Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
File:                     75056a33-01f6-3ec3-9c10-448b2543c9e9.roa (raw, json)
Hash identifier:          mGlktGZOvqwRGWtj4Pn0X2qS/HY0jNbod28eCJgNHwg=
Subject key identifier:   6A:1A:3C:F2:24:ED:95:03:0E:4C:F4:AB:E2:B0:DB:DB:6A:E8:0F:C4
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F8B0DA188699C2D3CBF92E100
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
Signing time:             Sun 18 Oct 2026 13:00:12 +0000
ROA not before:           Sun 18 Oct 2026 13:00:12 +0000
ROA not after:            Sat 16 Jan 2027 14:00:12 +0000
asID:                     40934
IP address blocks:        104.204.176.0/24 maxlen: 24
                          104.204.177.0/24 maxlen: 24
                          104.204.178.0/24 maxlen: 24
                          104.204.179.0/24 maxlen: 24
                          104.204.180.0/24 maxlen: 24
                          104.204.185.0/24 maxlen: 24
                          104.204.187.0/24 maxlen: 24
                          104.204.188.0/24 maxlen: 24
                          104.204.190.0/24 maxlen: 24
                          104.204.191.0/24 maxlen: 24
                          141.109.163.0/24 maxlen: 24
                          159.48.161.0/24 maxlen: 24
                          159.48.162.0/24 maxlen: 24
                          159.48.163.0/24 maxlen: 24
                          159.48.164.0/24 maxlen: 24
                          159.48.165.0/24 maxlen: 24
                          159.48.166.0/24 maxlen: 24
                          159.48.167.0/24 maxlen: 24
                          159.48.168.0/24 maxlen: 24
                          189.25.96.0/24 maxlen: 24
                          189.25.97.0/24 maxlen: 24
                          189.25.100.0/24 maxlen: 24
                          189.25.101.0/24 maxlen: 24
                          189.25.104.0/24 maxlen: 24
                          189.25.106.0/24 maxlen: 24
                          189.25.107.0/24 maxlen: 24
                          189.25.108.0/24 maxlen: 24
                          189.25.109.0/24 maxlen: 24
                          189.25.110.0/24 maxlen: 24
                          189.25.111.0/24 maxlen: 24
                          189.25.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:0d:a1:88:69:9c:2d:3c:bf:92:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 18 13:00:12 2026 GMT
            Not After : Jan 16 14:00:12 2027 GMT
        Subject: CN=121780ce-03ed-4d8f-b2d0-68418495d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:f5:28:4c:9a:60:fb:15:c5:96:f7:72:8d:
                    ce:4c:bb:d5:24:08:e3:f8:4c:8b:0c:2c:ba:6f:b4:
                    bc:48:52:ed:e2:d4:f2:85:1e:b7:41:d5:1d:e1:9c:
                    59:36:f1:b3:60:ff:f8:a4:cb:6d:6a:d6:ef:df:72:
                    a3:f7:ad:e1:a6:e1:08:5a:d4:2d:8d:09:bb:b1:d5:
                    b8:c1:63:e0:42:2b:4a:b8:02:f3:f9:4e:a2:16:fe:
                    32:6c:94:ba:9a:c7:ef:85:66:7f:e1:c3:6c:79:62:
                    88:ba:1b:fc:57:fc:19:f7:3a:a6:cd:21:5a:d6:b2:
                    a4:0a:56:10:52:77:9d:49:0d:a8:2f:d4:26:f6:fb:
                    b2:4e:62:f3:12:b6:f4:b3:03:9d:ad:14:4c:db:6e:
                    c6:00:85:fd:c8:56:80:de:e0:ee:8b:de:c7:04:bb:
                    35:2e:75:4f:3f:39:f1:b0:68:50:e8:28:a2:10:b1:
                    35:9a:85:26:83:87:e6:a6:ed:05:d4:6c:4d:c9:2a:
                    0b:78:76:93:00:8e:50:f5:19:36:59:27:1e:13:36:
                    d9:4f:01:a3:e2:51:55:62:5c:4f:5f:5c:d7:31:c7:
                    c4:fe:61:a4:6f:a3:51:f8:d0:7c:11:ed:08:3f:5f:
                    85:a4:ea:a3:f6:9a:89:7d:70:7a:92:55:fe:e6:01:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:3C:F2:24:ED:95:03:0E:4C:F4:AB:E2:B0:DB:DB:6A:E8:0F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.176.0-104.204.180.255
                  104.204.185.0/24
                  104.204.187.0-104.204.188.255
                  104.204.190.0/23
                  141.109.163.0/24
                  159.48.161.0-159.48.168.255
                  189.25.96.0/23
                  189.25.100.0/23
                  189.25.104.0/24
                  189.25.106.0-189.25.112.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:6d:64:0e:98:0e:a7:97:6a:0c:78:e9:30:70:4a:09:3c:
         7c:cb:ad:09:74:9d:6e:e3:ae:d0:d4:98:56:b5:cc:51:4d:a8:
         e1:2a:59:ab:03:69:b6:23:ef:53:45:c4:11:00:f2:66:00:b7:
         b1:ff:9c:90:ee:df:a8:77:94:06:e0:7b:4d:0d:53:85:3e:a2:
         e1:ab:a3:ce:f8:91:45:b8:80:50:5f:33:c7:d6:ef:b3:2f:b6:
         1b:36:f8:5b:e8:24:45:f3:7d:dd:f7:84:4f:c4:a2:df:cf:f2:
         08:f6:d7:d4:10:a0:91:87:f8:9f:58:32:c9:8a:d2:74:58:2e:
         15:59:83:9d:17:41:de:d9:1a:56:89:f4:c0:4a:ad:8f:31:df:
         5a:ee:a2:2f:eb:ea:a4:1c:76:f1:43:58:09:10:5e:aa:23:26:
         0b:70:d0:f3:21:d9:79:16:79:47:91:45:30:56:7d:f3:cd:a6:
         86:5e:db:03:f1:da:98:81:52:87:6f:d4:57:42:95:ef:43:0f:
         24:ef:67:21:47:a4:aa:64:44:ae:17:43:4f:73:a9:4d:78:d1:
         0b:49:35:d3:8e:8d:1e:82:4a:31:a8:64:3b:8c:02:5a:e9:1f:
         68:9d:dc:5e:94:43:04:f2:44:cf:35:d5:5b:7f:6d:9c:f7:ad:
         70:34:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:55:08 2026 by rpki-client