Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa
File:                     94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa (raw, json)
Hash identifier:          nihTp6TpUPQRwWI/J1yC3IbE18hvEyBIs+kII/LiCQw=
Subject key identifier:   65:F6:38:88:BE:32:D3:15:1B:00:4E:8C:15:4D:E2:9A:B2:09:48:5F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E9A7FD357E159A791CF3D397C
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        104.250.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d3:57:e1:59:a7:91:cf:3d:39:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=bf2c05be-28e3-4a57-a37a-d726df814b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:25:d3:9a:e6:2b:33:63:64:d0:13:5e:dc:da:
                    08:9f:c1:69:df:30:12:13:7f:72:ef:18:b8:cf:f6:
                    09:98:cc:1e:9b:2e:17:0f:20:f1:65:41:a8:c0:90:
                    65:2c:49:72:4b:6b:b9:f0:18:c8:89:85:8f:bd:a6:
                    98:1f:7a:17:9e:87:14:62:91:4b:52:9a:00:7b:cc:
                    63:59:c1:42:fb:9e:6b:a8:c3:9f:1f:38:82:a3:db:
                    7c:2e:ec:dc:f1:05:2d:ca:46:ae:f6:d5:6f:f8:25:
                    a6:42:ec:1e:8c:1d:4f:4e:1f:18:45:09:ac:1d:20:
                    b9:81:84:23:ce:93:6f:d0:8e:04:29:ed:21:a8:fb:
                    46:53:a5:a6:66:d7:25:19:cc:c7:52:35:89:a6:33:
                    c2:0e:ee:a6:42:57:60:5f:7a:2b:3a:7b:42:e8:9c:
                    94:04:93:2c:ef:64:26:f9:7f:98:bb:59:b0:a3:fb:
                    23:b3:f7:4f:c5:df:a3:0f:fd:ab:25:ca:c0:28:84:
                    1d:15:dc:70:e2:ca:04:03:21:76:7c:c0:52:e9:23:
                    e0:d0:53:f2:00:04:5c:85:f8:9a:57:13:71:d6:a2:
                    08:de:7f:5c:91:92:d5:f6:75:e5:c0:23:93:ec:6e:
                    e7:c3:46:34:69:24:d7:c9:50:eb:19:06:e2:a1:c7:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:38:88:BE:32:D3:15:1B:00:4E:8C:15:4D:E2:9A:B2:09:48:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:18:e5:03:5a:f8:48:25:9c:8b:f7:0c:30:0e:9e:2d:c6:
         e4:d1:06:07:8c:c9:07:68:c1:a1:36:09:64:d7:eb:34:b8:59:
         26:66:65:04:1c:26:e8:22:e9:e2:73:89:e3:39:a9:66:7d:38:
         34:13:7a:e8:94:e2:e7:fa:9c:74:98:54:0b:c6:69:a1:86:71:
         93:76:50:9c:a2:1d:37:a3:f5:1c:1c:72:9d:96:e8:28:8a:83:
         55:28:b4:f2:10:95:9c:9c:73:10:80:81:3c:00:7e:d7:d1:05:
         6b:7d:7c:6e:55:d8:61:09:22:7e:b6:9f:a7:15:97:7e:33:cd:
         65:19:94:ed:43:77:cc:b0:ca:73:1b:d9:3b:51:cb:eb:62:c6:
         59:c6:11:6e:b9:92:9a:e3:f4:59:aa:42:98:75:6c:96:5e:fe:
         69:ac:48:24:41:fa:3e:20:64:a4:57:f0:e4:45:9b:8f:f8:d0:
         6e:51:73:63:ca:5f:b3:28:d3:a7:65:2d:9c:30:c6:d4:6f:11:
         30:91:8d:67:f2:0f:73:3d:05:f8:6d:72:7e:60:7d:92:4d:32:
         81:08:42:04:8b:44:10:5f:4d:b5:4a:73:90:d6:45:ed:ad:2d:
         63:54:cb:21:45:16:5d:e4:4b:d0:bf:82:ce:2d:de:ce:1e:62:
         2d:31:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:18 2026 by rpki-client