Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa
File:                     b189127e-17d2-3a1b-8678-fb80dca44ec2.roa (raw, json)
Hash identifier:          8RUmbhVFrRdEtb2d6neKrWsnV0ncLYZK8tigYikgcsQ=
Subject key identifier:   28:36:6B:76:D5:60:80:BA:82:F1:6E:FB:78:7D:37:3D:3B:F4:9C:78
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584B1C36C806AAE9B24D65F17980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     5650
IP address blocks:        104.218.195.0/24 maxlen: 24
                          104.218.199.0/24 maxlen: 24
                          104.251.81.0/24 maxlen: 24
                          104.251.86.0/24 maxlen: 24
                          104.251.93.0/24 maxlen: 24
                          141.193.96.0/23 maxlen: 23
                          158.115.228.0/23 maxlen: 23
                          172.98.167.0/24 maxlen: 24
                          172.98.170.0/24 maxlen: 24
                          172.98.189.0/24 maxlen: 24
                          207.230.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c8:06:aa:e9:b2:4d:65:f1:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=eb7ccc68-8a51-455d-9d2c-764671f6a7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:de:75:79:2a:a3:3a:ed:82:ac:d3:48:9a:
                    18:5f:7a:30:bf:55:94:63:e3:01:c1:99:4d:87:72:
                    ae:2d:5b:83:e4:74:07:29:93:08:13:c0:cc:e4:c1:
                    e3:da:91:c4:b3:a4:ef:83:d5:bb:1d:3c:56:ee:41:
                    44:60:fa:bb:89:53:3a:da:51:18:c0:0e:c9:16:6d:
                    5c:6c:bc:73:cb:d2:48:89:ee:3c:a8:9d:c5:31:8c:
                    24:a9:53:54:2b:35:95:33:35:6d:60:a0:8d:e0:4e:
                    b9:49:b3:cc:a6:1f:2c:78:09:2d:4d:c7:37:9b:0e:
                    12:a5:d7:fa:56:09:5a:e3:93:1c:61:89:6e:be:43:
                    ee:1e:18:88:b3:a0:eb:39:b6:29:87:75:df:59:bd:
                    25:47:c0:00:73:3c:46:72:44:3b:d7:ee:a9:00:62:
                    e0:46:a5:1c:c3:64:a5:0a:35:0b:44:a5:36:9e:39:
                    e0:ab:02:b5:3e:ac:b3:d9:2b:fe:97:c1:b8:66:b2:
                    1f:b7:16:44:87:5e:b2:7c:53:1e:6b:2f:b0:34:f5:
                    6c:58:63:7d:d3:24:08:4c:d5:d5:25:26:10:b2:7f:
                    42:00:70:c8:46:31:14:ab:79:c5:77:19:36:e9:c4:
                    1e:72:e2:bb:6f:93:ce:35:91:b6:7a:85:1b:44:c1:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:6B:76:D5:60:80:BA:82:F1:6E:FB:78:7D:37:3D:3B:F4:9C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b189127e-17d2-3a1b-8678-fb80dca44ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.195.0/24
                  104.218.199.0/24
                  104.251.81.0/24
                  104.251.86.0/24
                  104.251.93.0/24
                  141.193.96.0/23
                  158.115.228.0/23
                  172.98.167.0/24
                  172.98.170.0/24
                  172.98.189.0/24
                  207.230.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e9:41:5c:9e:d8:00:df:0a:40:15:e6:6e:d7:3b:a3:63:24:
         6e:ac:c0:8b:46:1a:3a:55:2c:4b:be:8f:0e:70:cb:4f:eb:1e:
         49:16:94:21:03:f7:4f:c2:e1:d3:1c:34:7d:dc:94:ce:32:46:
         b8:04:e6:84:07:fd:64:da:9e:f2:be:a1:81:e3:43:0a:e3:92:
         d6:e5:58:6f:7b:c5:7d:6a:08:56:e1:12:70:6a:9f:ea:2a:4c:
         fb:03:e6:3b:8a:d4:2a:2c:47:e3:4f:20:03:c1:29:2d:ea:48:
         cd:92:f5:6c:b1:ae:49:31:d0:e5:fa:47:6b:59:79:73:79:fc:
         be:94:2b:13:47:62:a3:9f:af:81:39:44:cf:03:54:a0:8f:b8:
         9a:8b:69:df:9d:3a:c6:66:83:8f:a6:1b:4b:00:17:bb:b4:d6:
         66:0d:39:34:18:47:cd:63:00:a8:ae:34:a9:79:27:e2:ed:89:
         12:bb:5a:57:43:3e:7a:f2:0e:d6:00:2a:12:9f:89:6f:21:57:
         60:c9:87:61:38:de:09:aa:a9:96:ef:e6:71:b7:19:af:b2:5a:
         be:98:db:1f:f9:bf:55:ab:8a:5e:6c:60:c4:52:b2:99:42:e9:
         4d:63:a9:43:15:24:aa:ca:15:db:d8:18:63:40:89:45:30:98:
         41:91:05:8b
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEscNsgGqumyTWXxeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZWI3Y2NjNjgtOGE1MS00NTVkLTlkMmMtNzY0NjcxZjZhN2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPDedXkqozrtgqzTSJoYX3owv1WUY+MBwZlN
h3KuLVuD5HQHKZMIE8DM5MHj2pHEs6Tvg9W7HTxW7kFEYPq7iVM62lEYwA7JFm1c
bLxzy9JIie48qJ3FMYwkqVNUKzWVMzVtYKCN4E65SbPMph8seAktTcc3mw4Spdf6
Vgla45McYYluvkPuHhiIs6DrObYph3XfWb0lR8AAczxGckQ71+6pAGLgRqUcw2Sl
CjULRKU2njngqwK1Pqyz2Sv+l8G4ZrIftxZEh16yfFMeay+wNPVsWGN90yQITNXV
JSYQsn9CAHDIRjEUq3nFdxk26cQecuK7b5PONZG2eoUbRMGTDQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFCg2a3bVYIC6gvFu+3h9Nz079Jx4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjE4OTEyN2UtMTdkMi0z
YTFiLTg2NzgtZmI4MGRjYTQ0ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAaNrDAwQA
aNrHAwQAaPtRAwQAaPtWAwQAaPtdAwQBjcFgAwQBnnPkAwQArGKnAwQArGKqAwQA
rGK9AwQAz+ZyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADzpQVye2ADfCkAV5m7XO6NjJG6swItGGjpVLEu+
jw5wy0/rHkkWlCED90/C4dMcNH3clM4yRrgE5oQH/WTanvK+oYHjQwrjktblWG97
xX1qCFbhEnBqn+oqTPsD5juK1CosR+NPIAPBKS3qSM2S9Wyxrkkx0OX6R2tZeXN5
/L6UKxNHYqOfr4E5RM8DVKCPuJqLad+dOsZmg4+mG0sAF7u01mYNOTQYR81jAKiu
NKl5J+LtiRK7WldDPnryDtYAKhKfiW8hV2DJh2E43gmqqZbv5nG3Ga+yWr6Y2x/5
v1Wril5sYMRSsplC6U1jqUMVJKrKFdvYGGNAiUUwmEGRBYs=
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:31:43 2025 by rpki-client