Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa
File:                     eee29780-d621-38a5-88f3-66f2279c1220.roa (raw, json)
Hash identifier:          yVaYH/NwYhXqWIDb3ffJyF1UrTasNwu3ngePC5+Cihk=
Subject key identifier:   66:E0:5F:FD:BC:0A:D6:53:2B:D5:F8:2B:2D:68:11:DB:57:21:B4:0F
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F4328584F4973EF4B27425CCCE6549440
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        104.249.160.0/24 maxlen: 24
                          104.249.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ef:4b:27:42:5c:cc:e6:54:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=19d71488-009d-460e-933d-42af2956d69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:0c:cc:69:ac:93:34:19:11:0c:ff:4e:f8:
                    03:60:03:50:1d:c0:af:9c:97:0e:18:f1:21:87:e9:
                    46:b9:3f:98:c2:94:e6:6a:b5:4e:28:20:2e:61:39:
                    c5:63:59:d2:bc:7b:43:cf:af:df:a0:5d:4d:82:76:
                    78:bf:f8:da:55:87:e0:b0:39:8a:ed:0d:a2:98:7a:
                    a3:44:c3:99:6b:c8:3f:5a:56:17:24:87:76:67:62:
                    9f:dc:4d:d1:e7:0a:9b:e8:43:b1:c9:77:b9:8e:2e:
                    7b:c0:a8:53:48:21:83:27:3b:67:0e:e7:fc:83:a6:
                    41:22:32:55:50:43:a8:eb:a4:11:09:3b:ff:86:ea:
                    3c:1d:ce:77:0a:05:eb:9a:25:bd:49:23:43:2d:9d:
                    55:9b:77:14:d5:f1:9d:6e:48:c1:fc:b6:48:d1:69:
                    49:84:c4:fb:aa:48:40:52:c1:d6:a9:81:5d:65:00:
                    a0:ca:37:9d:95:f5:3c:e6:22:bc:49:1c:ac:5a:f9:
                    72:23:a4:8a:7b:02:bb:69:e7:f2:b5:4f:49:f9:7c:
                    9a:fa:47:e5:6d:d9:29:c2:34:ab:6f:98:b6:0f:4e:
                    a6:0d:d6:71:da:03:37:cf:c9:2f:71:97:73:f8:b7:
                    f0:ed:af:2b:8d:9b:4e:3b:aa:09:68:e9:4a:db:45:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:5F:FD:BC:0A:D6:53:2B:D5:F8:2B:2D:68:11:DB:57:21:B4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:c3:dd:fe:84:69:a8:b5:5d:6c:fc:98:3c:da:61:35:17:
         9b:47:df:1a:f5:03:21:84:15:72:1f:d9:72:85:0b:3b:f7:e4:
         4e:d4:b5:71:22:fc:b1:62:b1:13:c7:0d:8a:6b:2f:f4:7f:6e:
         7a:a4:86:c3:ec:40:3f:72:8e:ac:88:c6:fd:2f:8b:30:f7:05:
         bf:43:89:d3:a6:aa:28:cd:46:4f:a2:1b:99:ce:d7:e9:86:30:
         8c:12:ce:ca:9e:c3:d0:39:54:1f:0c:eb:b6:2f:d3:00:7b:55:
         11:c9:b8:90:3b:0e:f9:c0:25:db:59:b8:b4:95:d7:b2:54:1f:
         38:2d:45:f9:17:fd:cd:b2:81:78:27:a6:7d:aa:ab:3f:de:78:
         2f:61:04:9a:53:63:49:3a:1c:10:49:b3:af:de:8c:09:8e:11:
         f4:9a:bf:ab:d2:be:12:6e:2a:b4:a5:52:96:82:19:c3:26:f8:
         d1:8f:de:83:ee:6c:94:62:ca:4f:94:f7:18:fa:92:c3:26:b7:
         ee:21:c1:f9:14:cc:aa:c1:39:62:0e:cf:1c:18:79:22:57:8b:
         8a:a9:e2:7b:90:4f:b7:ab:88:38:a8:8f:78:5e:89:73:ef:7b:
         80:b0:b8:84:ca:9e:54:a7:4f:fd:7a:b1:aa:64:2a:a5:62:19:
         1e:f2:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:36:14 2026 by rpki-client