Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22cd00ce-c076-3468-b6c6-1873806e9e15.roa
File:                     22cd00ce-c076-3468-b6c6-1873806e9e15.roa (raw, json)
Hash identifier:          rW2y2ZFmqJ9kVj6V1+Bpua8D5adMXgZadakmMWgFC/w=
Subject key identifier:   C6:22:76:01:38:E5:C6:CE:61:26:A9:0E:BC:C3:01:75:BA:80:5A:1E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F0A06D7838C9A2ABAA7431300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22cd00ce-c076-3468-b6c6-1873806e9e15.roa
Signing time:             Wed 02 Sep 2026 07:47:19 +0000
ROA not before:           Wed 02 Sep 2026 07:47:19 +0000
ROA not after:            Tue 01 Dec 2026 08:47:19 +0000
asID:                     9009
IP address blocks:        104.250.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:06:d7:83:8c:9a:2a:ba:a7:43:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  2 07:47:19 2026 GMT
            Not After : Dec  1 08:47:19 2026 GMT
        Subject: CN=7f738975-0932-4776-804e-a9fd9bdc5d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:cd:42:49:55:bb:d1:82:98:c7:00:e5:66:
                    fe:f6:d1:66:d2:c4:8d:d9:24:1f:48:c9:a1:35:4a:
                    b9:57:38:f6:5d:6c:d2:f4:98:62:7b:81:61:25:db:
                    da:bb:53:be:00:58:3f:ee:71:f6:55:8c:c4:01:f6:
                    88:16:40:7c:3f:a3:07:53:1f:37:ab:73:d4:d7:ec:
                    b4:f2:e2:b6:86:ed:5a:0c:ab:73:f5:e0:49:e6:13:
                    3b:92:7c:f2:44:f7:0d:36:9c:2e:8f:5d:bb:6c:60:
                    e4:7b:b4:b5:cc:5b:40:16:f3:0e:62:45:98:b8:e5:
                    4d:58:07:97:ca:31:7e:03:a3:82:ed:5e:0a:18:45:
                    3d:f7:54:53:60:67:57:97:7a:f2:8f:55:bd:09:7e:
                    f3:0c:fa:f7:1d:cf:8f:a0:8c:30:9c:45:32:9b:ea:
                    e3:35:de:7d:8c:f3:b4:9a:32:8c:73:19:ef:05:50:
                    91:2f:26:70:9b:d3:d3:36:6f:c2:80:4b:80:11:fc:
                    8f:08:58:c7:40:b6:9b:5f:8d:76:0a:4a:2e:30:44:
                    d3:1e:05:16:64:7a:1a:65:87:1e:bf:76:12:9b:01:
                    a0:cd:35:fd:ca:0b:26:d6:98:97:a5:9e:85:81:b7:
                    57:4c:d0:aa:bb:1a:d8:fd:d1:ef:90:68:7b:94:be:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:22:76:01:38:E5:C6:CE:61:26:A9:0E:BC:C3:01:75:BA:80:5A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22cd00ce-c076-3468-b6c6-1873806e9e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:57:2e:2d:0b:aa:32:9c:82:d4:5d:51:98:7a:bd:17:a1:
         ae:20:40:bc:64:20:7e:ed:1c:39:64:63:a0:ad:c4:87:d9:b2:
         04:87:09:ca:76:1b:17:18:0a:fc:22:f8:cb:e9:30:e6:10:b2:
         be:38:df:ef:b7:0f:75:cc:2c:71:de:e2:1c:74:0f:c0:43:b6:
         55:b3:28:d6:8a:47:f3:d6:a4:89:6e:e9:49:af:c1:67:d9:56:
         8e:eb:12:33:dd:2b:ba:78:5e:f8:f3:41:ce:c0:61:65:5b:b9:
         b4:ad:d7:eb:31:e2:1f:25:75:80:f0:03:26:c0:46:5c:69:25:
         44:9d:e5:f7:f2:eb:69:31:f6:65:0b:47:5b:75:94:0d:c2:91:
         7d:12:af:f6:1b:80:92:37:37:c1:85:c7:c2:be:90:92:da:b6:
         cc:8c:25:c2:31:67:35:ab:2f:38:bd:5e:58:5e:b8:68:77:2a:
         90:6c:3f:bb:31:8f:37:89:f8:04:c0:56:28:ac:94:1c:c6:f1:
         a1:33:f0:f3:6b:08:b9:14:d4:9e:b9:91:4b:2f:8a:b6:e3:6f:
         0b:d5:6d:ae:5b:a2:2f:a8:75:d7:c7:e7:b0:94:ea:a9:f2:c9:
         af:f2:0c:b9:9d:9f:07:5a:e5:78:9f:53:f0:e1:8e:2e:cf:39:
         0e:af:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:27 2026 by rpki-client