Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
File:                     178e8c50-953d-3d19-830a-7c4af5c49423.roa (raw, json)
Hash identifier:          NUH1rmmE21TDyw6QXoSKwx0avfci1EfnnVtLzUm2oX0=
Subject key identifier:   49:36:C1:27:E0:5E:B0:14:3C:53:99:69:87:16:21:25:21:56:CA:4A
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584B5B072C34F82511B525774000
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     50131
IP address blocks:        104.37.29.0/24 maxlen: 32
                          104.143.94.0/24 maxlen: 32
                          104.194.206.0/24 maxlen: 32
                          104.194.207.0/24 maxlen: 32
                          104.194.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:2c:34:f8:25:11:b5:25:77:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=01e746bb-64e4-4db1-9f65-24043af4e132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:9c:d8:1e:4f:c1:00:ea:c0:eb:72:6b:b9:
                    ac:45:ec:22:41:8a:e0:32:f4:a6:bf:b5:1a:18:52:
                    bd:b8:44:e4:f1:61:b5:ee:8b:9f:84:06:83:21:3f:
                    0c:65:47:e3:53:b9:34:ce:2d:16:bb:ad:97:38:0c:
                    bd:1a:d1:0c:a6:46:fa:e8:ad:7e:dd:89:82:0d:63:
                    01:58:d2:84:01:ca:e5:48:1e:49:c8:69:c9:b3:45:
                    b7:e0:f9:e2:33:58:4d:c5:a1:2d:eb:79:9d:29:41:
                    9d:d1:95:9c:6e:07:6e:04:d9:9b:21:ed:ab:e9:9a:
                    64:c5:51:54:27:e1:2d:dc:fd:09:62:09:e0:22:81:
                    0a:3d:ae:c8:36:12:8e:50:93:cc:03:5b:01:a3:d3:
                    f1:56:48:8c:c1:a7:3e:37:f3:a3:bd:e9:34:7f:f5:
                    ba:2c:aa:5e:bf:d8:6e:19:11:8c:2a:72:cd:5f:0c:
                    57:56:59:44:b1:7a:03:55:6c:03:78:43:8c:a6:ea:
                    53:96:d1:64:24:53:3d:da:2a:85:90:5f:40:59:82:
                    4a:67:70:7c:50:8e:b5:95:4b:83:b6:3a:8b:bb:05:
                    e4:d8:d0:4a:05:28:a7:94:4e:3e:74:7f:9a:b4:3f:
                    b2:f3:01:ed:82:3c:1d:4a:9d:84:ca:7f:c9:09:10:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:C1:27:E0:5E:B0:14:3C:53:99:69:87:16:21:25:21:56:CA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.29.0/24
                  104.143.94.0/24
                  104.194.206.0/23
                  104.194.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:40:8b:e9:12:4f:4d:fb:3f:07:9d:6f:50:ad:45:18:f1:3b:
         00:ea:77:60:d8:39:70:ee:6b:55:b8:be:cb:7c:8d:81:a0:81:
         e9:f0:5d:56:ec:f9:82:46:0d:9b:d7:de:8d:f9:7c:0f:a6:31:
         74:a2:7d:19:4d:e9:2a:f8:15:ea:d4:68:53:f6:f7:67:b6:77:
         09:0a:8a:74:42:41:c3:0b:c3:1c:de:8a:e1:b6:f3:cf:fa:db:
         a0:6f:c7:00:95:f9:08:5f:c8:94:fc:c0:36:8d:ac:bf:66:34:
         b9:71:5b:42:10:4b:7e:b3:dc:06:25:29:e7:da:e6:df:2b:3d:
         4f:21:c5:f6:8d:a3:5a:7f:f0:43:49:5d:90:20:22:4e:0e:44:
         ac:67:85:ed:1c:fb:90:61:38:c7:1e:1f:ee:90:c2:e4:73:e0:
         ba:00:84:aa:1f:bd:2e:ab:7a:11:5a:51:a5:ec:cb:e2:f8:c1:
         95:23:8f:82:7c:90:59:c3:68:1f:2e:01:6d:78:3c:fd:58:b0:
         90:70:f6:94:47:36:80:23:62:4d:5e:db:16:3a:56:4e:7c:22:
         2b:db:e3:ef:25:88:57:88:2b:d0:78:50:04:d8:7f:8f:38:98:
         a6:59:11:ec:82:08:44:68:a3:f0:8b:c7:6e:6d:c8:94:f6:57:
         cb:be:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:00:00 2025 by rpki-client