Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
File:                     f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json)
Hash identifier:          K2GO1LkFDaTua7ET+ydYfXEKtJyJ7sKspZeWYHSXl8w=
Subject key identifier:   E9:DA:02:33:38:0B:7C:DB:F3:FD:27:8B:B6:9A:A0:42:13:4A:66:9B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584EA7882A5B29B9A9F721CBE900
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        104.251.80.0/24 maxlen: 24
                          104.251.85.0/24 maxlen: 24
                          104.251.89.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
                          158.115.224.0/24 maxlen: 24
                          158.115.225.0/24 maxlen: 24
                          158.115.226.0/24 maxlen: 24
                          158.115.227.0/24 maxlen: 24
                          158.115.248.0/24 maxlen: 24
                          158.115.249.0/24 maxlen: 24
                          158.115.250.0/24 maxlen: 24
                          158.115.251.0/24 maxlen: 24
                          172.98.185.0/24 maxlen: 24
                          206.127.218.0/24 maxlen: 24
                          207.230.96.0/23 maxlen: 23
                          207.230.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2a:5b:29:b9:a9:f7:21:cb:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b15eef82-49de-44f7-bb8b-ab3989e1ee1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:f2:a8:98:d0:d2:32:69:8a:cc:5f:69:e5:
                    0f:b4:b3:d7:20:3a:3f:36:cf:04:b8:c5:a7:a9:c2:
                    3e:63:d5:cd:81:ad:78:6a:a1:89:ee:eb:18:62:7e:
                    35:2c:f4:92:f3:f8:b7:2c:7b:05:b1:1a:4b:39:16:
                    29:56:b1:30:45:08:cf:ca:61:c5:4d:73:f4:72:7c:
                    dc:4c:15:8b:b6:86:66:38:76:7f:5d:11:61:92:f3:
                    0f:2e:e1:a4:fa:b7:eb:01:0b:8c:d5:49:a7:7f:42:
                    bc:ce:dd:0b:83:15:eb:b8:1b:32:64:13:cb:2f:64:
                    e3:d1:a8:d6:2b:92:93:f8:2d:1e:ec:00:a0:35:74:
                    bb:7c:76:cd:f1:fd:90:83:a6:4f:ad:2a:6c:67:fd:
                    db:59:88:36:91:37:a4:cf:88:da:e0:c6:91:eb:09:
                    ec:56:e1:ca:62:b0:18:46:f2:13:91:a6:51:eb:17:
                    67:e4:8a:d6:d9:7e:63:26:33:4a:b0:cb:4a:4c:ac:
                    ed:ac:dd:9e:aa:e5:6c:68:a2:aa:35:6b:d1:1b:cc:
                    a0:7b:a8:a6:14:91:7b:42:6e:3c:a7:d7:5e:50:49:
                    3d:a6:e4:7c:4a:23:06:37:12:0b:a6:97:b3:c3:4c:
                    6f:05:e6:bf:ed:a0:ad:1e:e0:b3:83:e7:50:40:5e:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:02:33:38:0B:7C:DB:F3:FD:27:8B:B6:9A:A0:42:13:4A:66:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.80.0/24
                  104.251.85.0/24
                  104.251.89.0/24
                  104.251.91.0/24
                  158.115.224.0/22
                  158.115.248.0/22
                  172.98.185.0/24
                  206.127.218.0/24
                  207.230.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:91:94:61:e9:c0:d4:e8:fc:9a:b1:cc:10:22:4b:58:09:67:
         05:6d:75:48:e5:dd:4c:c2:29:fb:84:ca:32:c0:66:4d:66:2c:
         f1:95:cb:dd:02:0b:d5:4c:3b:0b:99:fa:51:a1:7b:63:6d:ae:
         bd:d6:fe:29:a4:99:3d:4b:75:89:6a:c3:9f:3b:60:c0:cf:83:
         02:0e:52:f2:12:d4:f2:62:10:b1:a2:9c:ee:a9:3f:6a:f8:86:
         94:30:48:7f:2a:8d:c8:3c:f3:de:e0:8d:05:8b:fc:b4:e6:4b:
         78:79:f5:05:8c:ae:07:60:d1:a7:db:4f:b1:d0:07:12:c9:4a:
         62:be:ca:a1:71:ef:5a:e6:d6:76:7b:a6:13:47:8e:e8:33:c4:
         d2:aa:30:bf:f4:87:7d:ec:98:16:4b:1a:65:f7:97:ec:0a:5c:
         cb:11:0b:e3:72:10:41:bb:3c:e6:6b:23:3e:b1:7a:bd:ef:f6:
         33:e9:12:86:20:9d:15:d4:ae:e3:23:5b:95:30:99:e5:51:ad:
         dc:22:10:29:01:f2:e7:e5:c5:fc:60:fa:65:8d:7a:37:5e:4f:
         db:bc:9f:c7:22:6f:8c:18:22:44:71:88:e3:ba:66:94:96:cc:
         9d:c7:90:70:2c:da:dc:66:34:78:52:8c:ee:5d:d5:2c:fc:86:
         73:04:e2:ee
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE6niCpbKbmp9yHL6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjE1ZWVmODItNDlkZS00NGY3LWJiOGItYWIzOTg5ZTFlZTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvfyqJjQ0jJpisxfaeUPtLPXIDo/Ns8EuMWn
qcI+Y9XNga14aqGJ7usYYn41LPSS8/i3LHsFsRpLORYpVrEwRQjPymHFTXP0cnzc
TBWLtoZmOHZ/XRFhkvMPLuGk+rfrAQuM1Umnf0K8zt0LgxXruBsyZBPLL2Tj0ajW
K5KT+C0e7ACgNXS7fHbN8f2Qg6ZPrSpsZ/3bWYg2kTekz4ja4MaR6wnsVuHKYrAY
RvITkaZR6xdn5IrW2X5jJjNKsMtKTKztrN2equVsaKKqNWvRG8yge6imFJF7Qm48
p9deUEk9puR8SiMGNxILppezw0xvBea/7aCtHuCzg+dQQF44xQIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFOnaAjM4C3zb8/0ni7aaoEITSmabMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z
M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA
aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWRlGHpwNTo/JqxzBAiS1gJZwVtdUjl3UzCKfuEyjLAZk1mLPGVy90C
C9VMOwuZ+lGhe2Ntrr3W/imkmT1LdYlqw587YMDPgwIOUvIS1PJiELGinO6pP2r4
hpQwSH8qjcg8897gjQWL/LTmS3h59QWMrgdg0afbT7HQBxLJSmK+yqFx71rm1nZ7
phNHjugzxNKqML/0h33smBZLGmX3l+wKXMsRC+NyEEG7POZrIz6xer3v9jPpEoYg
nRXUruMjW5UwmeVRrdwiECkB8uflxfxg+mWNejdeT9u8n8cib4wYIkRxiOO6ZpSW
zJ3HkHAs2txmNHhSjO5d1Sz8hnME4u4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:27 2026 by rpki-client