8a:64:13:c3:02:
                    3a:5f:c1:d1:1c:4d:28:76:e5:c6:80:3a:b8:0d:77:
                    e4:55:c0:dc:5a:b1:e2:b6:0c:a4:c6:01:67:f5:84:
                    ae:10:d8:8d:ab:c3:c7:36:88:e3:38:6c:95:30:be:
                    9e:ed:03:ac:85:37:8a:e0:8b:35:8e:c1:4c:d5:d3:
                    8b:3e:8f:35:a7:78:d1:e7:36:17:9d:e1:f8:19:f0:
                    60:3b:56:d8:fe:f0:eb:32:bf:24:09:b0:80:b3:e7:
                    36:09:17:85:da:bd:94:d6:33:44:a5:2e:f6:f9:80:
                    ee:a1:fb:9f:9e:01:59:5b:aa:4d:3b:75:7d:b8:33:
                    0c:7f:11:ce:b0:5d:d5:16:44:2b:a7:0b:6e:76:c2:
                    f9:6b:85:36:fb:82:30:73:b5:fb:fd:2c:4e:d9:ee:
                    9e:35:8b:a4:23:a5:2a:b9:fd:98:a7:1d:ed:81:37:
                    e6:8b:ed:f3:7b:f5:46:03:6f:f5:be:89:bc:b1:9a:
                    80:a8:70:27:83:de:ae:7d:2c:78:d5:7c:52:f8:81:
                    5e:45:30:0b:12:7d:72:9b:e3:f8:68:bc:b8:9c:ba:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:92:77:BE:D6:AD:C7:48:01:83:B6:6B:EF:14:B3:89:2D:04:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/ea229415-d1e4-3a4b-beb1-8845637347b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b/0ae76a00-7077-4242-bd8c-2e2f42541f7b.crl

            X509v3 Authority Key Identifier:
                keyid:FA:4A:E6:42:4A:45:89:B3:C2:C7:88:00:7B:31:6B:79:6F:EE:43:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ae76a00-7077-4242-bd8c-2e2f42541f7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:21:50:64:8b:07:9d:8d:ee:ce:53:f9:63:74:35:01:5a:
         ee:15:14:d3:b1:40:33:50:0e:dd:ce:06:c4:99:37:85:7a:3e:
         a6:cd:75:7e:5f:46:e4:58:d8:f1:dc:28:29:25:db:fe:8b:b3:
         a9:67:2c:3a:63:f2:5a:1d:56:6c:6b:96:91:8b:44:ba:0c:a4:
         64:98:3a:33:65:4d:18:69:3d:5c:55:c0:2e:66:a9:5f:8d:66:
         e5:f8:fc:43:72:73:19:8b:60:d1:85:72:37:da:7d:a5:f1:f9:
         67:87:07:c7:04:7d:69:ce:ff:88:68:a0:72:f5:a7:c8:e3:7f:
         5a:4e:4b:29:6d:71:49:80:69:21:27:0e:c4:b5:79:c3:e7:ec:
         f3:0e:df:55:88:f9:1a:7b:21:41:6f:8f:77:2a:b5:d2:0b:4e:
         14:2b:ee:d9:e5:f7:29:e5:06:b8:a0:a1:1d:b1:c1:b0:23:69:
         71:d9:1f:ff:02:0b:86:a2:c2:c7:00:96:89:3a:86:67:e6:98:
         f1:37:39:c7:ba:47:52:0e:f2:dc:2f:c2:1d:07:9e:cb:bb:59:
         2f:83:72:80:64:dd:18:c9:26:dd:3c:db:5c:a9:2d:62:ab:c0:
         0a:a4:6d:d9:65:fe:99:cc:dc:58:c4:1a:85:96:8a:85:d2:d2:
         9d:63:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:27 2026 by rpki-client