Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
File:                     178e8c50-953d-3d19-830a-7c4af5c49423.roa (raw, json)
Hash identifier:          QzfW08mLdZ8SbFYBNY6sr99jimKXtrDUPeGzQbEKljk=
Subject key identifier:   D5:95:8C:54:39:F6:54:25:0C:74:7A:9E:9E:01:85:55:56:C6:D2:89
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584EA798A4103E77DDFADDA54C00
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     50131
IP address blocks:        104.37.29.0/24 maxlen: 32
                          104.143.94.0/24 maxlen: 32
                          104.194.206.0/24 maxlen: 32
                          104.194.207.0/24 maxlen: 32
                          104.194.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:a4:10:3e:77:dd:fa:dd:a5:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f14be8c-4966-4434-9836-ecb977acd55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:5e:f1:84:77:1c:a4:00:19:f4:a8:48:af:
                    01:8d:02:41:b7:3d:55:01:05:86:bc:0b:17:dd:2c:
                    c8:37:e4:ea:80:43:a5:a7:80:b7:eb:74:1e:cf:05:
                    38:f2:b8:f6:b2:63:56:8e:a4:9c:40:6e:b7:3d:02:
                    df:50:38:02:2b:9c:69:24:e3:e5:43:a5:cf:8e:f0:
                    0f:19:45:55:73:62:18:d5:a5:36:ba:7d:64:80:db:
                    e8:de:ce:84:80:1a:33:f0:40:ae:51:cc:a8:0f:57:
                    bf:c5:74:b6:bf:b0:eb:76:bb:88:4b:f1:ab:6a:ee:
                    48:6f:da:92:55:d0:6b:99:9f:ca:43:8d:13:f1:3d:
                    cc:d0:a0:5f:07:c4:e4:06:af:eb:21:33:c7:73:49:
                    00:0b:8a:b2:e9:00:4d:f4:98:12:20:95:48:62:fe:
                    ab:b4:81:51:8a:cf:08:52:38:0a:ed:2e:4e:b1:6c:
                    3e:fb:b5:e0:05:49:22:32:1a:ca:b7:12:b6:b8:9f:
                    03:7b:d8:b2:e2:20:07:af:ec:d5:3a:aa:b7:c2:b3:
                    89:a5:5b:9a:0a:1e:48:22:8d:68:74:f1:eb:f2:87:
                    0a:74:12:8c:8e:e3:76:6c:22:bb:a4:22:12:b9:85:
                    e0:da:16:4a:7e:e4:ba:23:c5:83:58:ad:6e:65:eb:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:8C:54:39:F6:54:25:0C:74:7A:9E:9E:01:85:55:56:C6:D2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/178e8c50-953d-3d19-830a-7c4af5c49423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.29.0/24
                  104.143.94.0/24
                  104.194.206.0/23
                  104.194.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:9a:fe:3c:6f:ed:a6:23:cb:a0:4c:f4:09:ac:cf:ca:08:
         67:74:c6:a2:2a:a7:3c:9f:a3:1e:c8:da:d2:09:b1:3f:0f:c6:
         fc:dd:0e:bf:44:b1:a8:25:cc:16:3e:80:c6:44:3e:7b:bf:91:
         7f:db:ff:83:7d:d4:86:24:ae:cc:2c:0e:c9:70:44:ff:11:b7:
         d7:e7:bd:e7:a5:4a:29:8a:31:a9:a0:41:7b:39:25:25:22:9b:
         e0:ba:59:25:2f:8b:bf:2b:83:7d:71:bd:8e:7e:21:ef:17:cd:
         f7:23:8e:ba:8d:ca:4b:4d:24:eb:a0:79:82:77:12:50:86:06:
         aa:66:2e:1f:f3:5b:d6:e7:92:91:1a:db:5d:c3:54:92:32:14:
         9a:8b:0e:f2:15:bf:e0:cd:2f:ae:86:46:63:c5:7b:43:df:b4:
         7e:3c:97:1e:2d:63:12:4d:61:91:e8:28:2a:4b:e1:dc:f3:87:
         b2:c9:c4:ac:68:b6:b6:41:51:c4:24:81:3f:aa:3d:20:97:c6:
         1d:fc:8a:57:3f:08:87:41:f4:79:82:f3:7d:0c:70:5f:71:8b:
         8b:a5:3a:9a:e4:54:8c:91:8f:39:12:b1:d1:53:61:f2:0b:7b:
         c3:ad:4d:74:f2:75:96:62:da:d9:61:97:40:b6:e0:cc:9b:db:
         c5:3a:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 10:45:53 2026 by rpki-client