Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
File:                     178e8c50-953d-3d19-830a-7c4af5c49423.roa (raw, json)
Hash identifier:          O/n/LVowcpRpeeXE3npOAaJ9X2eTVx0Vsidkxv+Cu8o=
Subject key identifier:   A5:1D:A2:FA:ED:E7:13:43:65:8C:F5:46:C3:3F:07:62:C9:2C:20:9C
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584F49735561A4FB483C7FCDD700
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     50131
IP address blocks:        104.37.29.0/24 maxlen: 32
                          104.143.94.0/24 maxlen: 32
                          104.194.206.0/24 maxlen: 32
                          104.194.207.0/24 maxlen: 32
                          104.194.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:55:61:a4:fb:48:3c:7f:cd:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a5134f3a-c4e3-4d1b-9255-512688bae169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c3:f6:64:43:43:89:8e:9d:9a:25:63:ca:e3:
                    47:c5:d6:90:99:28:82:22:d5:26:75:39:53:00:25:
                    0b:07:e1:5f:c8:aa:00:0c:46:b2:c4:4d:d4:80:5f:
                    11:b5:f0:6b:0c:87:37:ac:83:c6:87:82:16:97:46:
                    a6:c7:90:06:63:a7:65:43:22:12:30:3f:0a:b8:be:
                    30:4c:71:c2:17:c1:ad:05:94:3e:52:98:b4:c7:fd:
                    e7:1a:c9:13:26:7a:c4:dd:2b:3c:d9:8d:4b:22:7a:
                    41:f0:de:76:03:5e:cb:df:c4:8e:69:8e:63:6a:8b:
                    e5:0c:73:1f:bf:76:bd:7c:5c:45:52:10:6a:41:1b:
                    ec:4a:52:a1:9f:46:65:63:93:03:16:48:a9:64:0b:
                    d1:91:d5:91:1d:4e:69:48:16:d9:db:a3:e6:dd:14:
                    83:74:25:46:01:61:ab:70:96:b6:fd:f4:99:1f:1d:
                    ad:e0:14:77:b9:78:b1:64:2d:e1:23:76:42:bb:b8:
                    38:9b:0e:e7:e6:f0:35:04:46:03:f5:ed:0b:82:e5:
                    8e:a6:83:35:45:8d:a8:a1:46:eb:15:6e:e6:48:f5:
                    74:7d:59:82:51:bb:90:0e:90:8c:0e:4f:53:49:1e:
                    6e:8d:a7:fe:df:d9:48:39:b1:d8:cd:35:e8:d9:be:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:A2:FA:ED:E7:13:43:65:8C:F5:46:C3:3F:07:62:C9:2C:20:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.29.0/24
                  104.143.94.0/24
                  104.194.206.0/23
                  104.194.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:ca:8b:94:d2:8a:ab:a8:a4:8f:c0:26:34:7e:be:15:dc:
         56:f8:cf:c8:5c:fc:f2:b7:03:98:1d:27:7c:ef:46:bb:f6:03:
         45:13:09:74:57:0f:21:fd:c9:f4:a2:9d:ab:b7:9c:ce:29:e0:
         4b:e6:92:01:84:a5:74:9d:5d:ce:0a:0b:8f:c4:31:83:e8:04:
         aa:01:1a:78:79:2d:94:17:f6:cc:e9:e1:91:cc:ac:ca:2b:f3:
         fe:f4:aa:94:ed:5c:f0:03:30:48:ab:fd:c4:e2:ec:87:e4:b4:
         b7:ad:8e:e5:c6:60:36:b5:3f:3e:80:81:6e:f2:7b:88:58:83:
         bf:d7:56:0a:f1:1c:21:89:51:31:70:76:ec:3d:11:97:cd:db:
         00:da:dd:66:f1:1f:55:f7:df:63:d6:13:49:6d:ba:c8:a5:0b:
         c6:49:ab:ec:5b:8d:06:dc:15:dc:b0:20:72:7a:5f:66:8d:93:
         12:c5:1d:4c:9e:b3:81:71:8a:ef:c2:76:9f:f5:16:a5:88:35:
         32:4f:30:db:51:fc:92:8d:00:55:13:cc:b1:1b:61:80:d9:be:
         b2:9d:75:a7:ca:90:fe:c6:4d:22:6e:e1:e4:3f:91:ed:cb:9b:
         48:a7:58:27:f4:51:fe:c7:f6:e2:9f:f1:11:18:e2:6b:b6:5d:
         f8:c2:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:40:47 2026 by rpki-client