Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a64f9556-0678-3568-98b8-4c71e02e4805.roa
File:                     a64f9556-0678-3568-98b8-4c71e02e4805.roa (raw, json)
Hash identifier:          bv0pdDtqqez50sbtEbr079sGDim5X9/eJ3ZfXYx875s=
Subject key identifier:   C7:7F:45:80:61:46:FD:DB:1D:14:9B:4E:B3:66:36:06:13:DD:1B:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED001F95C6862E70A70A979C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a64f9556-0678-3568-98b8-4c71e02e4805.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36183
IP address blocks:        172.226.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f9:5c:68:62:e7:0a:70:a9:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=cd9e53d6-e6df-4803-88ab-b49d50f5f624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:72:15:19:64:44:99:05:29:12:5c:48:bb:
                    24:18:05:01:78:a9:8a:53:d9:81:64:f2:56:3c:03:
                    97:f9:00:f4:5b:21:12:02:a0:a7:1e:4b:87:3d:8c:
                    d0:e9:e9:15:57:78:75:ad:85:75:c9:47:fe:a3:4c:
                    36:36:4c:b3:99:c4:a4:9c:b1:7e:b1:4f:9e:a1:80:
                    9b:91:67:74:ba:3f:85:45:d5:5e:35:22:0c:67:ce:
                    79:bd:94:c8:fe:de:eb:bd:db:8c:d4:e9:26:1c:3e:
                    28:c4:99:e9:7c:f3:05:0e:69:4d:6d:25:00:f8:e9:
                    17:d1:66:16:b4:fe:45:40:82:94:c1:5a:7d:60:b2:
                    2f:6a:53:2d:e7:1e:16:ba:30:cb:57:27:28:85:f5:
                    bc:ab:ed:19:a3:f8:5e:76:cf:57:86:28:44:45:09:
                    d3:31:99:ed:e4:96:18:2c:dd:b9:e0:a9:13:2e:3a:
                    9a:28:b6:8c:28:ed:69:f7:71:02:79:72:fe:ef:e5:
                    9d:69:a6:25:45:e7:03:d5:12:73:0a:d5:6f:80:d0:
                    77:e1:68:20:cb:3e:09:c8:88:04:de:10:c6:77:42:
                    fe:17:f6:e4:8b:59:25:4a:00:74:04:06:f0:47:8c:
                    6e:d2:9a:d5:61:b3:48:89:53:fd:e4:15:64:0a:e9:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:45:80:61:46:FD:DB:1D:14:9B:4E:B3:66:36:06:13:DD:1B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a64f9556-0678-3568-98b8-4c71e02e4805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:5f:3b:03:ee:ab:83:ab:e8:cf:7a:44:b5:6c:73:6c:1f:
         fb:cc:21:fb:57:1c:e9:34:6b:fe:e6:f3:64:8d:34:36:99:ee:
         0d:d8:32:32:08:d4:5c:80:87:67:49:32:f3:b3:86:44:1a:c4:
         4c:3a:89:ac:3d:3b:61:a4:da:57:a5:b9:e5:30:fb:69:a1:04:
         0c:ef:01:96:8e:56:92:88:53:ee:df:f5:53:a2:30:06:1b:43:
         18:48:d7:66:95:e9:ef:66:11:1d:07:e0:71:60:bb:73:8b:6f:
         83:0c:74:6e:ad:96:c1:6b:8a:2e:f7:fd:45:58:73:89:a1:fc:
         3f:9a:28:6e:d0:0d:60:12:e2:d7:c6:35:36:3c:28:f5:60:74:
         b6:39:6f:b0:55:0a:57:70:20:a3:6a:e9:91:89:21:f5:dc:7a:
         99:63:ba:fd:66:fa:cb:87:d2:7b:ba:e0:21:e3:2c:a9:b8:4c:
         a1:c4:fc:4e:8f:ef:25:23:71:e7:d4:f7:91:f6:31:7d:64:a1:
         ec:0b:24:7f:81:51:98:49:2e:1d:59:dd:b8:68:d8:6e:07:39:
         27:b6:6b:57:9d:8c:e0:bc:99:d2:46:c6:8c:5c:ca:0b:cc:d6:
         e7:18:8d:2a:f6:f4:56:0b:97:8f:e0:ad:3d:e6:f0:c3:4e:7a:
         90:83:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:29:37 2026 by rpki-client