Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa
File:                     bb792bb3-1eea-353d-9c44-282070fccca5.roa (raw, json)
Hash identifier:          fCgSpjYa/vWOlS4Rwq/XLOJOKkO7FZnu2S/tRdIQY7k=
Subject key identifier:   7C:39:3C:65:7F:04:09:59:FA:61:21:96:29:2C:4F:D4:8B:DF:31:05
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EA9A254AEA2F435F3A4E0AD80
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa
Signing time:             Wed 29 Jul 2026 19:07:12 +0000
ROA not before:           Wed 29 Jul 2026 19:07:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        104.153.80.0/24 maxlen: 24
                          104.153.83.0/24 maxlen: 24
                          107.161.116.0/23 maxlen: 23
                          107.161.120.0/23 maxlen: 23
                          144.208.91.0/24 maxlen: 24
                          158.51.144.0/22 maxlen: 22
                          162.217.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:a2:54:ae:a2:f4:35:f3:a4:e0:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Jul 29 19:07:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=01f2b512-8a55-49fa-9de6-a18060ae1a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:5f:96:73:8b:bd:95:a5:17:ee:db:44:8d:
                    1e:27:81:3e:d7:26:0a:0a:54:69:bb:bc:4d:cf:f9:
                    71:2b:e1:ec:d6:87:9b:e3:c7:51:35:bb:44:db:05:
                    df:ec:45:a2:01:5c:d4:8f:07:1f:7f:9d:4b:ff:4a:
                    5a:fb:bd:b6:a8:52:d4:ac:09:fa:b3:58:37:bc:82:
                    5e:a5:f6:a1:42:5d:90:3e:19:5a:16:47:df:81:f7:
                    b7:e4:51:42:c4:00:01:7c:9e:57:1a:b9:90:a6:00:
                    56:19:c4:b7:b5:e0:9a:d2:7c:da:4b:31:5b:fb:f7:
                    35:f1:95:64:83:b7:bb:1d:d1:38:6b:70:7c:16:91:
                    70:05:e6:5b:fd:25:91:a0:e7:4b:b8:83:43:81:09:
                    73:27:4f:58:22:bb:b9:db:43:a7:4a:f4:e9:3c:51:
                    31:69:53:dc:c9:a9:42:de:3b:d9:6b:b9:41:41:19:
                    57:a5:08:a8:29:90:b8:37:ae:e5:47:a8:4d:72:5c:
                    1e:b3:e6:41:26:b8:d4:f3:c3:15:2d:a7:bd:c9:5d:
                    34:be:07:28:af:19:7c:f5:80:99:3b:6b:31:6e:68:
                    e2:48:7a:2c:30:a2:c9:37:9b:ed:32:51:f8:1a:86:
                    51:8b:f6:15:b9:6f:fa:69:f6:80:d2:6e:e8:42:d3:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:39:3C:65:7F:04:09:59:FA:61:21:96:29:2C:4F:D4:8B:DF:31:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.80.0/24
                  104.153.83.0/24
                  107.161.116.0/23
                  107.161.120.0/23
                  144.208.91.0/24
                  158.51.144.0/22
                  162.217.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:ec:6a:d8:97:da:46:3e:9e:be:48:e5:75:00:21:71:1e:
         8f:ad:8c:ce:67:4b:dd:73:58:dd:86:74:b5:08:6a:49:d9:f5:
         23:79:20:ce:5a:93:05:b3:c8:9e:6b:b9:a0:47:0b:e9:a6:8a:
         47:04:53:4d:0f:57:9d:46:b1:6d:2e:a9:74:bf:17:ac:bd:50:
         b3:b9:84:1c:15:3d:6f:83:34:48:0f:be:58:43:29:07:51:9b:
         72:ae:a0:45:ec:2e:81:9e:2f:0e:32:3c:b7:11:9e:01:2f:01:
         95:24:d8:ff:38:dc:d9:00:f0:1b:61:50:fe:45:d1:06:cd:84:
         4b:d7:ac:81:96:4e:39:b1:a6:f7:80:a9:2a:3e:ad:df:6d:9f:
         bc:d4:be:03:ce:ec:c2:a6:57:4d:62:27:d3:f8:80:ee:ed:d8:
         e1:2c:c0:4d:cc:8a:5d:88:9d:29:42:62:ca:5f:de:90:5e:93:
         94:f4:89:a5:c3:e7:1e:9a:fc:96:d2:61:ce:bf:03:af:5f:c5:
         15:ed:c0:b4:54:48:16:b0:37:78:2d:70:57:79:c7:03:16:ff:
         6c:fb:8c:88:26:25:e2:82:37:d3:98:15:32:d5:3c:7a:15:39:
         79:b5:e3:ee:88:ac:8b:4d:f3:c8:5d:99:c0:d8:3b:60:cc:6d:
         ec:93:eb:78
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE6polSuovQ186TgrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDcyOTE5MDcxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDFmMmI1MTItOGE1NS00OWZhLTlkZTYtYTE4MDYwYWUxYTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAxflnOLvZWlF+7bRI0eJ4E+1yYKClRpu7xN
z/lxK+Hs1oeb48dRNbtE2wXf7EWiAVzUjwcff51L/0pa+722qFLUrAn6s1g3vIJe
pfahQl2QPhlaFkffgfe35FFCxAABfJ5XGrmQpgBWGcS3teCa0nzaSzFb+/c18ZVk
g7e7HdE4a3B8FpFwBeZb/SWRoOdLuINDgQlzJ09YIru520OnSvTpPFExaVPcyalC
3jvZa7lBQRlXpQioKZC4N67lR6hNclwes+ZBJrjU88MVLae9yV00vgcorxl89YCZ
O2sxbmjiSHosMKLJN5vtMlH4GoZRi/YVuW/6afaA0m7oQtN39QIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFHw5PGV/BAlZ+mEhliksT9SL3zEFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvYmI3OTJiYjMtMWVlYS0z
NTNkLTljNDQtMjgyMDcwZmNjY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAaJlQAwQA
aJlTAwQBa6F0AwQBa6F4AwQAkNBbAwQCnjOQAwQAotmsMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI/o7GrY
l9pGPp6+SOV1ACFxHo+tjM5nS91zWN2GdLUIaknZ9SN5IM5akwWzyJ5ruaBHC+mm
ikcEU00PV51GsW0uqXS/F6y9ULO5hBwVPW+DNEgPvlhDKQdRm3KuoEXsLoGeLw4y
PLcRngEvAZUk2P843NkA8BthUP5F0QbNhEvXrIGWTjmxpveAqSo+rd9tn7zUvgPO
7MKmV01iJ9P4gO7t2OEswE3Mil2InSlCYspf3pBek5T0iaXD5x6a/JbSYc6/A69f
xRXtwLRUSBawN3gtcFd5xwMW/2z7jIgmJeKCN9OYFTLVPHoVOXm14+6IrItN88hd
mcDYO2DMbeyT63g=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:34:40 2026 by rpki-client