Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74c816f0-989b-371a-801f-2d965ff4bc52.roa
File:                     74c816f0-989b-371a-801f-2d965ff4bc52.roa (raw, json)
Hash identifier:          PxLzDZZmI8MAqMuTfMojBcP5UiAdrWXr6Cu2U48QvBw=
Subject key identifier:   3C:78:81:70:A6:B9:E1:D9:BC:DF:DB:83:B0:2E:35:7B:0A:9B:8E:9C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EED520B4C8443B758D7A47E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74c816f0-989b-371a-801f-2d965ff4bc52.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     24319
IP address blocks:        104.95.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:0b:4c:84:43:b7:58:d7:a4:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=860aae2d-4fe1-448b-9305-ed50b416414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:d4:45:9c:87:57:c9:18:ee:73:46:e8:75:
                    3f:f1:7d:07:71:e6:6e:55:db:cf:72:ff:59:45:e4:
                    31:f4:48:70:95:f5:e4:b8:84:99:13:75:1c:9b:7d:
                    9e:81:72:7e:65:d3:cf:55:35:3c:ef:5e:cc:ae:e2:
                    b8:c8:51:ef:ba:14:bf:67:68:83:ce:67:ae:9b:7a:
                    d2:c2:72:e4:54:bf:a6:16:50:26:6c:e1:a2:3b:e6:
                    a8:5f:d2:c3:83:79:e2:4e:97:61:e8:3d:1a:6c:38:
                    c1:8d:e3:fd:53:13:0a:09:c5:d6:3c:80:34:75:09:
                    c0:a6:0c:29:76:1e:4f:07:22:eb:9f:dd:26:ba:8a:
                    f4:dc:37:d0:e6:8b:a7:94:c0:92:2d:f6:e2:bb:70:
                    9d:7c:19:4a:04:d4:32:03:43:90:88:7e:ab:c5:b7:
                    18:00:ad:f5:18:49:91:6e:ea:12:7b:fc:ea:4d:01:
                    f3:45:26:78:25:35:e0:bb:77:87:74:aa:1e:7f:a0:
                    10:0d:a6:ba:0c:3a:8a:5a:92:85:c6:d8:7b:36:54:
                    ba:3e:d9:6d:ca:9b:4c:1d:a7:76:73:1a:62:cc:b7:
                    4f:ea:5e:10:d1:1a:0b:34:89:aa:a1:60:b5:00:bb:
                    81:70:53:1f:79:52:36:5f:64:4a:d7:d9:8e:c4:67:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:81:70:A6:B9:E1:D9:BC:DF:DB:83:B0:2E:35:7B:0A:9B:8E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74c816f0-989b-371a-801f-2d965ff4bc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.95.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:77:0a:88:14:7e:36:ac:68:4c:ea:30:02:1b:e2:6a:bc:
         28:17:b9:13:23:c7:07:80:13:61:da:bf:ff:74:e9:b8:e2:c3:
         ad:ec:5d:92:da:8f:6c:34:3c:c8:cf:fb:2c:87:94:31:ba:0e:
         99:1c:70:2f:f1:4c:f0:7a:6d:b0:e3:a8:fe:13:fd:72:92:db:
         ba:af:69:65:d3:2f:aa:19:e2:a9:4b:a2:a5:7c:93:2e:61:bc:
         e1:0d:38:fa:34:f8:3a:08:34:50:6c:15:0c:e8:f2:90:e7:87:
         a6:16:f0:7f:eb:c5:d0:a6:8a:f7:54:6b:8d:a0:ef:df:30:55:
         db:d9:61:e8:81:c9:d6:e3:24:8a:7f:ea:6c:30:38:6a:b1:bb:
         0d:6e:1f:52:cf:fa:91:ac:b3:6e:cc:fb:e8:ce:88:cf:ad:13:
         ce:b8:70:8c:74:fa:68:d1:59:c7:a3:4d:36:ca:2a:a6:af:8c:
         fd:fc:af:c8:6e:b4:bd:69:bd:3d:d6:34:41:5f:c8:48:f9:1d:
         ef:4a:e2:e9:6b:82:c3:03:71:56:73:71:93:cc:3d:fe:c9:cb:
         0d:eb:4a:06:f7:57:c5:0f:4d:35:c2:f1:0e:3d:8e:7f:db:43:
         ef:1f:99:76:b7:2a:a3:73:6a:7e:26:fa:40:e6:b6:80:50:99:
         2f:40:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:50:53 2026 by rpki-client