Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f561e854-dba4-3502-af5b-7c3db57bebba.roa
File:                     f561e854-dba4-3502-af5b-7c3db57bebba.roa (raw, json)
Hash identifier:          5Ppi9PjsGahTSZZ3YOdpjq017YjqYhYdb6jbVvvWRjk=
Subject key identifier:   D3:1F:1D:85:A3:33:7A:24:02:47:AE:B5:A4:AC:63:18:E6:17:AD:0A
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584FAA853B4494289B9F30E59600
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f561e854-dba4-3502-af5b-7c3db57bebba.roa
Signing time:             Thu 29 Oct 2026 19:31:19 +0000
ROA not before:           Thu 29 Oct 2026 19:31:19 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        72.1.65.0/24 maxlen: 24
                          104.204.181.0/24 maxlen: 24
                          176.23.154.0/24 maxlen: 24
                          189.25.37.0/24 maxlen: 24
                          189.25.46.0/24 maxlen: 24
                          189.25.51.0/24 maxlen: 24
                          189.25.52.0/24 maxlen: 24
                          189.25.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:85:3b:44:94:28:9b:9f:30:e5:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 29 19:31:19 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e8c352f6-e947-46f0-b452-f4994296634a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:dd:f8:22:39:5f:ad:4a:3a:8f:3b:65:d1:
                    da:3b:4b:64:2f:1d:d0:59:cb:16:8a:65:ce:2a:96:
                    fa:59:c3:30:8c:22:16:22:4b:a6:7d:84:e0:ed:48:
                    da:00:74:c5:54:04:91:da:79:ac:f2:b2:26:82:4e:
                    0f:f7:af:1e:09:f5:eb:98:45:42:46:80:dd:d0:7a:
                    26:8d:61:66:85:2a:6d:0c:8d:03:21:e9:f7:5e:3b:
                    c7:77:e2:91:81:49:37:99:9f:c7:43:3b:ac:46:35:
                    1e:cb:ca:45:35:b0:ec:ac:82:78:60:c6:37:03:75:
                    34:31:01:3e:53:7b:b2:9c:59:2a:cc:f5:9a:27:29:
                    e0:a7:0e:1a:1a:16:9f:e3:4c:fd:9e:c4:da:8d:93:
                    dc:9d:1c:06:24:85:1f:d9:20:9e:e7:1b:66:7a:5f:
                    3b:99:ca:1e:c5:8d:ee:0a:9c:ca:d9:c1:d2:24:e7:
                    95:81:ba:6f:07:74:b6:d9:20:d5:d6:6d:45:59:3b:
                    a3:3c:38:96:06:47:dc:a9:62:dc:4e:39:44:28:46:
                    8a:50:04:ff:19:40:42:91:b4:63:d6:80:8f:53:4f:
                    30:1c:39:9b:f4:b4:e6:f6:22:64:02:ee:0b:77:bf:
                    db:d0:17:0e:70:b5:1f:d3:55:af:f9:4a:c8:2f:1a:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:1D:85:A3:33:7A:24:02:47:AE:B5:A4:AC:63:18:E6:17:AD:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/f561e854-dba4-3502-af5b-7c3db57bebba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.65.0/24
                  104.204.181.0/24
                  176.23.154.0/24
                  189.25.37.0/24
                  189.25.46.0/24
                  189.25.51.0-189.25.52.255
                  189.25.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:34:09:55:c2:4e:92:28:31:65:f7:b3:7e:14:fa:63:6e:de:
         e4:7f:a6:b2:88:cf:d5:b9:07:be:22:6f:9d:a3:00:22:46:d7:
         85:06:0f:0a:6f:33:a7:64:1d:3f:52:ed:90:e3:a7:d2:3a:7c:
         3e:13:da:96:dd:32:67:86:31:06:1b:c7:81:99:62:12:6e:ca:
         cd:aa:1a:e6:f2:da:87:ad:8b:23:c7:57:1b:82:4e:70:77:1e:
         d4:cf:c6:2c:c4:29:36:37:c3:7d:c5:36:f2:b4:53:62:51:33:
         df:60:b9:6d:aa:06:c7:1f:12:7e:c7:85:96:12:18:59:7b:d9:
         38:10:aa:18:b7:2a:6d:7f:cc:eb:5f:46:5d:9c:13:c2:c2:62:
         f7:6e:33:55:e4:03:11:73:79:f6:ab:a4:cf:60:25:e0:25:c5:
         cf:13:66:aa:a0:32:e5:41:e6:17:b0:61:c0:55:8f:fd:d6:85:
         60:63:b4:7f:2b:71:38:57:e6:69:a9:cd:cf:f4:3f:57:64:0d:
         35:bc:ae:d9:14:24:e6:eb:55:c9:bc:48:e1:13:20:84:72:ea:
         ff:2a:45:4f:64:35:1e:ab:63:62:b9:8a:70:58:fb:11:1e:9e:
         9b:59:e2:2f:77:c0:04:aa:84:3e:51:b7:6f:8b:d4:b8:a5:b8:
         12:1e:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:17:58 2026 by rpki-client