Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa
File:                     0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa (raw, json)
Hash identifier:          Ldu8ELce1ldQlmIc3RwQlIQYMPl3bludItFWotXm5Iw=
Subject key identifier:   92:D1:41:87:2D:02:BB:E2:8E:87:8C:C8:46:C3:88:E9:B9:6B:F7:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E104F05143C9ACCAEB65713F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     21342
IP address blocks:        104.104.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:05:14:3c:9a:cc:ae:b6:57:13:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=1761ea74-eb67-480b-94af-3e12ae17746d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:eb:08:4e:2f:51:34:ac:69:3c:08:c6:86:
                    fa:7e:34:98:b8:09:cc:66:38:3c:e9:93:9d:3e:50:
                    91:e3:97:5c:a1:a9:33:ca:0f:b6:7f:f5:f5:4a:99:
                    2c:19:3e:58:05:ac:df:de:52:b5:3d:31:59:53:46:
                    22:73:67:7e:92:a8:56:45:d7:1b:22:22:c3:09:6c:
                    bf:ce:95:17:d9:37:4b:d7:80:fb:26:7d:47:fa:83:
                    dd:9f:05:3c:0d:56:81:97:61:62:bb:31:fc:4c:dc:
                    55:d3:f4:fb:3e:2c:f5:fc:28:bd:d4:de:40:97:cb:
                    ec:ad:fc:4d:21:b8:31:e6:68:4a:43:92:93:35:50:
                    32:47:48:31:61:6a:9a:f4:a4:8b:5d:b0:3c:ee:d6:
                    d8:f6:5d:15:98:c9:bd:0e:e6:47:96:9d:40:eb:61:
                    c7:85:86:38:a6:05:2b:fe:cf:3b:88:8a:1d:aa:4f:
                    f0:cc:6b:4d:80:42:d5:fb:a0:16:19:e0:ba:8c:11:
                    e9:83:90:0d:7a:d5:2e:0e:55:0b:6d:ad:15:aa:94:
                    67:3e:e6:de:f9:62:1b:61:ee:df:78:63:16:3e:cf:
                    66:68:25:d0:25:02:a3:ce:38:b9:f3:0b:6c:11:f3:
                    75:ff:26:5b:90:e8:83:3b:cc:67:ac:08:f9:d9:d8:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:41:87:2D:02:BB:E2:8E:87:8C:C8:46:C3:88:E9:B9:6B:F7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab76dd7-ae28-3c92-b3e1-dbfc7d275d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.104.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:df:69:48:5c:e6:58:33:d6:05:81:00:8f:89:94:6e:f7:
         80:8c:6f:89:98:be:c4:30:11:fd:95:d1:8f:f5:6c:c3:54:58:
         04:38:d1:23:3c:98:5f:0e:08:4e:ed:e6:19:f9:a9:df:46:5a:
         47:43:27:e8:ec:fa:ba:87:a9:d0:4d:82:b4:a8:48:20:6e:e4:
         f8:0e:b2:35:d9:09:24:af:38:41:10:24:cb:1a:02:60:8d:36:
         f0:34:51:20:47:89:57:7d:d3:a3:8f:9a:d4:3b:8e:3e:4d:34:
         30:64:76:c6:fe:38:5d:62:9f:93:6d:f5:f8:9f:55:02:11:fe:
         e3:2c:77:38:c2:7a:8b:63:32:07:c5:fb:ce:32:c7:b4:b4:c2:
         b7:0e:27:da:40:96:87:68:3f:7f:d3:2b:85:b8:b3:b5:46:4e:
         4a:a2:de:3d:10:ef:c2:4d:b6:42:53:19:e9:5d:79:b9:9e:cd:
         14:d4:c8:b4:1c:58:17:18:5d:56:01:0c:79:9f:42:fd:87:64:
         10:a6:40:c0:21:2f:d7:7a:36:bf:cd:97:da:89:ff:cd:68:1b:
         45:d5:3f:e0:38:69:48:8b:1b:cc:92:55:8a:e8:79:30:a5:6d:
         b8:8b:0c:db:9c:9a:dd:34:7c:bb:8b:51:fb:96:88:a8:df:4f:
         93:93:1e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwUUPJrMrrZXE/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MTc2MWVhNzQtZWI2Ny00ODBiLTk0YWYtM2UxMmFlMTc3NDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsifrCE4vUTSsaTwIxob6fjSYuAnMZjg86ZOd
PlCR45dcoakzyg+2f/X1SpksGT5YBazf3lK1PTFZU0Yic2d+kqhWRdcbIiLDCWy/
zpUX2TdL14D7Jn1H+oPdnwU8DVaBl2FiuzH8TNxV0/T7Piz1/Ci91N5Al8vsrfxN
Ibgx5mhKQ5KTNVAyR0gxYWqa9KSLXbA87tbY9l0VmMm9DuZHlp1A62HHhYY4pgUr
/s87iIodqk/wzGtNgELV+6AWGeC6jBHpg5ANetUuDlULba0VqpRnPube+WIbYe7f
eGMWPs9maCXQJQKjzji58wtsEfN1/yZbkOiDO8xnrAj52dgSDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLRQYctArvijoeMyEbDiOm5a/e0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFiNzZkZDctYWUyOC0z
YzkyLWIzZTEtZGJmYzdkMjc1ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGg6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVr32lIXOZYM9YFgQCPiZRu94CMb4mYvsQwEf2V0Y/1bMNUWAQ40SM8
mF8OCE7t5hn5qd9GWkdDJ+js+rqHqdBNgrSoSCBu5PgOsjXZCSSvOEEQJMsaAmCN
NvA0USBHiVd906OPmtQ7jj5NNDBkdsb+OF1in5Nt9fifVQIR/uMsdzjCeotjMgfF
+84yx7S0wrcOJ9pAlodoP3/TK4W4s7VGTkqi3j0Q78JNtkJTGeldebmezRTUyLQc
WBcYXVYBDHmfQv2HZBCmQMAhL9d6Nr/Nl9qJ/81oG0XVP+A4aUiLG8ySVYroeTCl
bbiLDNucmt00fLuLUfuWiKjfT5OTHhY=
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:40:15 2026 by rpki-client