Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/550190a7-9456-3a36-b68a-cee0da240439.roa
File:                     550190a7-9456-3a36-b68a-cee0da240439.roa (raw, json)
Hash identifier:          1lErC6jnT9NjMFptrwI35icQP8VeMO2Vzwax36YLfq8=
Subject key identifier:   EB:FD:02:DF:3E:33:BE:50:0A:72:11:B7:61:9F:F3:05:E6:5E:90:FE
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584EA78733C37F684804A3BF0780
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/550190a7-9456-3a36-b68a-cee0da240439.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4922
IP address blocks:        104.244.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:33:c3:7f:68:48:04:a3:bf:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=86df9d51-ce27-4c17-9e22-6e7307acd4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7d:03:c2:a7:9c:10:49:36:c5:fa:0f:a7:f3:
                    c9:33:56:c2:a6:a0:da:4e:ee:d3:f6:62:5d:a9:c3:
                    86:85:05:6e:c9:4e:29:b6:fb:ce:ce:4c:ed:d8:b2:
                    e5:ef:c3:80:c1:b9:fa:b1:63:62:e5:d8:93:d3:24:
                    23:96:63:b4:73:3a:f8:43:20:09:62:4e:58:d2:e2:
                    a7:0a:73:88:24:b0:2d:6c:24:24:78:be:f9:c6:53:
                    82:da:95:98:20:9d:3d:25:61:4c:c8:8c:3b:32:84:
                    f3:34:43:ee:c5:63:a8:ef:c4:e6:f2:93:47:d7:54:
                    77:0d:c6:68:cd:9d:7d:0e:bf:e0:d1:23:ff:5d:5b:
                    97:4e:b6:d7:b1:91:a6:d3:ad:ac:40:6b:ed:a4:55:
                    aa:ef:09:ba:38:60:7c:a0:3a:b5:7d:d2:55:93:51:
                    ed:74:05:02:80:9e:f8:42:80:8f:d1:b4:ab:65:93:
                    ca:e6:e6:f9:9e:f4:e4:e3:52:85:19:c0:54:58:ba:
                    f0:df:a1:98:c4:da:1a:2d:73:b4:8d:38:d9:46:73:
                    91:bd:5d:2e:14:f1:cd:ea:0f:87:5e:a2:ab:55:d4:
                    39:07:6f:d5:82:45:27:82:23:e4:98:4c:a3:70:a1:
                    eb:71:c2:3d:67:34:a4:25:fc:9c:4b:4a:4f:3f:e5:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:02:DF:3E:33:BE:50:0A:72:11:B7:61:9F:F3:05:E6:5E:90:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/550190a7-9456-3a36-b68a-cee0da240439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:fa:32:a1:44:7e:58:cd:e3:61:0a:b3:01:50:8f:18:a9:
         c9:4b:1c:94:59:2f:b4:73:0e:2f:f9:5f:31:d7:62:aa:6a:c6:
         0e:f8:4c:98:7f:a5:e1:0c:b2:ac:c8:17:e9:18:38:e0:ed:ff:
         48:44:56:e2:ce:79:bb:17:7d:bb:60:79:93:5b:3a:11:d9:35:
         9c:af:30:45:2a:df:1c:5c:1a:f5:75:23:90:aa:e6:71:22:7b:
         ca:c0:3a:6c:1d:15:9a:41:13:11:c1:05:26:77:7a:6c:a3:f1:
         56:b8:b0:dc:07:79:d3:44:03:84:9b:a0:93:0d:a2:a4:4a:60:
         dd:69:30:96:4c:80:ef:d7:0d:2c:17:78:ab:d5:13:50:f7:5c:
         d0:04:3a:10:3c:37:32:72:3d:18:cf:d4:5d:74:ab:2b:04:a5:
         9e:be:f2:5d:82:0d:7a:f3:01:d8:c0:b9:24:20:29:93:52:f9:
         08:7a:b9:c8:ef:f2:be:33:b9:f0:84:b0:e7:c6:48:d1:4d:33:
         72:25:a0:7c:4c:3b:87:f6:19:d9:72:27:b7:a3:f8:f6:d7:3d:
         7c:b7:f0:93:00:3c:d5:52:2b:a6:f9:c3:69:11:c1:81:fc:e7:
         eb:58:a4:75:3e:d2:23:98:07:18:57:7f:52:c4:c0:9b:32:2b:
         b4:46:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:38:51 2026 by rpki-client