Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be11f768-bf05-363c-a553-f79254331845.roa
File:                     be11f768-bf05-363c-a553-f79254331845.roa (raw, json)
Hash identifier:          4+bYdNXDEqM0nZAaNoP6lORFvc/BHG6GVsTv/LvLMWs=
Subject key identifier:   09:15:74:9A:6B:A7:F7:3F:7F:87:94:6D:B0:63:BD:90:2C:41:B5:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64E78630A32D28FF792300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be11f768-bf05-363c-a553-f79254331845.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     20940
IP address blocks:        104.113.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e7:86:30:a3:2d:28:ff:79:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=1d103479-b8e6-460e-abb1-a4eb7667f05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:a5:9f:e8:c9:39:8c:06:2d:28:4f:54:f5:
                    a5:aa:5e:1f:90:51:57:8e:d1:c9:ce:17:46:dc:b8:
                    c4:38:5b:e0:1c:eb:a4:eb:c0:ee:ae:7c:31:ba:1c:
                    d7:70:75:ef:ee:4f:55:41:87:ab:b4:06:ac:a1:5f:
                    cb:6b:2a:a6:8c:ef:99:1f:2b:2b:78:ba:83:65:3b:
                    c9:d2:6d:42:4b:b7:04:0c:ab:0a:63:43:de:2b:1b:
                    06:24:73:3c:47:16:16:57:cc:e1:ca:60:57:a4:d2:
                    42:81:e0:c0:d8:37:f1:83:6f:0b:5a:65:cc:fa:5b:
                    7d:23:41:d4:01:bf:b3:39:30:71:28:9d:38:dc:97:
                    08:fd:9b:d7:85:61:23:00:a7:48:74:6d:9c:0e:a0:
                    ae:c6:4e:78:cf:00:bf:6f:21:ef:86:c1:14:14:2c:
                    51:1f:8d:4c:80:62:77:28:7a:c6:bb:45:65:fc:66:
                    c5:30:52:db:25:cf:d4:71:23:02:d9:cc:66:d0:51:
                    35:c0:1e:e6:9d:ab:e7:92:db:52:50:73:9b:86:9e:
                    10:02:3e:f3:a3:9f:bf:1d:53:47:05:3f:30:05:9e:
                    14:f0:d6:14:7a:c3:9f:b5:90:45:f3:46:1e:e9:c5:
                    97:55:f1:a0:c9:9a:b1:65:ce:18:cc:ef:f7:7c:d3:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:15:74:9A:6B:A7:F7:3F:7F:87:94:6D:B0:63:BD:90:2C:41:B5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be11f768-bf05-363c-a553-f79254331845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.113.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:e3:18:d4:09:c6:cc:74:18:8f:9b:89:60:16:2c:4a:80:
         22:20:e7:cd:0a:78:38:b7:2f:71:f0:30:dd:8f:2f:5f:ce:d4:
         38:b7:54:b2:31:11:65:8b:07:a8:8f:d0:76:75:ad:9a:c2:19:
         87:7d:99:3f:70:65:66:8a:36:c0:a3:bc:3e:53:bf:16:4d:a0:
         68:34:9b:c1:9c:7b:02:8a:fd:e5:0a:71:e1:99:71:14:92:a3:
         2c:49:3c:b2:57:43:89:5a:63:3a:4c:b8:f5:e1:60:b9:3c:65:
         7d:21:ae:6c:29:d2:0d:67:f2:25:35:e3:6a:01:45:57:79:eb:
         81:39:2a:b6:4b:90:c3:0e:f6:fa:6d:33:b7:44:e9:1c:5f:3b:
         4a:7d:da:1b:73:d5:b8:10:4e:d0:58:28:47:6c:1c:b0:ca:c7:
         76:86:86:bf:c5:98:62:8e:07:86:67:64:56:d2:f4:cd:7c:fb:
         5a:ee:4c:ad:0b:e0:27:05:41:44:ae:2f:d7:c4:80:ad:be:51:
         e2:a0:b4:2b:63:ec:4c:1b:66:fc:d2:23:b0:42:3d:f2:fb:3e:
         bd:ae:98:cd:14:ad:07:1d:b1:3d:1d:e7:89:9d:64:9d:ac:b0:
         68:20:10:d9:19:9f:e8:49:9b:57:3e:2d:53:22:16:03:15:3d:
         2d:80:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:12 2026 by rpki-client