Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa
File:                     37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa (raw, json)
Hash identifier:          MIvb+QLn6wenyLBmY/buZgRQDCpsqRUwmUnYyZYYgDU=
Subject key identifier:   E2:18:28:78:A1:09:FA:DF:AF:73:AD:0A:05:48:36:00:E9:52:DF:E8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F0D6CE90002964C2022BB6B80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     5650
IP address blocks:        104.218.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e9:00:02:96:4c:20:22:bb:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=69cdead4-9f17-4fda-9654-ba094aa9123a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:83:fd:a3:61:8f:22:3a:84:e8:f4:6e:79:
                    13:81:d6:5a:c8:14:dd:f4:b2:54:b8:be:10:ce:b8:
                    eb:d5:9c:39:54:61:b9:c2:32:5a:62:10:6e:c7:a1:
                    c3:64:8d:8a:be:23:23:04:0b:d3:67:54:9f:9f:d0:
                    2e:b8:2b:57:e3:07:61:c5:3f:eb:b6:65:b7:3a:28:
                    6b:0c:b8:15:aa:cd:22:59:73:c6:27:e9:aa:07:b8:
                    13:f2:5c:1e:a4:34:d8:10:b4:53:93:21:2c:aa:a0:
                    9d:1c:07:58:9c:f6:a4:eb:bb:5b:aa:7c:1b:9b:99:
                    41:c7:a0:d6:53:f4:37:c5:ec:7e:b9:1c:99:6c:5a:
                    7f:e1:1d:d3:d5:b6:f4:1d:11:b0:4c:26:c4:f7:4d:
                    a7:14:76:2a:06:46:3f:da:35:6b:f6:b8:41:23:8d:
                    1a:82:30:e0:01:59:d2:85:ea:6c:5e:89:e5:6b:80:
                    bf:60:bb:75:97:2c:73:dc:5c:bf:6f:e7:6e:3c:3a:
                    1e:2d:d5:8a:35:ff:01:68:c8:c7:d6:98:8a:9c:e9:
                    8d:c3:7f:03:f8:41:a1:3e:dd:4d:1f:b4:9d:c3:e9:
                    8e:84:93:47:75:b0:85:2e:da:f8:54:7d:c3:43:fa:
                    2d:f1:73:99:36:02:0f:d6:3a:56:3a:21:50:6b:53:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:18:28:78:A1:09:FA:DF:AF:73:AD:0A:05:48:36:00:E9:52:DF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/37ad7dc0-d703-31fe-90f3-cc72f068d7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:6d:ab:16:75:2b:ce:ed:e3:18:40:61:2e:99:f0:5d:e6:
         ee:01:3a:f2:8a:a6:11:62:9c:ff:5f:ac:26:78:3f:0e:a9:fd:
         29:a1:cd:91:35:07:a1:de:d1:32:66:fa:99:f4:f0:e5:b1:47:
         51:4c:36:db:83:bb:de:84:cd:a7:4d:d9:e0:e8:f7:8c:c2:5b:
         18:ab:4b:f1:39:68:22:e7:af:6c:a8:0f:5a:b3:9b:8e:a0:8d:
         59:ab:c3:b7:b9:f5:f5:70:3c:61:31:df:a7:52:35:7d:ad:0f:
         94:96:11:e2:d2:fb:a2:a8:98:e6:eb:0e:6f:34:c0:25:4a:f0:
         67:81:0b:58:69:20:3b:44:53:69:07:d9:3d:f6:9c:97:25:6c:
         15:6b:68:57:e0:d7:ac:99:88:e1:18:52:31:59:1f:87:a6:d5:
         57:28:0c:0b:3b:c5:7a:fb:d6:6e:b8:31:19:33:bf:91:10:0b:
         c6:31:55:c4:9a:20:6b:d1:0e:08:b5:ac:09:cd:10:cc:35:a7:
         aa:39:80:74:98:dd:33:9e:78:f7:3a:a7:60:44:ef:f0:13:8f:
         0b:a5:c8:c3:5a:a8:db:6f:14:96:2d:40:e3:6f:59:ef:4d:22:
         55:36:a1:5c:1a:db:26:72:9d:ad:b1:07:8a:27:fb:cd:be:d8:
         1f:b3:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:48:54 2026 by rpki-client