Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
File:                     75056a33-01f6-3ec3-9c10-448b2543c9e9.roa (raw, json)
Hash identifier:          itcwE864bmU2+fuz+r4OSbL3R6ejgC60B7x0psmab3A=
Subject key identifier:   50:78:DD:9C:39:A0:CB:A0:21:5C:9D:6F:17:ED:F3:EC:65:8F:CB:1F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584E1E9EA675E99AB6785F5ECEE0
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
Signing time:             Wed 10 Jun 2026 00:02:25 +0000
ROA not before:           Wed 10 Jun 2026 00:02:25 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     40934
IP address blocks:        104.204.176.0/24 maxlen: 24
                          104.204.177.0/24 maxlen: 24
                          104.204.178.0/24 maxlen: 24
                          104.204.179.0/24 maxlen: 24
                          104.204.180.0/24 maxlen: 24
                          104.204.185.0/24 maxlen: 24
                          104.204.187.0/24 maxlen: 24
                          104.204.188.0/24 maxlen: 24
                          104.204.190.0/24 maxlen: 24
                          104.204.191.0/24 maxlen: 24
                          141.109.163.0/24 maxlen: 24
                          159.48.161.0/24 maxlen: 24
                          159.48.162.0/24 maxlen: 24
                          159.48.163.0/24 maxlen: 24
                          159.48.164.0/24 maxlen: 24
                          159.48.165.0/24 maxlen: 24
                          159.48.166.0/24 maxlen: 24
                          159.48.167.0/24 maxlen: 24
                          159.48.168.0/24 maxlen: 24
                          189.25.96.0/24 maxlen: 24
                          189.25.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:9e:a6:75:e9:9a:b6:78:5f:5e:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jun 10 00:02:25 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=874c1437-7ff9-4038-8a41-ea8125d42d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:09:d4:28:2d:4c:b5:eb:cb:04:22:47:4e:
                    ee:b4:87:21:d1:8e:a2:c7:61:6e:05:0f:65:31:04:
                    5d:5c:fc:1a:d5:af:dc:95:f6:7f:06:1d:da:c8:7b:
                    dc:57:75:26:9e:29:cb:4b:aa:42:98:72:a9:04:da:
                    53:d7:f4:40:24:88:e9:2d:0c:9d:5e:b5:b7:92:f9:
                    17:30:e0:3e:4c:3e:47:59:16:cf:d7:ef:7f:dd:00:
                    86:0a:01:73:d1:dd:f5:fc:fb:27:7f:75:03:1d:52:
                    0d:cb:8e:cf:b1:1f:fd:5e:6b:41:69:34:63:c7:37:
                    bc:f5:69:71:b0:f0:a6:f5:0f:3c:15:d5:d5:5f:ab:
                    59:49:fb:fc:77:29:9b:04:25:da:68:e9:ce:31:62:
                    7f:76:dd:bd:bd:51:fd:27:61:6f:bd:57:8c:69:0c:
                    31:0e:e1:1c:fe:cf:b6:3c:fa:e6:70:a7:94:f5:51:
                    94:c5:15:3f:92:4e:ca:36:93:79:d2:5d:c6:ac:22:
                    bf:41:57:d2:07:91:5f:84:3f:9c:2b:d4:92:e6:15:
                    bf:ea:93:e4:65:b7:e5:50:04:74:f8:3e:db:25:a2:
                    d5:41:b5:3c:e2:28:5d:08:b6:20:51:22:fe:6b:96:
                    e3:b8:92:d4:73:26:ec:9e:12:e5:60:db:8b:fb:c6:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:DD:9C:39:A0:CB:A0:21:5C:9D:6F:17:ED:F3:EC:65:8F:CB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.176.0-104.204.180.255
                  104.204.185.0/24
                  104.204.187.0-104.204.188.255
                  104.204.190.0/23
                  141.109.163.0/24
                  159.48.161.0-159.48.168.255
                  189.25.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:72:39:38:b2:6e:c2:ce:ac:4a:ed:86:64:b9:3d:0e:5e:
         9c:86:5e:4c:9e:10:3d:b8:36:e6:52:02:cf:32:71:97:6c:21:
         b5:ed:2a:43:95:1f:69:f2:16:e1:a9:a6:ce:77:07:9b:74:23:
         d2:4e:0d:ad:af:a0:ea:a4:28:5f:a6:fb:8a:55:7d:64:66:1a:
         56:de:2b:92:26:81:91:55:0f:50:be:56:9a:d5:88:15:f5:83:
         ec:68:b3:06:b3:9d:37:81:08:af:dd:fb:4e:8d:39:fc:a5:b3:
         c9:7f:52:24:2c:30:03:9d:74:23:52:eb:f7:b7:9f:5a:69:23:
         ed:35:e6:3f:8d:e3:21:b4:fa:93:ff:91:ae:62:07:42:74:ff:
         72:f4:77:6d:43:f1:bc:ee:f4:46:b5:63:08:08:9b:e5:a4:7c:
         90:6e:c5:db:76:dd:37:5a:e0:1b:60:04:e3:44:55:93:c6:37:
         8f:4e:83:1b:9e:0b:ec:39:5b:d6:b8:26:20:d3:6a:07:ea:b9:
         e2:27:97:01:b8:ed:d3:3d:17:0c:48:ed:42:00:6c:70:19:0d:
         77:13:54:c8:2b:b8:ba:d1:8e:6e:12:69:8e:5e:e4:17:7e:98:
         d2:7a:b0:02:9e:20:07:1b:a2:6c:70:4a:be:bf:9f:71:ab:98:
         b6:09:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:41:37 2026 by rpki-client