Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa
File:                     7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json)
Hash identifier:          ViQ/AAcf6mXeITAwkHBM3+Mh0yHuVZZY5uHdIohFpG4=
Subject key identifier:   1A:CF:AA:9C:AF:6F:8A:DB:D7:53:28:E8:77:A3:DA:FE:79:7A:45:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6B0A2728BAC3314F11FEA680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.70.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:27:28:ba:c3:31:4f:11:fe:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=4d46fdd8-59f0-4e29-b40c-d1198ad3d7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:c7:b2:94:d5:e5:10:e5:78:0c:f8:cb:12:
                    62:eb:0e:c5:20:e6:f0:45:13:10:3b:40:a9:f8:3b:
                    3b:8f:59:2f:ff:62:63:a7:19:c3:8f:cf:f5:c5:80:
                    20:ce:e0:e3:3b:27:0a:92:81:82:05:8e:a0:21:bb:
                    a2:ae:2a:dd:0e:70:1d:4f:51:1b:ad:d5:6c:19:02:
                    e9:ad:98:12:da:47:4e:17:d2:7a:b9:ef:5e:78:e1:
                    94:74:2a:69:f8:00:3a:95:3e:c8:9e:f7:e7:25:4c:
                    5d:6d:f6:62:f7:07:da:5f:27:0b:94:a3:30:21:a7:
                    b0:2f:c2:5f:73:3e:89:0f:37:ed:ee:72:1b:47:44:
                    e8:78:f8:b5:23:9c:34:ca:cc:bb:bc:60:b1:3c:8e:
                    15:b3:18:15:a8:ef:92:de:a9:93:19:f6:10:8a:18:
                    68:e1:c4:3f:ba:47:bc:49:cb:27:fa:ee:9b:51:68:
                    4a:3a:57:20:0d:66:11:32:35:11:9e:5d:55:26:e5:
                    49:19:c3:08:41:aa:0d:c3:21:6d:c3:ff:a3:b3:36:
                    5f:59:a3:d4:3c:21:a5:37:02:94:4e:0e:b2:82:7b:
                    34:b5:62:26:92:7d:a8:e1:a0:b2:71:ad:16:b6:88:
                    29:e5:68:9c:ae:d4:7f:49:f4:47:84:a5:13:8c:ed:
                    9e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:AA:9C:AF:6F:8A:DB:D7:53:28:E8:77:A3:DA:FE:79:7A:45:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:13:cf:18:fd:5f:3e:9b:57:1a:5c:14:4c:46:eb:7a:36:
         64:06:c1:f2:d7:68:ce:e2:8c:a9:9c:53:25:6e:44:14:fc:86:
         cd:80:a4:d5:5e:64:09:92:23:bc:3c:c9:66:88:62:ba:22:a9:
         88:7b:f0:50:ee:9e:c7:72:b3:41:50:b9:d4:e8:40:a7:d7:b3:
         ae:dc:12:63:fc:36:97:4d:60:68:b5:2a:cd:8a:3d:8c:18:dc:
         f2:19:b9:5b:a9:1a:ec:04:66:36:8f:ae:06:35:eb:29:d0:1e:
         5e:8f:8a:b6:c7:ee:b4:04:7e:60:95:c3:37:d1:f3:ee:15:44:
         16:c8:79:9f:17:fb:98:ce:80:b1:ed:7a:a4:0a:9b:25:e5:2c:
         ee:e0:a6:6b:2a:4f:87:ab:15:4e:af:14:16:3d:38:56:c5:78:
         85:7e:77:60:ec:bd:db:f6:a9:18:d5:b4:46:a9:c5:d1:8f:76:
         75:af:90:07:75:b7:59:99:e8:a5:8c:21:e4:de:c2:f6:60:35:
         a5:80:a0:36:96:1e:ca:4b:8a:e4:8a:75:b0:b7:6f:e4:1d:46:
         b0:b0:63:bf:a5:1e:00:b1:0d:ca:42:6f:da:05:02:b8:f4:0d:
         d5:45:ed:e2:f5:ed:99:cd:87:0a:60:3f:35:45:26:ee:61:16:
         a2:57:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:46 2026 by rpki-client