Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005c4316-5938-35f0-ac17-2a0a290d18ae.roa
File:                     005c4316-5938-35f0-ac17-2a0a290d18ae.roa (raw, json)
Hash identifier:          KMbx3Bw4ma/UBh1cUUtlbFetH3NU/jbY1HdQBYF1eUw=
Subject key identifier:   59:32:4A:4B:F0:6D:F6:97:1E:9B:83:8C:E3:E1:54:29:77:87:84:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7634E8EEA08C1BEB79115200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005c4316-5938-35f0-ac17-2a0a290d18ae.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.96.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e8:ee:a0:8c:1b:eb:79:11:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=dc8d4d51-0009-497a-b27a-c74b574a7f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:c7:5d:e7:29:f8:22:a1:f2:52:c9:97:2a:
                    2f:69:18:5e:88:bf:83:98:49:c8:16:45:dd:9c:49:
                    a9:8c:5c:03:bf:b6:79:6b:55:97:d9:d6:f5:c6:03:
                    4c:c7:fd:98:41:63:3e:22:4d:d3:c1:5b:cd:4c:7a:
                    24:5e:76:86:b8:ab:95:ab:3b:2a:52:0b:98:6d:30:
                    8e:e4:c1:77:44:05:f3:bc:cc:61:33:db:b2:42:9c:
                    dc:65:88:26:aa:d4:00:75:f3:a4:7d:1f:ce:85:da:
                    72:09:13:9a:04:01:7d:ab:74:ba:c1:a9:8c:f6:dc:
                    4f:44:e4:1f:fd:ec:c4:ff:68:83:cd:30:34:26:43:
                    c3:cb:f4:1c:98:3d:74:9d:76:36:34:83:a5:94:6d:
                    2f:68:e3:30:d5:5e:ba:57:6a:c0:b1:74:8f:f4:98:
                    1e:09:eb:76:3d:35:c9:a7:91:66:e7:2d:9b:e4:43:
                    2b:b3:d5:ac:59:25:33:38:ba:d7:34:9e:3b:55:8e:
                    cb:81:57:7c:c8:4c:c5:c3:8c:a6:3b:fb:c8:94:92:
                    e5:38:f1:7b:bd:c3:48:e4:05:5d:47:8a:55:6c:88:
                    59:62:35:b9:be:cd:cf:07:e4:9b:37:1e:90:49:99:
                    a3:9d:08:63:c5:c2:c2:98:df:d0:25:66:9c:3b:63:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:32:4A:4B:F0:6D:F6:97:1E:9B:83:8C:E3:E1:54:29:77:87:84:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005c4316-5938-35f0-ac17-2a0a290d18ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:3e:1c:34:7d:ce:90:d0:3d:58:aa:74:4b:a3:1d:99:7d:
         a1:49:60:b5:b7:37:a9:61:18:7e:ee:9d:13:af:a2:4a:a3:34:
         e3:b0:a5:14:cb:ea:ea:e3:88:76:2b:34:9c:40:b3:ea:fc:75:
         ec:09:7b:4f:ef:0d:e4:73:10:01:d8:bb:d2:5b:be:58:b2:75:
         bd:11:3f:3d:19:6e:06:28:22:4a:52:83:b7:6e:2b:51:1f:29:
         27:c4:fe:f7:1f:a4:4d:b8:37:2e:91:f2:6f:9d:fe:43:08:f5:
         a2:e1:f8:5b:41:75:8a:27:4d:95:26:4f:4b:02:80:16:63:d6:
         2e:91:62:2e:a4:ee:63:ee:bf:a5:e8:9e:ad:a5:eb:a9:fc:bc:
         17:5c:6b:7a:84:8a:39:89:0a:44:5a:1d:24:61:79:d4:28:2d:
         36:2a:4b:50:4d:d9:63:ff:03:1c:ee:b1:00:82:db:b3:e1:92:
         c3:33:16:15:ca:cc:cb:24:d7:89:ac:51:6a:dd:61:53:ef:bd:
         ef:a5:c2:bc:87:8d:99:5b:9a:54:ad:19:61:f5:64:5f:5b:a8:
         5b:e2:8d:c7:90:7e:9e:4a:32:55:2e:2b:a2:6b:aa:f0:42:0b:
         da:ba:7f:d2:bc:ee:75:fa:83:8f:76:0d:57:9e:f6:fe:23:ad:
         c2:e7:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:07 2026 by rpki-client