Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
File:                     75056a33-01f6-3ec3-9c10-448b2543c9e9.roa (raw, json)
Hash identifier:          DFSxjhJ89fXQ9GmHEI/t/Mg6LTfxZTfKzvNeBCoodSI=
Subject key identifier:   74:93:34:12:7A:84:78:04:45:19:F7:65:4B:DB:FC:1C:C3:2A:18:9D
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584AC52FB78CD3FBB5236CBFF220
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa
Signing time:             Wed 06 Aug 2025 20:51:09 +0000
ROA not before:           Wed 06 Aug 2025 20:51:09 +0000
ROA not after:            Tue 04 Nov 2025 21:51:09 +0000
asID:                     40934
IP address blocks:        104.204.176.0/24 maxlen: 24
                          104.204.177.0/24 maxlen: 24
                          104.204.178.0/24 maxlen: 24
                          104.204.179.0/24 maxlen: 24
                          104.204.180.0/24 maxlen: 24
                          104.204.185.0/24 maxlen: 24
                          104.204.187.0/24 maxlen: 24
                          104.204.188.0/24 maxlen: 24
                          104.204.190.0/24 maxlen: 24
                          104.204.191.0/24 maxlen: 24
                          141.109.163.0/24 maxlen: 24
                          159.48.161.0/24 maxlen: 24
                          159.48.162.0/24 maxlen: 24
                          159.48.163.0/24 maxlen: 24
                          159.48.164.0/24 maxlen: 24
                          159.48.165.0/24 maxlen: 24
                          159.48.166.0/24 maxlen: 24
                          159.48.167.0/24 maxlen: 24
                          159.48.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:2f:b7:8c:d3:fb:b5:23:6c:bf:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Aug  6 20:51:09 2025 GMT
            Not After : Nov  4 21:51:09 2025 GMT
        Subject: CN=c8b0a496-fb96-4371-bacc-ca8b053cd831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:d2:95:a7:da:d7:ea:0f:ac:b3:0f:98:1d:
                    ca:60:fa:1a:01:d0:24:d4:5b:f3:3a:b6:97:db:6e:
                    c3:06:d3:85:cc:ae:77:45:31:fb:92:e6:a0:fd:60:
                    35:1b:73:73:02:04:f0:b3:1b:14:7a:f8:b4:bf:3a:
                    77:6c:8c:53:79:ee:f3:c0:98:01:ee:80:88:15:89:
                    ab:f6:9a:74:8c:4e:67:08:d9:43:b2:ca:3f:16:bb:
                    29:fb:ab:09:45:87:d5:f0:07:92:32:cc:0a:7c:41:
                    49:66:d2:2b:b3:5f:f8:63:e9:93:73:d1:c2:dc:25:
                    b3:fb:02:77:7b:c3:17:9b:75:c6:44:51:15:1b:42:
                    8d:97:8d:63:9b:92:bc:86:c1:4f:7a:38:7e:e5:f7:
                    84:b2:eb:0a:ca:c2:d9:b1:bd:cc:07:81:ea:dc:b3:
                    fd:1f:41:5d:10:06:a0:75:dd:4c:24:56:cd:83:a3:
                    fd:7d:c5:ab:33:b7:58:5c:2c:9d:99:19:46:91:dd:
                    0f:ff:83:ec:7b:cf:55:85:e6:3b:78:a8:ec:3a:8e:
                    4f:a3:be:89:8e:4d:b2:eb:4f:16:ab:f1:0b:48:62:
                    d2:64:05:46:b9:61:1d:c8:97:86:ca:08:69:c3:67:
                    66:b8:3b:42:48:9a:3c:c3:c3:47:4c:0a:a2:f4:74:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:34:12:7A:84:78:04:45:19:F7:65:4B:DB:FC:1C:C3:2A:18:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/75056a33-01f6-3ec3-9c10-448b2543c9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.176.0-104.204.180.255
                  104.204.185.0/24
                  104.204.187.0-104.204.188.255
                  104.204.190.0/23
                  141.109.163.0/24
                  159.48.161.0-159.48.168.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:60:6f:a6:9a:67:92:a9:ab:df:f5:86:0a:d7:e1:c5:31:
         18:af:80:a2:fe:18:3e:9a:b2:48:c8:2e:58:6b:75:23:6d:98:
         14:be:72:6b:2c:73:03:a1:7c:6c:75:f8:3a:90:f9:92:1c:6a:
         da:e8:11:e4:15:1e:ca:2b:a1:99:8b:b7:7f:b4:f7:cf:d7:bb:
         37:92:b2:9e:51:60:08:1d:79:a4:88:e3:a4:24:6a:ab:71:f2:
         cd:fa:c8:2d:d3:70:f4:71:82:95:fd:84:78:16:4b:6e:01:9b:
         2c:0a:f6:5f:72:3a:8c:5b:2e:29:4e:db:44:e2:e5:40:1d:2a:
         f6:0c:32:a4:fe:81:a9:a7:fe:86:f5:6b:74:88:6c:64:58:08:
         96:9d:bf:23:9b:07:8b:b0:f8:ec:f3:ca:b4:1c:f8:cc:0b:6d:
         b5:4b:df:b5:83:1e:99:35:32:0e:61:29:95:55:1d:3f:7d:40:
         aa:34:6c:55:56:a1:0d:7f:af:50:e9:95:eb:21:54:e4:1e:93:
         e2:cc:17:9e:29:b5:0a:74:9d:3f:55:b2:fa:4e:d9:72:20:98:
         bf:7f:f2:e8:d5:95:ca:ae:a9:fe:5e:e6:d2:6f:ff:28:1b:99:
         1a:73:9a:b9:da:a2:85:79:4a:0a:bb:8b:98:a6:20:4f:32:b5:
         30:28:c1:78
-----BEGIN CERTIFICATE-----
MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWErFL7eM0/u1I2y/8iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI1MDgwNjIwNTEwOVoXDTI1MTEwNDIxNTEwOVowLzEtMCsGA1UEAxMk
YzhiMGE0OTYtZmI5Ni00MzcxLWJhY2MtY2E4YjA1M2NkODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkvSlafa1+oPrLMPmB3KYPoaAdAk1FvzOraX
227DBtOFzK53RTH7kuag/WA1G3NzAgTwsxsUevi0vzp3bIxTee7zwJgB7oCIFYmr
9pp0jE5nCNlDsso/Frsp+6sJRYfV8AeSMswKfEFJZtIrs1/4Y+mTc9HC3CWz+wJ3
e8MXm3XGRFEVG0KNl41jm5K8hsFPejh+5feEsusKysLZsb3MB4Hq3LP9H0FdEAag
dd1MJFbNg6P9fcWrM7dYXCydmRlGkd0P/4Pse89VheY7eKjsOo5Po76Jjk2y608W
q/ELSGLSZAVGuWEdyJeGyghpw2dmuDtCSJo8w8NHTAqi9HRSXwIDAQABo4IDizCC
A4cwHQYDVR0OBBYEFHSTNBJ6hHgERRn3ZUvb/BzDKhidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvNzUwNTZhMzMtMDFmNi0z
ZWMzLTljMTAtNDQ4YjI1NDNjOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBARozLAD
BABozLQDBABozLkwDAMEAGjMuwMEAGjMvAMEAWjMvgMEAI1tozAMAwQAnzChAwQA
nzCoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJxbYG+mmmeSqavf9YYK1+HFMRivgKL+GD6askjILlhrdSNt
mBS+cmsscwOhfGx1+DqQ+ZIcatroEeQVHsoroZmLt3+098/XuzeSsp5RYAgdeaSI
46Qkaqtx8s36yC3TcPRxgpX9hHgWS24BmywK9l9yOoxbLilO20Ti5UAdKvYMMqT+
gamn/ob1a3SIbGRYCJadvyObB4uw+OzzyrQc+MwLbbVL37WDHpk1Mg5hKZVVHT99
QKo0bFVWoQ1/r1DpleshVOQek+LMF54ptQp0nT9VsvpO2XIgmL9/8ujVlcquqf5e
5tJv/ygbmRpzmrnaooV5Sgq7i5imIE8ytTAowXg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:56 2025 by rpki-client