Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4e1469d-5c17-3925-9645-302bb1a33041.roa
File:                     a4e1469d-5c17-3925-9645-302bb1a33041.roa (raw, json)
Hash identifier:          CzIct0WosqtIi38Gu2HthUVt7p5PxHV7Nrpzx4ao+Io=
Subject key identifier:   A9:48:86:11:51:B1:A5:94:96:BE:03:BA:69:77:0A:0B:99:28:D4:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64E9D3FD8090610245A960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4e1469d-5c17-3925-9645-302bb1a33041.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     20940
IP address blocks:        104.120.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e9:d3:fd:80:90:61:02:45:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=a0ed8523-f971-46ad-8b01-2391c9258e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:75:8b:ea:a3:4f:6b:38:df:6c:c6:2e:39:
                    70:ef:bc:c3:25:d9:6c:3f:d2:dc:98:c2:48:b0:f3:
                    c2:96:3b:36:81:a0:19:69:a8:b2:7f:21:12:39:b4:
                    4c:3c:46:01:6f:05:45:f0:5e:e7:4c:ae:a2:8a:54:
                    d2:48:e0:e2:cd:f3:71:06:9d:61:91:0d:8a:10:75:
                    5c:0f:71:f6:e8:93:aa:3a:70:24:8f:4d:e6:3e:21:
                    14:dd:d3:69:05:ae:f7:bb:ec:b4:dc:bf:9d:fe:2a:
                    b7:23:8f:00:0a:c1:4f:32:74:34:5f:1e:8d:ee:3a:
                    fc:4c:cc:df:9c:42:d3:8d:ca:a3:9e:7d:48:3f:ca:
                    23:b3:aa:ca:d8:83:1f:94:b0:53:45:11:08:40:22:
                    1f:bc:33:79:60:2d:74:89:1c:1a:6e:0a:50:c5:e3:
                    0a:3b:00:53:e3:88:e0:86:d2:89:ef:96:ec:29:dd:
                    99:44:c7:76:06:ba:d1:9d:76:b8:f7:0f:d8:85:7f:
                    b3:87:af:c7:45:98:3b:1b:92:97:31:dd:c7:8a:26:
                    19:cc:bf:f1:99:3f:f2:31:e5:37:b0:84:f1:76:c0:
                    c7:d9:60:d4:5f:43:f0:8f:85:5c:8a:29:ae:8f:e5:
                    96:2d:1d:91:4d:cc:61:8a:5f:71:92:cb:d5:2b:5f:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:48:86:11:51:B1:A5:94:96:BE:03:BA:69:77:0A:0B:99:28:D4:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4e1469d-5c17-3925-9645-302bb1a33041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.120.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:57:24:fc:a0:5e:52:72:c5:4f:6b:3c:7a:84:a9:83:01:
         17:fc:7e:a5:22:9a:0d:c3:ab:f7:f7:71:1b:10:38:eb:c8:e8:
         e6:ef:00:ac:e3:68:41:8e:98:45:a4:21:2d:f5:4e:d7:d6:33:
         47:1a:f1:67:08:d8:2e:46:0e:0d:a4:23:bf:f6:fa:7c:f0:09:
         41:6e:95:65:ac:af:93:67:ed:29:68:a5:2c:15:ef:34:36:2a:
         f7:5e:98:89:e2:4a:90:59:38:25:d3:f1:6a:0a:05:ae:5a:9a:
         92:f6:9b:e5:28:de:49:6a:aa:b6:6b:50:f0:b3:6c:5a:08:e2:
         63:9d:10:df:07:e0:7c:ab:41:a7:bd:d1:f4:8c:44:91:f7:1d:
         c7:dc:dc:a1:86:d4:30:1d:3e:dd:8c:64:00:45:2a:67:22:0c:
         2d:ad:78:3a:e7:d4:c0:41:ac:78:9c:34:1e:87:20:82:36:77:
         92:48:29:aa:f6:ce:f7:82:51:07:89:83:96:e6:2b:b6:65:c1:
         ff:21:ec:c1:13:3c:b8:c7:2a:d3:52:00:14:e9:e1:89:ff:b9:
         aa:6a:62:81:36:ff:74:0a:f3:5c:15:4d:2d:03:0d:a1:1f:4b:
         db:43:ce:f4:bb:54:df:06:c5:39:ec:85:e5:d1:2d:58:d9:d9:
         65:b1:02:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOnT/YCQYQJFqWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
YTBlZDg1MjMtZjk3MS00NmFkLThiMDEtMjM5MWM5MjU4ZTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD91i+qjT2s432zGLjlw77zDJdlsP9LcmMJI
sPPCljs2gaAZaaiyfyESObRMPEYBbwVF8F7nTK6iilTSSODizfNxBp1hkQ2KEHVc
D3H26JOqOnAkj03mPiEU3dNpBa73u+y03L+d/iq3I48ACsFPMnQ0Xx6N7jr8TMzf
nELTjcqjnn1IP8ojs6rK2IMflLBTRREIQCIfvDN5YC10iRwabgpQxeMKOwBT44jg
htKJ75bsKd2ZRMd2BrrRnXa49w/YhX+zh6/HRZg7G5KXMd3HiiYZzL/xmT/yMeU3
sITxdsDH2WDUX0Pwj4Vciimuj+WWLR2RTcxhil9xksvVK1+a3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlIhhFRsaWUlr4Duml3CguZKNTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRlMTQ2OWQtNWMxNy0z
OTI1LTk2NDUtMzAyYmIxYTMzMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHg0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7xVyT8oF5ScsVPazx6hKmDARf8fqUimg3Dq/f3cRsQOOvI6ObvAKzj
aEGOmEWkIS31TtfWM0ca8WcI2C5GDg2kI7/2+nzwCUFulWWsr5Nn7SlopSwV7zQ2
KvdemIniSpBZOCXT8WoKBa5ampL2m+Uo3klqqrZrUPCzbFoI4mOdEN8H4HyrQae9
0fSMRJH3Hcfc3KGG1DAdPt2MZABFKmciDC2teDrn1MBBrHicNB6HIII2d5JIKar2
zveCUQeJg5bmK7Zlwf8h7METPLjHKtNSABTp4Yn/uapqYoE2/3QK81wVTS0DDaEf
S9tDzvS7VN8GxTnsheXRLVjZ2WWxAoA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:57 2026 by rpki-client