Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f409f4b0-45b5-3576-ab2b-31065133db7a.roa
File:                     f409f4b0-45b5-3576-ab2b-31065133db7a.roa (raw, json)
Hash identifier:          bluLpEoO3xjk6naTAiYFPA7+rsGKDdNUGtBTa2Eb6aE=
Subject key identifier:   14:1E:A1:0E:5E:77:67:0C:BF:62:D8:47:4A:FC:0E:CC:E6:B5:32:56
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F594874833AE733FBA0827200
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f409f4b0-45b5-3576-ab2b-31065133db7a.roa
Signing time:             Wed 30 Sep 2026 17:08:23 +0000
ROA not before:           Wed 30 Sep 2026 17:08:23 +0000
ROA not after:            Tue 29 Dec 2026 18:08:23 +0000
asID:                     30633
IP address blocks:        104.166.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:48:74:83:3a:e7:33:fb:a0:82:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 30 17:08:23 2026 GMT
            Not After : Dec 29 18:08:23 2026 GMT
        Subject: CN=afc610e5-6607-4d9d-ab10-bb46fc77ef19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:c8:d0:9d:13:f0:d8:ec:50:ae:1c:7c:53:
                    70:39:13:f8:50:03:7b:08:65:b6:9a:3c:f4:af:d5:
                    8d:12:d3:10:eb:d1:5d:b5:37:64:8d:ed:b8:74:2b:
                    7e:30:65:fa:3c:ab:82:29:99:25:93:12:a9:87:ee:
                    8e:a5:5e:05:cc:d1:ae:b4:01:09:db:18:54:8e:2b:
                    f4:05:06:bf:c0:06:cd:28:0b:55:ce:15:8f:a8:d5:
                    37:78:43:03:c4:4c:9a:97:2f:cb:4a:ee:04:02:04:
                    c4:ea:18:72:a0:31:2e:81:59:c2:03:f5:a1:4e:a1:
                    1e:32:51:68:34:50:12:85:b0:70:c0:f5:7d:88:ab:
                    29:5e:c7:bf:20:07:2d:a7:a4:66:ce:1d:33:58:4c:
                    ef:70:69:62:08:aa:e9:18:b5:b2:53:d0:b8:c8:72:
                    16:ea:a5:88:ca:4f:53:66:08:d0:50:b2:ce:75:f9:
                    aa:7f:56:7f:70:72:b9:8a:81:b4:4e:3d:36:a3:25:
                    a9:bd:40:fd:6c:5c:0c:3c:e2:00:11:3f:77:45:76:
                    f7:da:cc:5f:f7:81:cd:c4:d3:62:ca:a4:0d:17:15:
                    e7:f6:5f:62:6f:c1:60:ca:bf:89:c3:08:fa:f5:15:
                    b9:5d:46:10:f6:83:77:b6:0f:92:a3:33:9a:de:f0:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1E:A1:0E:5E:77:67:0C:BF:62:D8:47:4A:FC:0E:CC:E6:B5:32:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/f409f4b0-45b5-3576-ab2b-31065133db7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:51:84:48:d7:2c:fc:cb:22:7e:10:68:d7:0b:2c:70:6b:
         e9:06:18:1c:db:79:60:48:c1:5d:9e:97:90:8d:fd:ee:bc:4a:
         59:a4:f7:e6:d0:01:4b:ad:f9:c4:75:28:d7:4e:cf:74:88:77:
         c5:72:b8:e6:44:3a:22:85:1a:89:0c:12:1e:0f:fa:6b:fe:8d:
         de:64:91:7a:d1:53:d2:c9:ab:fe:8b:c8:29:ef:2c:27:b6:3f:
         14:a6:9a:a5:8f:bd:61:db:bd:bb:f6:ac:a0:0d:6d:7e:43:8a:
         9f:ad:0d:b4:ea:3e:95:78:3c:6d:a6:7a:19:4b:8f:87:1a:87:
         86:c3:d5:32:5c:13:57:4f:f4:fd:a0:00:1b:b7:8c:e0:57:b8:
         36:f4:42:7d:fd:50:fe:86:8f:bf:0a:0d:51:b8:fe:99:48:1b:
         af:6f:32:1e:63:7e:02:2e:8b:a2:9c:86:a5:6d:d5:01:73:20:
         0d:47:d1:6a:ee:bb:f7:80:69:d4:6d:a0:84:e8:c2:1a:c9:09:
         de:37:52:4c:d6:1e:50:65:21:3d:0c:4a:e4:81:52:da:32:11:
         c7:a8:0f:5e:79:4f:8d:a7:3a:6d:ec:6f:1c:90:a2:6c:87:a1:
         d4:5d:53:96:6f:e1:24:7c:1b:dd:d9:a0:17:3b:ac:6e:08:2c:
         f0:6e:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:52 2026 by rpki-client