Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/f7bb6b52-4ba0-33cc-a9e8-c8a72b9e786e.roa
File:                     f7bb6b52-4ba0-33cc-a9e8-c8a72b9e786e.roa (raw, json)
Hash identifier:          241csssQgtamOQGJiRWrTiX3plAPYhcvwry/26r0gZ0=
Subject key identifier:   51:8E:CB:8D:DA:06:BE:C0:D3:D8:CF:AC:28:00:15:12:07:BA:7F:4C
Certificate issuer:       /CN=afa70384-20ce-4e0a-b42a-581d05c70079
Certificate serial:       010D0C9F4328584F6828292D600CF95F8ED5F2C0
Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/f7bb6b52-4ba0-33cc-a9e8-c8a72b9e786e.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     203
IP address blocks:        104.219.104.0/21 maxlen: 21
                          104.219.104.0/24 maxlen: 24
                          104.219.105.0/24 maxlen: 24
                          104.219.106.0/24 maxlen: 24
                          104.219.107.0/24 maxlen: 24
                          104.219.108.0/24 maxlen: 24
                          104.219.109.0/24 maxlen: 24
                          104.219.110.0/24 maxlen: 24
                          104.219.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:29:2d:60:0c:f9:5f:8e:d5:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=63dd6baf-c71d-498d-8573-95cb204e995d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:85:2d:d3:39:62:26:c7:d6:2f:a7:1e:7c:
                    92:ec:c3:72:34:2c:98:e4:3e:4a:51:c7:33:b3:c4:
                    fd:70:94:c8:eb:93:55:6c:d0:9e:6b:bb:f9:1b:cc:
                    b7:87:b3:60:e7:75:aa:24:06:73:04:89:07:ea:6f:
                    2a:e7:18:f5:1e:8d:b5:f0:a5:0f:15:92:d1:70:08:
                    c1:d0:2b:18:c8:5b:12:a4:4f:fe:72:6d:5c:d6:91:
                    2a:6e:fa:09:f3:b8:0b:83:da:e7:89:4f:33:07:eb:
                    0d:f6:52:d0:c3:30:51:2e:92:60:2a:2b:6b:07:27:
                    6e:9d:b2:1c:c2:1b:d6:75:1f:1d:d0:70:3b:1c:17:
                    a1:c1:0f:c7:3d:1c:fd:c4:eb:48:99:14:1f:03:05:
                    e9:f6:cb:8a:0b:03:a8:62:28:5c:94:c7:0f:3a:c5:
                    0f:48:87:42:9d:63:88:1e:61:60:c9:32:1e:bd:66:
                    bd:a0:ad:75:6d:ed:83:66:66:97:a5:8d:da:bd:0f:
                    78:29:ba:b0:07:6e:8d:28:f3:6e:f3:2b:1b:86:95:
                    91:64:c1:f0:23:2c:55:2d:80:3e:98:43:4a:b1:f2:
                    64:1e:23:15:c7:c0:ad:46:41:9b:e8:01:1a:a7:77:
                    f5:f0:62:47:86:c9:4e:60:fe:c6:a0:42:cd:c9:b3:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8E:CB:8D:DA:06:BE:C0:D3:D8:CF:AC:28:00:15:12:07:BA:7F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/f7bb6b52-4ba0-33cc-a9e8-c8a72b9e786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl

            X509v3 Authority Key Identifier:
                keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:45:a9:9f:14:a2:86:06:3d:38:0d:06:be:fb:c6:45:9d:82:
         ce:53:0d:41:ed:29:72:5d:42:7e:83:3c:ec:49:ef:a9:22:a7:
         17:e2:87:ab:fb:df:7f:4d:50:5e:df:ef:c3:f1:1b:57:25:f1:
         68:d8:4d:f9:2c:bd:71:0f:9c:2e:87:a5:d7:2d:82:4c:78:62:
         06:67:8c:87:b3:7e:63:a7:ee:c3:41:27:e7:27:07:20:9b:2d:
         40:85:00:c8:67:77:b6:95:19:c6:e0:24:85:33:e2:70:7d:73:
         73:d9:fd:d4:3e:db:53:74:23:c1:0e:c2:05:3c:f5:dc:a5:85:
         b9:ed:bb:47:01:8a:1e:c4:c6:58:77:48:6f:03:04:15:07:db:
         50:a2:05:d0:db:06:24:e3:c7:f8:76:1f:e7:5f:41:87:9a:ce:
         1c:9b:44:da:a6:25:49:9d:8f:0f:9d:21:88:be:6d:09:63:03:
         e7:25:d9:02:ff:b3:d0:cb:7b:e4:c6:f7:9c:e2:de:ce:a5:41:
         1f:fe:98:1d:27:cd:1a:10:bb:ea:13:65:c2:b6:b4:be:0e:3e:
         56:50:ca:30:05:78:75:a5:3a:b1:a0:c0:eb:4d:d7:c3:de:18:
         9a:d3:79:56:ac:b1:f7:da:45:13:10:1a:44:23:84:05:21:40:
         2e:74:16:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCktYAz5X47V8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw
MDc5MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk
NjNkZDZiYWYtYzcxZC00OThkLTg1NzMtOTVjYjIwNGU5OTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto2FLdM5YibH1i+nHnyS7MNyNCyY5D5KUccz
s8T9cJTI65NVbNCea7v5G8y3h7Ng53WqJAZzBIkH6m8q5xj1Ho218KUPFZLRcAjB
0CsYyFsSpE/+cm1c1pEqbvoJ87gLg9rniU8zB+sN9lLQwzBRLpJgKitrBydunbIc
whvWdR8d0HA7HBehwQ/HPRz9xOtImRQfAwXp9suKCwOoYihclMcPOsUPSIdCnWOI
HmFgyTIevWa9oK11be2DZmaXpY3avQ94KbqwB26NKPNu8ysbhpWRZMHwIyxVLYA+
mENKsfJkHiMVx8CtRkGb6AEap3f18GJHhslOYP7GoELNybNoNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGOy43aBr7A09jPrCgAFRIHun9MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3
MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvZjdiYjZiNTItNGJhMC0z
M2NjLWE5ZTgtYzhhNzJiOWU3ODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0
MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3
MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk
MDVjNzAwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNtoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZFqZ8UooYGPTgNBr77xkWdgs5TDUHtKXJdQn6DPOxJ76kipxfih6v7
339NUF7f78PxG1cl8WjYTfksvXEPnC6Hpdctgkx4YgZnjIezfmOn7sNBJ+cnByCb
LUCFAMhnd7aVGcbgJIUz4nB9c3PZ/dQ+21N0I8EOwgU89dylhbntu0cBih7Exlh3
SG8DBBUH21CiBdDbBiTjx/h2H+dfQYeazhybRNqmJUmdjw+dIYi+bQljA+cl2QL/
s9DLe+TG95zi3s6lQR/+mB0nzRoQu+oTZcK2tL4OPlZQyjAFeHWlOrGgwOtN18Pe
GJrTeVassffaRRMQGkQjhAUhQC50Fpw=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:11 2026 by rpki-client