Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa
File:                     49983501-5530-3388-b854-3db6d5ede801.roa (raw, json)
Hash identifier:          yTAuadsMm9LZX1eSlunzq7ILkz1Ys+s45y2UPpVFuE0=
Subject key identifier:   AC:C3:0E:FE:77:61:8A:F2:DD:8F:53:21:7F:8E:14:68:64:B8:67:DD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E7BCA2D305EF9E34C0E8F2500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     216314
IP address blocks:        104.250.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2d:30:5e:f9:e3:4c:0e:8f:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=7ec158df-f718-4da3-b954-b5e0fc97f65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:2e:89:13:a0:af:65:0e:df:7b:1f:35:84:
                    44:0b:97:a4:04:f3:8e:48:30:51:4d:35:ef:b3:77:
                    eb:f5:13:e8:e4:05:9f:95:4c:a3:b8:3d:16:68:fd:
                    b5:5d:0f:08:20:99:4c:56:5b:4d:33:4f:66:8f:c6:
                    98:3a:05:ca:78:b6:01:92:cc:5c:a9:05:89:a3:11:
                    14:5a:d4:c4:a0:a1:71:af:43:e7:5f:bc:f7:eb:70:
                    83:d3:ba:b3:bd:50:4c:80:46:16:e7:ab:40:7e:6c:
                    45:ff:2b:5f:14:2a:a6:a7:0d:aa:c4:25:8c:5d:40:
                    54:97:e7:ea:1d:fa:c0:20:35:b2:ce:d9:fb:53:cc:
                    6c:ac:f9:3b:e9:29:19:b6:2d:de:0f:fd:35:2d:92:
                    eb:b9:b0:47:11:a1:65:3c:9a:ad:fe:e8:10:0f:39:
                    6d:12:bb:f1:7c:00:b8:9f:bd:b8:c8:61:aa:3b:3d:
                    0b:07:d6:61:46:c7:8d:68:db:b5:fe:9d:7c:3c:ca:
                    1c:bc:76:a1:29:18:39:53:ba:03:12:e5:70:df:7f:
                    d4:18:3e:f2:12:43:c1:20:a1:6b:8a:77:09:3d:41:
                    6f:67:61:da:ed:c5:37:a8:0c:b9:7d:5d:3a:35:0f:
                    ef:96:06:8c:c4:61:5b:52:d1:dc:49:5f:a3:e8:92:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:0E:FE:77:61:8A:F2:DD:8F:53:21:7F:8E:14:68:64:B8:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:04:61:5f:83:f3:4e:67:12:46:93:4d:69:15:4d:bf:5c:26:
         20:53:a6:71:73:e9:1d:a6:c2:39:0b:a7:8f:ef:5d:bb:a1:c8:
         8e:88:43:89:63:a9:79:6e:75:db:a8:d6:6d:60:8e:14:19:26:
         45:ad:f6:aa:94:b4:1f:ca:21:5f:b6:81:5d:7a:45:e0:bf:e4:
         a6:16:30:f0:93:65:c1:d0:81:fd:62:73:23:15:6a:19:66:14:
         f3:3a:62:0e:2e:a8:0d:8a:f8:86:61:33:f4:d2:1d:dd:c8:b5:
         84:30:5a:be:f3:d8:2f:ae:48:d4:f9:21:41:e9:57:b4:df:0d:
         32:3a:ed:e2:c0:f0:38:02:3f:fd:42:69:6c:e7:5a:9f:6a:c1:
         10:9c:0a:ad:22:02:64:ec:a0:e7:60:bf:9c:ca:00:f3:7e:f8:
         c8:b5:b6:fe:e6:e4:42:cc:d0:49:6c:a2:56:92:a7:5d:95:1e:
         c6:24:8c:1f:c7:7d:2d:db:1b:52:49:d4:89:00:7d:94:9b:8c:
         4e:5b:9e:a2:6c:a6:73:01:88:08:c7:de:8c:3a:1c:10:93:1c:
         3e:bd:e8:d1:16:42:a2:36:cb:c0:7d:fa:cf:b8:34:36:56:b9:
         49:08:fa:ac:dc:df:6a:85:53:30:ca:e7:6d:5c:0c:49:65:50:
         31:d8:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:16 2026 by rpki-client