Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
File:                     ee78d578-cb00-360f-80f3-173b2465e141.roa (raw, json)
Hash identifier:          rgIbcipqjgIifUfel36p7HSMZOwR63zmPoWY2Epxgxk=
Subject key identifier:   F6:9D:6D:88:F6:40:EC:DA:F9:18:12:44:51:51:2A:09:81:62:78:7B
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F4328584F4973C00DF97EE4229BF5BB80
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        104.249.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c0:0d:f9:7e:e4:22:9b:f5:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ad7b8ca-7f41-465f-a2e5-e3a5c8ffde70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:df:19:16:39:e9:f0:8e:51:55:ea:bd:47:
                    09:d6:da:aa:fa:ef:80:c0:2b:f3:4a:53:ab:b7:6a:
                    7a:e7:c8:77:19:3c:0b:c6:8c:0d:22:f5:96:bf:ec:
                    8e:2a:d5:e3:df:36:a4:b9:c7:c6:7c:f1:b2:aa:5d:
                    3d:3b:5e:8b:12:dc:f9:97:0a:3f:1d:fb:08:64:5f:
                    1f:5f:24:e8:38:3b:2f:74:a9:5f:f3:a0:ee:c2:53:
                    fb:d7:7c:71:20:8a:93:6d:ff:af:45:c4:9b:00:be:
                    82:57:49:2f:22:e2:bd:f8:e0:2e:4a:49:60:2b:67:
                    c7:04:80:89:da:7a:32:47:c7:7f:79:5d:73:1f:26:
                    b4:1d:c8:ce:39:fc:3d:50:0f:df:49:b6:9c:ab:fc:
                    91:ab:9f:1d:1d:b4:73:6a:8c:66:f0:88:24:77:c4:
                    43:ed:68:de:51:0b:ea:56:eb:ce:a3:d8:27:13:e8:
                    18:b6:22:bd:b6:b2:20:24:a8:8a:66:5d:0b:aa:55:
                    33:4b:7f:61:5f:de:50:02:cb:52:f6:bf:73:c7:d1:
                    de:69:cc:5d:80:23:db:68:4e:6a:20:80:40:f8:f2:
                    96:df:95:51:c5:7a:60:6c:5a:af:c0:76:2d:ca:36:
                    d1:4f:d6:78:84:c4:8d:a1:66:66:05:dd:ef:6e:c8:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:6D:88:F6:40:EC:DA:F9:18:12:44:51:51:2A:09:81:62:78:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:f3:8e:7c:e6:0c:0c:b1:b3:d7:3b:41:78:ea:7a:7d:ab:
         c5:bb:82:b1:f7:22:ff:7e:50:f8:15:91:d4:48:78:ea:6b:03:
         1c:8f:bd:0c:1c:40:5e:f2:0f:cf:0d:4c:83:ed:42:a1:51:2d:
         08:fe:f6:e8:72:1b:59:2a:e3:7b:64:30:ff:f6:68:44:31:2e:
         09:8a:35:5d:8f:04:6e:3f:2b:49:68:1b:56:ae:d0:8a:fc:04:
         f1:42:15:48:d8:e7:d3:89:d0:d8:3c:01:00:06:f8:9c:24:6d:
         3c:e1:d1:34:60:dc:ab:38:72:d6:25:f6:ad:fa:2d:cd:24:40:
         d1:8f:94:6d:1f:2e:32:d7:d0:c3:3e:0d:e0:88:e3:6b:d6:69:
         5b:64:76:5c:b0:97:5e:7c:0b:5b:bb:81:88:f2:78:ff:ce:c5:
         67:ce:7c:06:ac:89:aa:44:4d:ab:da:fc:cc:01:c9:c5:4b:e8:
         0a:f2:45:f2:dc:c6:f7:cc:4f:49:31:5c:3f:01:bf:91:6e:4d:
         bf:b2:d8:ed:91:f3:67:68:f2:b8:ab:f6:64:3a:3c:b9:f1:3e:
         2e:df:f3:55:e1:51:ef:36:ef:f4:78:76:f8:75:e1:d2:a2:b4:
         cf:f1:65:c2:b3:a0:b3:3f:73:39:1a:44:a6:e5:e7:f6:c6:7c:
         7c:e7:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:33:55 2026 by rpki-client