Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa
File:                     5149ea9d-085b-32d4-ba40-19d14821e133.roa (raw, json)
Hash identifier:          9yhhA2UXaJKik+CnYJFxyV0DeN7+buzD5viVslTDoHE=
Subject key identifier:   A4:FC:D3:0C:1C:72:69:D8:AA:C5:93:A5:31:59:53:93:02:39:8C:12
Certificate issuer:       /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
Certificate serial:       010D0C9F4328584EA787148557508EAC7F4D1C80
Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16851
IP address blocks:        104.218.81.0/24 maxlen: 24
                          104.218.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:14:85:57:50:8e:ac:7f:4d:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d9a80cef-70cc-43fa-ac48-a25a7ccf3a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:17:80:a5:8e:b7:63:44:0b:79:b7:43:61:
                    09:fb:02:a8:b7:2a:1c:af:27:12:03:16:7b:e8:c8:
                    0f:ff:46:5e:70:4a:b8:e1:36:79:44:5f:4b:1a:5b:
                    79:f3:e8:9f:7c:8c:75:ee:07:e9:6b:10:92:a2:40:
                    42:e2:f9:9c:70:a5:5c:97:53:88:15:e2:7a:24:ff:
                    6f:43:a4:f9:2b:ce:a0:65:0a:04:28:80:f3:8a:dc:
                    c4:c1:0c:df:c9:02:60:4d:e8:81:72:98:78:cb:93:
                    53:fd:b8:92:75:af:e2:9b:fe:83:6b:39:86:07:c2:
                    74:86:4c:34:31:bb:4d:98:79:2f:f9:61:37:dc:63:
                    e7:1c:0a:54:60:9a:71:06:4b:b1:d5:cd:d1:4b:a0:
                    90:a2:72:8b:e5:72:cc:96:d8:04:81:07:2b:5b:25:
                    bf:43:7f:e4:85:29:af:d7:23:90:fc:c4:4f:52:a1:
                    98:35:61:43:18:12:09:54:3e:14:3e:0e:e6:b6:d6:
                    dd:c1:04:ec:ef:0e:c4:50:a8:90:da:72:61:47:e8:
                    0b:ef:a4:09:bb:e1:e7:8e:fb:2f:b2:91:3e:b0:db:
                    ef:a5:d1:02:af:55:f4:e7:26:19:c7:34:d8:4f:6b:
                    96:56:b3:a5:bc:4d:3d:3f:14:3a:0b:96:4a:6d:f5:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FC:D3:0C:1C:72:69:D8:AA:C5:93:A5:31:59:53:93:02:39:8C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/5149ea9d-085b-32d4-ba40-19d14821e133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.81.0-104.218.82.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:59:72:72:c0:be:b1:52:96:8e:ef:69:63:1d:d4:1a:88:57:
         4a:37:2a:96:ca:ab:da:da:88:1a:8d:9f:6a:cd:0c:47:49:2a:
         e6:50:54:c2:29:25:ea:1c:51:7d:e1:1f:af:ac:c2:4c:8e:91:
         fe:f7:33:77:d0:33:4e:9b:22:f6:ea:25:0b:10:b6:18:b4:99:
         16:4a:f4:e0:4f:50:b3:92:3f:27:35:09:75:7e:8b:b9:75:3b:
         ab:f3:39:d1:b1:b5:59:5c:cf:d7:26:03:a4:98:28:89:67:88:
         e8:f6:ef:41:57:52:91:1b:34:7a:46:8c:c2:05:4c:76:cf:23:
         21:74:47:23:8f:cb:72:93:b0:b6:90:34:32:2b:1d:e3:14:9b:
         15:b9:c4:51:de:16:77:cf:31:53:ea:7b:05:68:c8:6b:68:8a:
         0b:c2:ae:80:cb:12:69:e4:06:85:52:d1:bd:7d:8c:6c:f4:5f:
         4a:50:19:ab:2c:7c:d3:dc:bf:82:9e:02:64:e4:6b:96:2b:40:
         63:08:de:87:9c:57:b9:fa:8c:f1:54:b0:86:f3:a7:3b:e1:27:
         a3:f3:4a:0e:71:fe:cd:da:42:4c:4a:63:ad:8d:67:fb:e6:50:
         e2:00:f2:23:86:b9:dc:e8:1e:00:5c:77:6c:e1:b8:8a:67:bf:
         e1:8d:55:34
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6nhxSFV1COrH9NHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3M2EtYTgxOTczZTU4
M2UzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDlhODBjZWYtNzBjYy00M2ZhLWFjNDgtYTI1YTdjY2YzYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKEXgKWOt2NEC3m3Q2EJ+wKotyocrycSAxZ7
6MgP/0ZecEq44TZ5RF9LGlt58+iffIx17gfpaxCSokBC4vmccKVcl1OIFeJ6JP9v
Q6T5K86gZQoEKIDzitzEwQzfyQJgTeiBcph4y5NT/biSda/im/6DazmGB8J0hkw0
MbtNmHkv+WE33GPnHApUYJpxBkux1c3RS6CQonKL5XLMltgEgQcrWyW/Q3/khSmv
1yOQ/MRPUqGYNWFDGBIJVD4UPg7mttbdwQTs7w7EUKiQ2nJhR+gL76QJu+Hnjvsv
spE+sNvvpdECr1X05yYZxzTYT2uWVrOlvE09PxQ6C5ZKbfU3PQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKT80wwccmnYqsWTpTFZU5MCOYwSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83Zjlm
NzBhYy0yYzUxLTRmYmUtYjczYS1hODE5NzNlNTgzZTMvNTE0OWVhOWQtMDg1Yi0z
MmQ0LWJhNDAtMTlkMTQ4MjFlMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2Y5ZjcwYWMtMmM1MS00ZmJlLWI3
M2EtYTgxOTczZTU4M2UzLzdmOWY3MGFjLTJjNTEtNGZiZS1iNzNhLWE4MTk3M2U1
ODNlMy5jcmwwHwYDVR0jBBgwFoAU3Ism0BEDZm1UNI0zLxY5bk5SdgcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZjlmNzBhYy0yYzUxLTRmYmUtYjczYS1hODE5
NzNlNTgzZTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo2lED
BABo2lIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAOFlycsC+sVKWju9pYx3UGohXSjcqlsqr2tqIGo2fas0M
R0kq5lBUwikl6hxRfeEfr6zCTI6R/vczd9AzTpsi9uolCxC2GLSZFkr04E9Qs5I/
JzUJdX6LuXU7q/M50bG1WVzP1yYDpJgoiWeI6PbvQVdSkRs0ekaMwgVMds8jIXRH
I4/LcpOwtpA0Misd4xSbFbnEUd4Wd88xU+p7BWjIa2iKC8KugMsSaeQGhVLRvX2M
bPRfSlAZqyx809y/gp4CZORrlitAYwjeh5xXufqM8VSwhvOnO+Eno/NKDnH+zdpC
TEpjrY1n++ZQ4gDyI4a53OgeAFx3bOG4ime/4Y1VNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:44 2026 by rpki-client