Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
File:                     35004e6a-5b7a-3715-94cd-50fae5247ec3.roa (raw, json)
Hash identifier:          M6Lqu/CYeMwYsbRJUviwLBy2eG4v94oJsfOmxavUJ0k=
Subject key identifier:   97:83:75:FD:B8:D6:E6:8A:9F:F0:34:47:1C:66:AB:FC:82:EC:4A:DF
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584E561A0187368A1DBCB8910F40
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     53334
IP address blocks:        104.153.198.210/32 maxlen: 32
                          104.153.198.211/32 maxlen: 32
                          104.153.198.212/32 maxlen: 32
                          104.153.198.213/32 maxlen: 32
                          104.153.198.214/32 maxlen: 32
                          104.153.198.215/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:01:87:36:8a:1d:bc:b8:91:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=12aa7178-da29-433f-a7a2-2e86041df715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:fc:aa:21:42:12:59:58:42:d2:ae:19:e6:
                    02:a5:4d:ab:73:ff:fa:82:76:b6:30:7c:22:bd:e8:
                    54:b9:e7:08:86:46:9e:be:5a:17:13:6a:86:2f:68:
                    77:ad:07:90:1c:54:11:94:36:73:86:3b:20:42:9b:
                    ed:fe:2f:39:f3:8b:cc:90:f2:04:36:9d:d2:93:7c:
                    22:aa:2b:ba:a3:99:7e:4e:43:7f:5b:fb:0e:22:b2:
                    8c:91:01:b6:8f:21:30:52:55:10:78:41:22:b5:f7:
                    ff:99:d7:d9:67:a4:68:f9:bc:99:f6:f5:40:18:cd:
                    cd:ac:6b:e3:3e:16:1d:76:ab:f3:74:82:ba:33:07:
                    af:e0:d3:67:e9:17:18:46:79:24:be:8e:2a:e6:77:
                    73:15:e2:15:41:9e:c0:d9:59:02:d9:57:ae:28:60:
                    72:e6:fd:04:24:73:94:6d:66:47:e4:7a:ba:67:a9:
                    84:b4:98:2e:81:1b:56:d8:b2:38:6c:46:8f:32:51:
                    d3:0c:7f:85:7f:0c:3b:74:4d:8f:f9:eb:d9:2d:18:
                    bb:b3:a6:7c:fd:35:51:ab:4b:0c:e5:1e:8f:73:41:
                    0c:9d:68:54:f1:15:b8:78:68:a1:af:06:7e:72:14:
                    86:58:84:9f:39:42:c4:b2:8a:44:41:ba:8b:46:a7:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:75:FD:B8:D6:E6:8A:9F:F0:34:47:1C:66:AB:FC:82:EC:4A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/35004e6a-5b7a-3715-94cd-50fae5247ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.210-104.153.198.215

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:54:97:df:83:97:9d:86:63:ec:c0:b1:64:b0:fa:0f:ac:
         4f:69:dc:84:84:72:6f:11:e1:2c:95:4b:c9:e8:85:3d:df:ee:
         55:ab:2e:8c:53:d5:49:fc:ad:fe:f8:4d:a4:f4:06:c9:e8:bc:
         52:2a:17:cc:4e:e1:17:e2:71:9c:e2:9c:e6:08:a3:6c:f1:fd:
         20:75:42:9d:fa:57:51:9a:41:c4:b0:e4:7c:39:3d:42:74:38:
         13:e4:c4:9c:5a:72:13:98:1e:2e:c0:31:08:72:8d:7b:ba:a1:
         23:90:a8:12:4e:c1:6f:ee:83:44:c3:85:44:02:52:9b:2e:2d:
         a3:39:f7:ed:7a:8d:3e:e7:64:aa:b4:0f:fa:a0:b0:04:7f:76:
         d5:e5:7e:a7:a2:5f:18:89:c2:5e:fd:97:dd:20:f4:8a:44:9e:
         28:75:cd:7d:26:9d:3f:d3:2c:2d:46:e8:bb:62:66:98:59:56:
         7e:0c:64:e0:ae:df:a9:c1:4b:15:c8:c5:50:2d:32:39:1c:8c:
         c8:93:52:fd:6e:e8:48:68:46:6a:56:96:0f:d2:00:32:40:03:
         38:80:8c:e7:c3:d8:51:1a:e7:76:94:38:03:5d:7d:69:8e:09:
         dc:09:d1:12:05:a0:91:00:77:6d:03:9d:d5:3c:cf:85:04:88:
         bd:de:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:43 2026 by rpki-client