Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa
File:                     4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa (raw, json)
Hash identifier:          UVXTiu+fpxRz3XJ7zRbwZXiDAB7X3xI6wnJyW2dE5LM=
Subject key identifier:   DF:50:EF:B7:06:07:F7:61:CA:9E:58:E9:1A:58:15:99:BE:A7:B4:A6
Certificate issuer:       /CN=f18acb70-b579-4682-adfb-f098ad50b263
Certificate serial:       010D0C9F4328584EA7880FFF1998598C01096700
Authority key identifier: C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23546
IP address blocks:        104.37.79.0/24 maxlen: 24
                          104.193.100.0/22 maxlen: 24
                          167.254.224.0/22 maxlen: 24
                          199.27.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0f:ff:19:98:59:8c:01:09:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18acb70-b579-4682-adfb-f098ad50b263
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de861fce-322f-4243-bcdd-9264da00c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:e4:be:bf:d6:ec:70:03:3e:65:41:73:ca:
                    6e:e5:fc:cc:29:62:bd:c8:4d:35:ba:ba:83:44:79:
                    02:52:9c:6f:82:4a:a1:fc:a5:de:5f:46:61:2c:08:
                    7b:c7:6d:49:c0:24:34:a4:3f:cc:c7:0a:7e:52:d3:
                    be:9f:70:73:39:4d:ec:05:ab:2f:71:eb:e2:62:8f:
                    0f:88:33:9d:15:ab:a0:da:a5:f5:25:c4:84:1a:bf:
                    46:2a:fd:d0:8a:18:d9:43:44:83:10:61:9a:9d:47:
                    31:be:8c:c8:46:4e:59:40:ef:27:63:c9:33:2a:05:
                    7d:6a:dd:a8:ac:d9:4f:d6:ba:6f:48:e8:1c:4c:5b:
                    87:72:48:cc:7a:39:09:9e:4d:35:80:71:4d:1f:99:
                    45:c9:e6:36:4f:e6:b0:5a:5c:3e:7f:b8:d4:be:70:
                    c7:d3:2f:5a:e7:45:e8:5a:d3:cf:87:39:a0:a7:4d:
                    83:d4:61:a0:16:f9:46:9c:e4:c3:09:84:e9:44:a9:
                    68:0b:75:50:b9:41:0d:6e:74:53:91:9f:53:57:a3:
                    96:9c:ad:76:14:d6:06:83:69:9c:8f:8e:cf:d8:b7:
                    9c:91:d3:a2:ff:ff:14:23:dc:da:62:67:16:84:7c:
                    00:c4:cf:52:a8:59:b8:bc:da:cf:7a:86:2b:44:89:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:EF:B7:06:07:F7:61:CA:9E:58:E9:1A:58:15:99:BE:A7:B4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl

            X509v3 Authority Key Identifier:
                keyid:C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.79.0/24
                  104.193.100.0/22
                  167.254.224.0/22
                  199.27.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:76:79:f5:2b:9a:2f:6b:70:9f:ae:2f:e5:d7:ba:e8:32:77:
         fa:51:68:8c:e1:7d:a6:e5:24:26:27:28:f0:93:9a:b9:29:b2:
         73:03:9a:3b:04:7c:9b:3b:0e:f3:71:de:fd:44:40:a0:e0:a3:
         b5:00:22:a6:b5:13:ff:c2:fe:7b:d3:a5:0a:38:9a:59:80:fc:
         43:79:e6:dc:db:f8:4c:e1:fc:b9:fb:f5:c3:44:de:54:20:b5:
         7c:2f:4a:34:2c:43:0d:e3:d7:e6:ee:24:09:c8:cb:41:a4:59:
         05:71:0a:a8:21:3d:5d:43:f0:a2:1c:74:b0:f9:9d:59:c0:93:
         41:8a:f8:9f:16:ce:a7:9a:10:1c:f1:51:ee:c0:7e:45:6c:d6:
         1c:83:cc:e3:be:e8:f6:be:e9:83:8a:d9:ae:bb:47:18:a9:02:
         93:4f:0d:e1:e2:37:29:f2:03:5d:76:f8:06:12:52:6f:73:ff:
         ee:92:ef:62:c1:79:84:34:46:58:6c:d1:05:e7:2a:fe:a7:8a:
         35:c8:75:54:1c:de:92:3f:e8:2f:27:44:bf:d1:52:d5:d1:45:
         6e:29:71:37:f1:f2:83:37:5f:9a:b8:b6:46:a0:ae:80:8a:51:
         52:aa:57:26:00:a3:8d:f3:aa:41:f5:7a:5a:03:78:57:f7:62:
         55:97:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:29:28 2026 by rpki-client