Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/9b4b4873-525e-3824-b32e-91d5135e5364.roa
File:                     9b4b4873-525e-3824-b32e-91d5135e5364.roa (raw, json)
Hash identifier:          GKf+KrabbDpOLzf5NApfvkV1453OBSpyZh4bdailST0=
Subject key identifier:   82:2A:D2:F0:48:79:7E:1D:64:18:8F:00:43:D8:96:1F:1F:AA:67:D0
Certificate issuer:       /CN=7116114d-1634-456d-8393-b81a373b3490
Certificate serial:       010D0C9F4328584EC2134ABEECE4D7963DFFBD80
Authority key identifier: 69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/9b4b4873-525e-3824-b32e-91d5135e5364.roa
Signing time:             Fri 07 Aug 2026 13:14:12 +0000
ROA not before:           Fri 07 Aug 2026 13:14:12 +0000
ROA not after:            Thu 05 Nov 2026 14:14:12 +0000
asID:                     154383
IP address blocks:        104.224.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/7116114d-1634-456d-8393-b81a373b3490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/7116114d-1634-456d-8393-b81a373b3490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:13:4a:be:ec:e4:d7:96:3d:ff:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116114d-1634-456d-8393-b81a373b3490
        Validity
            Not Before: Aug  7 13:14:12 2026 GMT
            Not After : Nov  5 14:14:12 2026 GMT
        Subject: CN=0fa0579e-f01f-4bb9-8bf5-e66703f40bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:55:fe:fc:a2:07:00:69:e4:9d:82:98:14:
                    3d:f6:30:a9:b7:52:fe:f4:a5:66:49:9d:1d:1e:a6:
                    a4:d4:16:7e:86:9f:6b:32:73:4f:5d:76:52:18:24:
                    9b:65:1d:6d:6c:65:93:ef:2c:08:f5:a8:30:5c:5f:
                    75:ee:c2:53:96:29:a5:76:1d:4a:7e:fd:8b:de:c0:
                    03:d5:b8:53:b6:ca:56:fa:bf:de:3a:98:7d:2b:bd:
                    a5:ac:4f:51:ab:b7:c9:6b:14:2d:ff:32:c8:64:73:
                    05:87:4c:45:90:13:26:f9:3e:74:1c:5f:89:0d:6a:
                    9d:d1:75:ee:4d:35:0f:13:d9:5e:d3:1e:16:bd:f0:
                    57:1d:c1:df:ad:1e:a2:78:17:a1:e2:db:18:d5:b8:
                    af:a3:05:25:0e:c5:8a:4d:59:27:ae:fc:a3:c8:15:
                    6a:7f:b2:64:0e:cd:ba:03:17:9a:c5:02:05:01:8b:
                    96:0d:b1:c4:20:19:14:ff:18:4f:cd:32:c3:ba:cb:
                    8d:2d:26:76:0d:5e:88:e2:57:33:d2:e5:74:91:42:
                    a8:e2:cf:25:19:26:19:4f:2b:52:6f:5b:d2:6c:4b:
                    0d:a3:61:25:9d:62:8a:e6:1a:cf:11:e0:28:16:8a:
                    c1:d2:68:6a:40:bd:d2:44:e6:2a:b7:71:db:93:17:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:D2:F0:48:79:7E:1D:64:18:8F:00:43:D8:96:1F:1F:AA:67:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/9b4b4873-525e-3824-b32e-91d5135e5364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/7116114d-1634-456d-8393-b81a373b3490.crl

            X509v3 Authority Key Identifier:
                keyid:69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d7:1b:b4:7e:b5:0a:d6:0b:87:45:c2:fd:28:b5:6c:c0:f2:
         e6:a9:23:ee:ef:58:31:ff:a9:6e:2f:d7:ff:20:b2:1c:53:6e:
         72:57:b8:d1:c5:8f:fc:7b:e0:85:6d:30:c8:4d:b0:8b:36:43:
         9c:b4:7b:54:82:18:69:b3:93:2e:28:9a:42:f7:e1:ec:55:a9:
         5d:5a:4f:79:07:0c:ab:84:f4:ef:a6:8b:e6:29:d0:ae:a0:26:
         e2:42:07:4b:44:32:5b:98:a6:0a:1a:5b:6b:72:4a:f0:fe:41:
         fa:9b:35:40:2f:6c:dd:c5:db:f9:d4:3b:e8:9c:d3:6b:ca:64:
         9d:30:54:69:4b:3c:06:d3:18:90:a7:65:9c:4c:1c:39:91:c9:
         6d:b8:ca:ec:c8:d1:f0:9e:59:7a:3e:39:0a:b5:2c:10:3d:93:
         96:b2:4c:0c:8c:13:b0:41:1f:3d:5a:3d:5e:3d:2a:97:38:aa:
         8a:18:71:0b:de:e2:92:2e:0c:23:1a:f5:10:2a:52:a7:e6:ed:
         64:9e:21:6c:f8:33:b0:0b:c4:ec:7f:0d:d3:74:fe:2e:f5:bf:
         d7:51:38:ce:c6:cd:f3:99:69:90:b5:29:5c:31:21:7d:c9:f1:
         fe:74:be:38:fc:a9:fb:89:94:43:33:9a:9d:d0:a8:41:66:46:
         22:b9:73:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CE0q+7OTXlj3/vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzExNjExNGQtMTYzNC00NTZkLTgzOTMtYjgxYTM3M2Iz
NDkwMB4XDTI2MDgwNzEzMTQxMloXDTI2MTEwNTE0MTQxMlowLzEtMCsGA1UEAxMk
MGZhMDU3OWUtZjAxZi00YmI5LThiZjUtZTY2NzAzZjQwYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCxV/vyiBwBp5J2CmBQ99jCpt1L+9KVmSZ0d
Hqak1BZ+hp9rMnNPXXZSGCSbZR1tbGWT7ywI9agwXF917sJTlimldh1Kfv2L3sAD
1bhTtspW+r/eOph9K72lrE9Rq7fJaxQt/zLIZHMFh0xFkBMm+T50HF+JDWqd0XXu
TTUPE9le0x4WvfBXHcHfrR6ieBeh4tsY1bivowUlDsWKTVknrvyjyBVqf7JkDs26
AxeaxQIFAYuWDbHEIBkU/xhPzTLDusuNLSZ2DV6I4lcz0uV0kUKo4s8lGSYZTytS
b1vSbEsNo2ElnWKK5hrPEeAoForB0mhqQL3SROYqt3HbkxcJowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIq0vBIeX4dZBiPAEPYlh8fqmfQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83MTE2
MTE0ZC0xNjM0LTQ1NmQtODM5My1iODFhMzczYjM0OTAvOWI0YjQ4NzMtNTI1ZS0z
ODI0LWIzMmUtOTFkNTEzNWU1MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzExNjExNGQtMTYzNC00NTZkLTgz
OTMtYjgxYTM3M2IzNDkwLzcxMTYxMTRkLTE2MzQtNDU2ZC04MzkzLWI4MWEzNzNi
MzQ5MC5jcmwwHwYDVR0jBBgwFoAUaWVQCO3lsR9GfT7SISZf6RlTYw8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83MTE2MTE0ZC0xNjM0LTQ1NmQtODM5My1iODFh
MzczYjM0OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOA0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/XG7R+tQrWC4dFwv0otWzA8uapI+7vWDH/qW4v1/8gshxTbnJXuNHF
j/x74IVtMMhNsIs2Q5y0e1SCGGmzky4omkL34exVqV1aT3kHDKuE9O+mi+Yp0K6g
JuJCB0tEMluYpgoaW2tySvD+QfqbNUAvbN3F2/nUO+ic02vKZJ0wVGlLPAbTGJCn
ZZxMHDmRyW24yuzI0fCeWXo+OQq1LBA9k5ayTAyME7BBHz1aPV49Kpc4qooYcQve
4pIuDCMa9RAqUqfm7WSeIWz4M7ALxOx/DdN0/i71v9dROM7GzfOZaZC1KVwxIX3J
8f50vjj8qfuJlEMzmp3QqEFmRiK5c6I=
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:57 2026 by rpki-client