Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa
File:                     d49b67ba-615e-356c-83fe-386eb744f8c8.roa (raw, json)
Hash identifier:          DGh19B67XhmqZaCU1cMdZQ/y7Wj54uYYIUJ2bl2XPQU=
Subject key identifier:   3A:23:CA:15:F6:E5:3F:50:D9:A9:B0:60:39:86:1D:2A:B4:58:77:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E736A378B14662398198F28A8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.77.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:37:8b:14:66:23:98:19:8f:28:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=8f1d6c3e-5b76-4c9f-9ce3-6db14b8d6a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:b1:c7:c0:6f:fe:3b:a8:bc:57:8e:80:df:
                    d2:87:1e:cf:9d:ae:fa:4d:79:bc:22:3e:f6:f6:37:
                    c0:40:fe:b7:56:4a:a3:9e:41:bd:fb:98:77:40:fc:
                    7a:c1:50:e6:07:e3:a6:c4:83:77:0b:d4:45:70:f3:
                    12:32:e4:91:38:f9:e6:e4:32:3f:f4:76:9b:79:b8:
                    4e:27:74:86:e5:e6:51:f0:60:36:63:c7:22:17:44:
                    ad:77:d1:dc:2e:db:d0:08:c3:6f:46:37:b4:bb:d1:
                    ef:29:28:bf:44:6e:5c:42:4e:f5:1b:1d:9f:43:f4:
                    86:cd:9b:b4:b8:3b:89:d4:a6:68:40:33:27:78:16:
                    7a:9a:aa:8b:c7:a8:e0:2b:4b:ad:15:21:b0:55:15:
                    c6:3a:30:3f:6c:d8:c2:8e:8c:8e:25:54:87:cc:cb:
                    ae:be:29:3a:d2:0d:6a:81:99:ae:82:f4:c0:60:91:
                    6d:28:1a:75:37:13:17:cd:3b:45:ec:90:44:68:ff:
                    ba:73:98:33:7b:77:6c:20:68:22:a1:49:e5:f5:87:
                    64:51:57:e5:ce:cf:2a:b0:ce:fd:33:5f:7f:aa:d2:
                    a5:af:d1:17:41:7d:4d:e1:5c:74:b4:9d:41:bb:9c:
                    9b:45:d7:55:b0:c6:bd:13:a3:bc:df:e4:24:63:4e:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:CA:15:F6:E5:3F:50:D9:A9:B0:60:39:86:1D:2A:B4:58:77:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d49b67ba-615e-356c-83fe-386eb744f8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:12:ee:60:58:ac:7f:dc:a0:f9:95:66:3f:82:db:f2:2a:0c:
         8d:93:5a:dd:19:c2:13:1e:41:d4:c1:39:5b:2b:2a:25:cf:1f:
         b2:03:e4:13:51:13:b0:7b:fe:70:c1:74:18:1c:64:46:71:23:
         29:9c:b6:ce:62:64:d0:cf:fe:80:f4:48:69:cb:48:c7:c6:01:
         43:c2:5f:12:5d:84:99:d1:14:d2:41:32:28:19:9b:c3:d7:c1:
         d3:d7:c0:18:7c:48:57:1c:63:8d:87:b7:9a:5e:3e:bc:97:e6:
         ee:d6:f6:0d:6c:ce:83:23:ca:f1:da:fc:5e:c2:7a:f5:c0:34:
         38:f5:8f:8e:b7:eb:a0:95:f3:8b:d2:40:4d:3c:7c:f3:05:66:
         1b:2c:74:87:fa:b1:a4:6c:9c:6f:75:4a:20:3d:98:08:bc:a1:
         bf:b8:a7:47:eb:a1:f9:fa:49:24:a3:4e:bb:60:b8:c5:1e:7c:
         0a:47:37:16:e4:e9:23:d0:2b:ba:8c:2a:3f:75:e1:78:37:1d:
         4e:88:c8:51:20:38:99:ba:9b:8b:c2:17:21:db:4c:4b:7e:47:
         3a:65:33:34:76:f6:08:78:a2:8d:b5:16:90:d1:51:a9:62:31:
         dd:d6:f2:eb:75:4e:8f:0d:ab:13:1d:6d:a5:ba:4d:2e:be:21:
         71:5e:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:52:29 2026 by rpki-client