Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa
File:                     70963064-0dcb-3341-92fe-c7f40030f75f.roa (raw, json)
Hash identifier:          LlnFMdP9friFGc8N97jb7BpNzgl/ykNlN3C/XS0iiRk=
Subject key identifier:   D4:BA:26:5E:40:78:FF:45:71:CC:F5:4B:BC:B9:67:A5:32:C8:29:6D
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584CAA2717B256562E82DD3654C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     9009
IP address blocks:        104.218.194.0/24 maxlen: 24
                          104.218.196.0/24 maxlen: 24
                          104.251.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:17:b2:56:56:2e:82:dd:36:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=570eda84-644e-46fe-ba6e-451ac6cfa6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:6b:b1:80:00:a6:50:45:de:45:69:10:dd:
                    92:14:03:35:7f:fb:04:a5:51:f6:ec:25:29:73:ed:
                    65:4d:a9:6f:60:20:e6:fd:8f:8b:ab:8e:be:39:d4:
                    07:17:ea:60:cc:74:e3:8f:bf:e2:ba:eb:ee:f5:7f:
                    7b:73:64:12:7d:0c:28:8f:c0:04:00:ec:9f:40:bc:
                    a4:77:a9:af:c5:d6:a3:4d:d4:2e:df:46:b2:2e:1c:
                    8b:20:0c:5f:2d:e4:2b:1a:4f:36:cd:26:6f:50:3f:
                    84:a4:6d:9c:6f:f2:c1:68:d3:e4:2b:13:8d:83:bc:
                    53:79:5e:53:7c:1a:53:94:bd:5f:7e:ec:db:56:fe:
                    e2:f3:f3:21:1a:14:3c:f9:1c:25:48:aa:6b:4d:1e:
                    b7:1a:b0:38:72:11:b6:be:7f:6c:95:35:95:7a:16:
                    68:58:58:a0:d3:57:1b:6f:30:7d:0c:57:7d:27:62:
                    e9:65:d2:00:5e:b4:61:88:01:61:00:5a:98:1a:41:
                    19:ef:7e:a3:b3:4a:ef:9a:52:94:e9:2a:6d:05:fb:
                    da:32:12:56:34:71:5c:0d:42:8b:f3:59:cd:ac:62:
                    9b:b8:95:ff:f1:84:f5:5b:2f:99:01:6c:41:a9:d6:
                    10:94:e3:ee:e9:5f:c0:d4:73:e4:a0:b1:65:8a:b3:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:26:5E:40:78:FF:45:71:CC:F5:4B:BC:B9:67:A5:32:C8:29:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.194.0/24
                  104.218.196.0/24
                  104.251.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:99:1f:33:89:01:bb:7f:95:76:29:41:51:bf:3e:95:be:05:
         05:e5:21:1f:3b:80:44:2e:3e:e1:8c:67:a0:c1:1f:69:ee:bb:
         15:37:d5:fc:f5:22:9c:ad:f7:4e:2a:ce:00:94:f6:69:3b:ed:
         7e:e6:5b:48:27:74:2c:98:51:91:a2:b1:63:64:e4:27:8f:0d:
         5c:47:44:05:89:93:ee:8f:1c:91:86:f2:b8:6e:e3:e5:20:aa:
         ea:8f:c1:76:29:b4:11:f9:d1:26:16:e1:62:cb:59:d2:53:35:
         f4:2d:83:26:94:66:d5:68:cf:53:73:61:08:3c:50:41:9b:44:
         3b:cc:1f:67:84:8e:36:f3:c3:e4:22:76:d4:69:8d:da:0c:4b:
         7a:8c:3e:e0:e2:c8:95:f8:cb:27:c2:94:5d:f4:79:41:0b:a9:
         aa:8a:d3:f1:c4:8f:8d:8e:29:57:b3:4e:36:d8:95:6b:4f:da:
         70:4c:70:3f:85:0f:d7:24:5e:17:07:47:85:48:05:5c:36:23:
         56:ce:14:f0:f3:81:eb:68:17:7b:36:04:49:53:91:d4:b9:e3:
         a4:b4:eb:88:5c:00:cd:3a:42:74:8a:09:ca:01:f5:b3:8f:7b:
         8b:e0:9a:1c:6e:16:5b:b7:21:59:09:11:ab:75:fd:38:53:cd:
         45:83:9b:84
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEyqJxeyVlYugt02VMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
NTcwZWRhODQtNjQ0ZS00NmZlLWJhNmUtNDUxYWM2Y2ZhNmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssxrsYAAplBF3kVpEN2SFAM1f/sEpVH27CUp
c+1lTalvYCDm/Y+Lq46+OdQHF+pgzHTjj7/iuuvu9X97c2QSfQwoj8AEAOyfQLyk
d6mvxdajTdQu30ayLhyLIAxfLeQrGk82zSZvUD+EpG2cb/LBaNPkKxONg7xTeV5T
fBpTlL1ffuzbVv7i8/MhGhQ8+RwlSKprTR63GrA4chG2vn9slTWVehZoWFig01cb
bzB9DFd9J2LpZdIAXrRhiAFhAFqYGkEZ736js0rvmlKU6SptBfvaMhJWNHFcDUKL
81nNrGKbuJX/8YT1Wy+ZAWxBqdYQlOPu6V/A1HPkoLFlirN5XQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFNS6Jl5AeP9Fccz1S7y5Z6UyyCltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzA5NjMwNjQtMGRjYi0z
MzQxLTkyZmUtYzdmNDAwMzBmNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaNrCAwQA
aNrEAwQAaPtYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFSZHzOJAbt/lXYpQVG/PpW+BQXlIR87gEQuPuGM
Z6DBH2nuuxU31fz1Ipyt904qzgCU9mk77X7mW0gndCyYUZGisWNk5CePDVxHRAWJ
k+6PHJGG8rhu4+UgquqPwXYptBH50SYW4WLLWdJTNfQtgyaUZtVoz1NzYQg8UEGb
RDvMH2eEjjbzw+QidtRpjdoMS3qMPuDiyJX4yyfClF30eUELqaqK0/HEj42OKVez
TjbYlWtP2nBMcD+FD9ckXhcHR4VIBVw2I1bOFPDzgetoF3s2BElTkdS546S064hc
AM06QnSKCcoB9bOPe4vgmhxuFlu3IVkJEat1/ThTzUWDm4Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:38 2026 by rpki-client