Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa
File:                     8a0baaff-63b2-3448-9111-f852017cd04c.roa (raw, json)
Hash identifier:          gyvMIp5+F8bwTV6L/DeghTI1mWopRyBIbCdAAKOCZD8=
Subject key identifier:   5C:F7:0F:94:A0:70:05:9B:9A:8A:D7:39:A3:03:25:F2:67:CA:55:DF
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584E1E444D2FB3279A6205867780
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36167
IP address blocks:        104.153.196.0/24 maxlen: 24
                          104.153.197.0/24 maxlen: 24
                          104.153.198.0/24 maxlen: 24
                          104.153.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4d:2f:b3:27:9a:62:05:86:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8d3e6d20-fae3-4ca0-9edc-3cb8e5e377b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:41:4e:ab:4f:35:1b:ef:df:44:5d:83:f7:
                    84:a7:06:2a:72:45:25:ad:7a:84:d1:a1:f7:bb:6b:
                    ae:46:9e:b0:38:3b:f0:43:61:a9:8d:47:8c:0e:d3:
                    2f:d3:fb:59:1c:ac:b3:7c:53:0a:31:2b:5c:f5:2d:
                    23:52:1c:0c:09:46:90:d4:ef:05:4e:48:ae:c4:11:
                    22:02:15:82:bc:0c:df:15:f9:07:05:35:e5:c4:11:
                    b7:57:b5:d5:80:14:c6:a4:16:e9:c0:7c:9a:57:06:
                    fd:d5:7b:de:39:a9:aa:d7:9e:58:17:68:5d:bf:9a:
                    8e:a0:fe:e4:ef:49:cb:2c:19:e3:b1:08:13:28:8a:
                    3a:d5:e4:76:cb:66:e2:20:68:d6:80:4e:f7:2d:78:
                    89:d7:e4:df:25:7e:c7:30:d6:28:da:e9:0b:a6:46:
                    1c:b1:7a:8f:f1:93:05:a4:96:96:d7:8b:8e:a8:a9:
                    59:0c:41:44:a0:0b:07:eb:01:3c:6a:43:37:c6:c1:
                    85:9f:66:fc:e0:72:42:43:4e:9c:b8:99:4c:b4:fc:
                    c3:93:14:f3:8e:46:b4:6a:ac:31:7b:88:c5:93:c0:
                    e5:c5:9f:df:1b:a3:c0:74:5e:02:1b:3c:c9:98:9b:
                    14:51:84:62:86:4b:ca:5c:97:f4:5d:7e:54:6d:02:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F7:0F:94:A0:70:05:9B:9A:8A:D7:39:A3:03:25:F2:67:CA:55:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/8a0baaff-63b2-3448-9111-f852017cd04c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:43:74:ea:6d:f7:50:90:35:95:cc:f6:aa:75:1d:9b:0b:c8:
         3f:57:5e:f6:3e:fd:b4:88:11:6a:49:da:55:96:66:f1:df:33:
         f5:59:37:c4:33:94:77:83:17:2f:38:2c:e6:87:31:cd:a3:3a:
         48:c6:f3:db:12:ae:e2:0e:1f:e4:1d:16:5a:72:7f:7d:38:61:
         e2:6a:36:85:09:32:14:07:7b:5c:f2:e1:53:b0:84:d9:57:59:
         de:01:1f:b2:d0:93:5e:0e:7f:65:75:42:a6:8a:8f:55:e4:01:
         cc:2a:3b:79:81:3b:9b:8f:38:ba:36:fa:a1:3f:ba:3a:9d:46:
         05:0d:d4:8a:39:40:12:d1:e7:a6:e4:ca:df:c8:68:6f:a3:70:
         3e:f7:13:3a:9c:50:4c:88:c0:3b:56:94:6f:da:0a:d7:4e:78:
         d8:38:cc:6b:b0:3b:3c:44:a3:3f:2a:1a:81:08:65:eb:a2:8e:
         75:9e:c4:79:8e:57:a6:ce:1d:9a:3a:b7:1e:10:75:53:0b:9e:
         86:cc:49:19:f7:e1:99:e0:a9:52:03:47:29:f1:f1:8a:73:3c:
         19:fd:53:9f:54:93:9e:f9:34:e1:38:0a:58:8c:96:aa:09:ab:
         a6:82:a6:e2:e6:cd:f3:b7:68:a0:9d:56:1b:7f:d5:16:9c:8d:
         81:d8:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:52 2026 by rpki-client