Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa
File:                     7d656917-5924-37f5-b790-b2255d7bb0f7.roa (raw, json)
Hash identifier:          5mpCG3TfVOqY+Lh6I48nTH2RcuHsF5fWFzI93n3AuHY=
Subject key identifier:   B6:74:43:56:93:7E:5F:47:E3:56:74:8E:9B:16:9F:1F:58:E8:1F:FC
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584E7BCA39B912F37FC58CD2C9C0
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     40934
IP address blocks:        104.204.182.0/24 maxlen: 24
                          189.25.35.0/24 maxlen: 24
                          189.25.38.0/24 maxlen: 24
                          189.25.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:39:b9:12:f3:7f:c5:8c:d2:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=6c3fffa7-071e-48de-8aca-0079dcebfcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:8e:3e:13:0f:73:e0:de:54:72:5b:7a:63:
                    9e:81:ec:3b:53:8c:cc:7c:71:84:7c:3f:11:95:7a:
                    1e:78:8e:ed:ac:73:a9:28:91:b3:77:39:2b:d2:9b:
                    e8:d8:2a:b2:7c:15:61:8c:49:65:b4:75:96:c6:d9:
                    c6:e2:ab:20:fc:39:7c:8b:b5:11:ef:8b:08:1d:16:
                    39:b6:9d:03:3d:d5:e1:fc:0c:7b:b6:77:e5:ab:18:
                    7a:eb:2e:e6:a4:87:28:0c:d7:d8:20:b6:21:22:1e:
                    7f:99:dd:01:67:b1:57:b7:94:3b:3c:e7:73:5c:6f:
                    bc:43:22:40:73:44:c6:96:41:a0:60:c6:1b:da:00:
                    37:87:3a:4c:c9:cc:fc:c4:04:3c:b2:36:c2:9a:df:
                    cd:3a:95:2c:6b:27:cf:ef:e4:4a:8b:74:bb:8b:77:
                    b8:72:24:4d:c6:41:7c:f8:b4:a9:2e:6b:0e:61:9c:
                    ca:13:af:49:d9:2c:73:60:1f:c0:af:7f:22:4a:90:
                    d9:86:e8:69:7a:46:a4:02:db:f9:91:5a:90:e2:ba:
                    e1:f6:f6:3a:68:b6:b2:a0:ae:e1:c2:49:25:b4:61:
                    33:18:34:5e:96:7d:90:3e:b8:cf:a2:bb:f9:35:7f:
                    52:42:06:db:40:2d:35:9b:92:a8:20:10:80:0e:de:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:74:43:56:93:7E:5F:47:E3:56:74:8E:9B:16:9F:1F:58:E8:1F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/7d656917-5924-37f5-b790-b2255d7bb0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.182.0/24
                  189.25.35.0/24
                  189.25.38.0/24
                  189.25.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:2c:39:d5:9e:11:46:d2:06:c8:37:75:27:b0:ba:e1:fb:
         65:a0:8b:64:5e:94:78:d4:1f:12:14:48:ec:23:7a:3e:51:19:
         9d:1b:e0:f2:a6:29:be:5c:4a:5e:98:b2:64:e1:2c:4d:80:80:
         66:f1:bb:71:a9:03:8e:bb:4a:b2:7c:d9:d1:bc:06:5d:9e:cb:
         ec:f6:65:31:bd:45:81:d2:31:83:f4:ea:83:88:47:a5:17:7a:
         ef:5b:6c:6c:7d:c3:06:48:a7:b7:00:30:56:e4:01:91:6f:1f:
         da:40:e9:5f:6e:85:54:dc:1e:39:90:09:fc:26:3d:2f:62:44:
         10:ef:d5:a0:a9:36:6e:92:ca:28:d9:96:39:14:f6:ea:ce:e7:
         ce:f1:2c:4f:c6:7d:7d:cd:e8:68:ee:4b:f0:b1:a8:23:84:18:
         ff:04:6f:ab:5a:d6:91:24:5f:84:f1:56:60:f7:cb:0d:23:56:
         21:b3:db:f1:62:47:cf:45:ab:08:29:d3:90:b6:d6:81:15:e4:
         ba:ef:58:c3:b2:46:ae:5b:0d:a9:09:c6:62:6e:69:f7:48:ad:
         ab:01:8f:00:6b:7e:e2:ff:29:39:2c:3a:53:ab:1d:f9:04:38:
         53:51:f3:8c:ef:5a:b9:89:c5:48:d7:f8:00:27:6a:ca:05:82:
         d4:c3:ba:93
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE57yjm5EvN/xYzSycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
NmMzZmZmYTctMDcxZS00OGRlLThhY2EtMDA3OWRjZWJmY2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb+OPhMPc+DeVHJbemOegew7U4zMfHGEfD8R
lXoeeI7trHOpKJGzdzkr0pvo2CqyfBVhjElltHWWxtnG4qsg/Dl8i7UR74sIHRY5
tp0DPdXh/Ax7tnflqxh66y7mpIcoDNfYILYhIh5/md0BZ7FXt5Q7POdzXG+8QyJA
c0TGlkGgYMYb2gA3hzpMycz8xAQ8sjbCmt/NOpUsayfP7+RKi3S7i3e4ciRNxkF8
+LSpLmsOYZzKE69J2SxzYB/Ar38iSpDZhuhpekakAtv5kVqQ4rrh9vY6aLayoK7h
wkkltGEzGDReln2QPrjPorv5NX9SQgbbQC01m5KoIBCADt4H6QIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFLZ0Q1aTfl9H41Z0jpsWnx9Y6B/8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvN2Q2NTY5MTctNTkyNC0z
N2Y1LWI3OTAtYjIyNTVkN2JiMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaMy2AwQA
vRkjAwQAvRkmAwQAvRkqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACfrLDnVnhFG0gbIN3UnsLrh+2Wgi2Re
lHjUHxIUSOwjej5RGZ0b4PKmKb5cSl6YsmThLE2AgGbxu3GpA467SrJ82dG8Bl2e
y+z2ZTG9RYHSMYP06oOIR6UXeu9bbGx9wwZIp7cAMFbkAZFvH9pA6V9uhVTcHjmQ
CfwmPS9iRBDv1aCpNm6SyijZljkU9urO587xLE/GfX3N6GjuS/CxqCOEGP8Eb6ta
1pEkX4TxVmD3yw0jViGz2/FiR89Fqwgp05C21oEV5LrvWMOyRq5bDakJxmJuafdI
rasBjwBrfuL/KTksOlOrHfkEOFNR84zvWrmJxUjX+AAnasoFgtTDupM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:46 2026 by rpki-client