Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa
File:                     4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa (raw, json)
Hash identifier:          t+hGeFB7yRfW80KJgnCJL8i3yeELRFPCE7AEqIOLxE0=
Subject key identifier:   92:70:82:43:CF:34:75:CE:BA:C4:B7:DB:0F:05:F2:BB:F0:97:1D:21
Certificate issuer:       /CN=f18acb70-b579-4682-adfb-f098ad50b263
Certificate serial:       010D0C9F4328584DD35B1280987DBA300A061D40
Authority key identifier: C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     23546
IP address blocks:        104.37.79.0/24 maxlen: 24
                          104.193.100.0/22 maxlen: 24
                          167.254.224.0/22 maxlen: 24
                          199.27.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:12:80:98:7d:ba:30:0a:06:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18acb70-b579-4682-adfb-f098ad50b263
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=97c4911b-8120-4714-abed-5fe9c09f51dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:82:a8:96:47:96:84:c6:88:6c:cf:54:4c:
                    72:eb:5c:2b:be:c0:bf:fd:10:fa:a9:fc:3f:8e:82:
                    f6:2e:dd:6d:47:e8:4a:3f:6a:ef:da:59:a5:b7:91:
                    4a:44:23:e3:af:9e:dc:91:93:19:dc:7e:90:05:8b:
                    7b:67:6a:2e:cc:53:c3:6e:a0:70:6c:de:3d:4a:f8:
                    9f:cd:70:3e:6d:23:48:55:c6:c8:41:01:a6:6e:b4:
                    e9:2d:af:af:18:b0:21:7f:25:71:20:5a:bd:72:af:
                    c3:d2:2f:7e:82:15:a0:6f:e8:d2:71:5d:e9:3c:93:
                    de:3d:70:ac:82:c1:d2:2b:cc:09:58:fd:d8:23:1e:
                    3f:1c:72:72:5e:dc:1c:b5:46:7a:db:67:a5:ec:f4:
                    7a:43:8d:34:f5:97:af:a0:77:37:92:a6:0c:c4:d1:
                    bc:e1:13:93:7d:92:95:23:f0:f0:c3:b0:b4:3f:83:
                    76:cd:8b:0c:81:47:4c:cf:68:f2:95:be:20:a1:36:
                    f9:ea:9b:d4:40:d6:99:c6:a1:9e:a0:82:5a:c4:25:
                    e4:1e:da:b7:71:cd:0b:5d:b5:c9:45:99:cc:74:cf:
                    81:b7:7b:5f:2d:23:91:d3:a7:98:76:ea:cd:97:ec:
                    67:87:d7:89:9f:87:12:d3:49:71:32:65:08:66:0e:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:82:43:CF:34:75:CE:BA:C4:B7:DB:0F:05:F2:BB:F0:97:1D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/4f8d7c4e-e971-3ae0-9dcc-66dc0e0e2507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl

            X509v3 Authority Key Identifier:
                keyid:C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.79.0/24
                  104.193.100.0/22
                  167.254.224.0/22
                  199.27.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:97:61:ee:09:59:72:58:d8:19:bc:30:58:8d:61:1d:20:
         1b:28:2e:19:1c:26:02:58:d3:52:9f:96:0a:1f:f1:50:05:b9:
         61:8c:0d:2a:72:21:f6:a2:d9:8c:9f:f7:f4:e8:9e:4f:c0:6d:
         f8:4f:78:22:0f:7c:3f:4a:25:a4:ab:b7:42:d0:7a:98:e6:59:
         85:33:1d:2e:53:1e:c4:83:97:c3:93:88:9d:d2:0b:d0:a5:30:
         3a:1b:ac:62:51:50:6c:37:d0:c2:4f:a7:a5:07:77:cd:db:9e:
         c8:39:a5:59:80:ba:ef:ac:9d:3a:5f:80:b7:57:cd:af:44:ce:
         00:ff:55:ab:ec:fd:78:20:07:be:a6:12:e1:9e:1f:9b:70:86:
         1d:8f:f9:10:f5:1d:7e:75:00:ac:b2:ad:38:ee:28:3a:72:1d:
         6a:f6:4b:06:38:1e:4a:95:a3:c6:48:e6:40:1d:82:42:0e:6e:
         07:9e:c1:26:ed:22:e7:06:f9:6f:ed:28:65:eb:1d:8b:d9:05:
         b5:64:41:8a:1d:2b:2f:65:c1:6b:10:54:38:eb:3c:c9:11:13:
         45:3d:15:c2:99:4f:5f:29:94:31:13:4a:50:2a:18:48:25:97:
         cf:fc:90:14:16:14:23:99:5a:55:5c:c0:22:59:1e:c3:1e:55:
         3a:13:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:33:19 2026 by rpki-client