Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
File:                     ee78d578-cb00-360f-80f3-173b2465e141.roa (raw, json)
Hash identifier:          k1BNbHsMAzHcQz7nGScLlZyfY+P7icluK8ORU2pDElk=
Subject key identifier:   76:1C:08:2B:C5:FE:19:0A:B8:DC:C8:A7:A3:4B:79:E7:4E:B5:F4:EB
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F4328584DEF45D8BE1AA55AA727B47C80
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     16509
IP address blocks:        104.249.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d8:be:1a:a5:5a:a7:27:b4:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=66a40224-d229-435f-b386-c37958960094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:15:98:7e:01:9d:f3:5e:a4:2f:6c:0f:33:
                    17:b1:4c:85:3a:33:27:7c:02:a4:12:c3:ec:a4:a1:
                    a2:f7:13:f0:90:6c:54:f3:23:6a:b9:7f:0c:3a:9d:
                    82:3f:58:cb:1c:58:bd:f1:e9:97:cc:9b:70:9a:9a:
                    92:8e:26:24:e8:0c:89:13:b1:ea:f0:11:c5:ab:22:
                    2b:c9:f4:48:db:63:4f:41:40:5b:ca:4a:64:89:31:
                    0f:5b:36:0c:0d:85:31:72:70:7f:42:c5:b2:b8:4f:
                    05:7b:74:80:91:88:16:c5:eb:36:49:fa:f1:b2:7b:
                    6a:01:36:83:cf:ea:26:d3:ee:49:65:3f:0e:01:5f:
                    65:bb:f9:12:3c:c9:5a:d0:bb:76:ec:1d:08:a9:71:
                    0a:f5:ca:d5:50:bc:54:cd:c9:3e:0b:f7:28:7c:89:
                    73:ec:c8:f4:59:d2:4d:fc:b2:64:9a:42:66:f9:5d:
                    25:0b:b3:f7:db:fc:88:71:39:b8:a3:71:4f:3c:11:
                    aa:50:34:ee:f3:74:ac:b0:08:57:5a:3f:40:c8:69:
                    a8:ba:61:f4:2e:50:8e:ee:ba:c8:e0:44:c1:04:fd:
                    1e:27:18:55:ee:79:aa:32:0a:52:15:87:34:a5:89:
                    3d:e5:0b:8d:34:b5:28:c9:b9:18:9e:48:0a:6d:3c:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:08:2B:C5:FE:19:0A:B8:DC:C8:A7:A3:4B:79:E7:4E:B5:F4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:5a:e8:09:45:7e:f8:6c:70:ec:83:df:1f:46:c3:4a:11:
         30:ce:32:27:2a:1a:4f:c5:02:68:33:26:aa:7b:f4:77:79:78:
         02:1c:2b:48:f2:5f:9f:20:2d:c2:73:e2:f2:8e:71:d4:16:6c:
         11:ba:f4:af:5b:c7:f4:81:c5:75:f5:ea:74:98:b6:56:7c:43:
         36:82:c0:8e:23:56:53:8c:f5:ed:02:41:14:2c:ec:de:3f:3a:
         7f:7b:50:85:ab:4c:c4:7c:80:62:de:78:fa:8f:c7:48:5d:0e:
         04:72:dd:2c:b3:bd:7b:66:ca:b3:da:35:2e:8d:b5:5c:3c:31:
         4c:52:f0:64:cd:12:b0:bc:da:7a:46:16:51:ef:04:bd:a9:60:
         7f:de:7d:26:3d:10:e3:f7:f6:13:20:0e:8a:28:1a:ff:e1:d2:
         e6:91:45:bf:3e:56:98:7f:d1:6c:9c:f0:e6:6d:8b:26:d7:36:
         27:25:fe:3e:12:ae:a5:3c:61:c2:26:88:06:53:cf:09:dc:f7:
         55:54:aa:8f:8f:3f:a0:54:3f:21:62:ac:bc:a6:20:b8:50:3a:
         7f:fa:8a:c8:96:b8:f4:21:9b:a1:83:41:a8:2b:58:33:df:4f:
         cb:53:eb:18:67:54:a6:a4:f8:8c:86:19:fc:f7:63:a8:40:bb:
         73:31:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:00 2026 by rpki-client