Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa
File:                     7d656917-5924-37f5-b790-b2255d7bb0f7.roa (raw, json)
Hash identifier:          xN/+kywyCnB9+nU5Syb/FSQfZxwaa/uVPOUZNEQor1Q=
Subject key identifier:   F8:EA:94:1E:43:A5:7B:55:AD:9C:0F:7A:22:86:7C:72:AC:3F:DD:38
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EAA1654FB57C93DC77C5BD080
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa
Signing time:             Wed 29 Jul 2026 23:00:56 +0000
ROA not before:           Wed 29 Jul 2026 23:00:56 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     40934
IP address blocks:        104.204.182.0/24 maxlen: 24
                          189.25.35.0/24 maxlen: 24
                          189.25.38.0/24 maxlen: 24
                          189.25.42.0/24 maxlen: 24
                          189.25.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:16:54:fb:57:c9:3d:c7:7c:5b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 29 23:00:56 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=d2761502-f135-4a43-ba6a-bfcc5d2404e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:8a:56:de:a5:12:03:c7:52:cb:e8:cd:78:
                    2b:fa:eb:bf:0e:d5:fd:44:74:b5:45:2e:84:e0:4c:
                    53:18:22:f8:7c:ec:91:7a:14:c2:4e:b5:fb:25:67:
                    39:bb:84:64:5a:f5:e4:5a:88:54:88:cb:e7:b5:47:
                    41:79:df:e3:a0:42:4f:8b:4a:41:0b:19:98:ef:9f:
                    ab:0a:57:aa:95:e2:9f:0c:d4:89:1f:7f:41:a6:f8:
                    2d:4f:a1:5f:88:c9:21:94:8f:00:de:5e:d4:c6:50:
                    02:d5:9a:84:37:db:88:cf:c5:80:70:df:d5:24:7f:
                    fa:63:62:f0:79:9f:f4:da:c8:91:33:ea:91:f4:10:
                    7b:66:cd:07:df:00:86:da:ae:67:30:50:fe:6f:91:
                    a7:4a:93:31:27:a2:c3:d9:05:bf:c2:e6:ef:0f:dc:
                    1b:49:ff:05:67:f2:5f:e4:54:a1:5b:e6:8c:d3:be:
                    79:19:83:0f:31:d0:0a:b7:14:6c:69:55:04:31:d5:
                    fe:d6:58:4a:b7:30:d6:34:b9:26:3d:a6:2f:33:f7:
                    d9:1c:d1:24:d1:82:f4:17:9c:4c:77:21:4c:35:9e:
                    23:99:c4:94:56:31:cc:7b:89:db:16:d3:dd:3a:06:
                    1a:0d:ae:76:a8:2f:25:43:3e:5a:ab:e6:9c:89:4a:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:94:1E:43:A5:7B:55:AD:9C:0F:7A:22:86:7C:72:AC:3F:DD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.182.0/24
                  189.25.35.0/24
                  189.25.38.0/24
                  189.25.42.0/24
                  189.25.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:60:2b:b2:84:dd:6b:d9:dd:ad:eb:99:c9:74:d3:c2:23:
         23:1f:26:bd:f6:72:97:d7:dc:5d:8c:48:6a:18:eb:ad:be:44:
         cf:c1:69:b4:3b:72:d1:07:9a:50:0c:90:23:50:bb:18:49:36:
         25:b5:b0:33:63:58:41:55:ee:03:b2:fe:99:cc:d3:fb:48:44:
         14:04:d1:16:dd:17:a6:1f:da:9b:11:f8:1f:07:e8:39:80:f8:
         cf:7e:5b:cc:88:36:9e:bd:a5:9d:18:fb:1d:28:a1:2c:59:46:
         21:c1:b5:3a:cb:09:26:86:7c:6c:82:29:ef:a3:18:f2:4d:df:
         3c:51:44:e5:c6:42:25:5e:96:f2:42:29:42:96:77:13:1e:f2:
         a3:82:c3:82:f8:61:96:2e:c6:7c:b3:85:cf:92:ae:0e:f8:ab:
         a9:a9:b5:be:4f:66:a8:43:f7:0a:0c:d4:07:00:45:a0:bf:77:
         44:fd:04:d1:77:41:ae:d0:1b:68:cf:9c:21:c0:de:a6:04:b3:
         a1:cc:26:9c:48:57:f0:70:3d:b0:59:d2:be:07:67:03:94:a9:
         44:25:a5:6b:66:2b:2d:a3:00:db:b6:58:a3:f1:67:a8:07:1b:
         e1:45:3f:ec:3f:67:80:50:62:aa:a1:81:cb:a4:78:a4:dd:40:
         09:05:24:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:29:34 2026 by rpki-client