Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/121eb552-670b-3312-a4e8-67ee7041d6aa.roa
File:                     121eb552-670b-3312-a4e8-67ee7041d6aa.roa (raw, json)
Hash identifier:          OL00RI87BYaX5oGTBdoMljHqqW8qrtLHNqCLkDq31+k=
Subject key identifier:   B0:B6:79:7B:AC:A5:8B:A4:5B:73:6E:86:F2:DB:D2:F4:42:50:23:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF9514E7478D7B8AD94D29C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/121eb552-670b-3312-a4e8-67ee7041d6aa.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     20940
IP address blocks:        104.124.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:4e:74:78:d7:b8:ad:94:d2:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=a3710a74-3873-4919-9357-4df5e3e12a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:94:0d:e0:0d:66:ae:b4:60:f9:bd:60:97:
                    70:cd:3e:f4:0e:aa:a4:73:e1:60:90:72:2f:e3:29:
                    cc:16:1c:45:5e:5d:45:7e:9b:f2:8f:17:84:c1:cd:
                    25:91:f1:3c:35:57:5d:20:46:c7:e6:83:87:98:30:
                    d4:00:5b:cf:fc:5e:0a:3a:72:db:9c:f8:e7:68:55:
                    1f:2f:9f:a3:d6:42:6a:8f:f3:fb:d6:84:1e:3b:b5:
                    c6:14:07:1d:4e:d3:60:48:38:76:bb:cb:1b:6c:ad:
                    e8:a3:29:5b:5d:82:5e:aa:34:0d:56:7b:a6:e9:db:
                    dc:29:96:58:69:aa:d5:c8:f9:5f:04:0d:e4:10:58:
                    e0:65:85:f9:37:e5:48:c9:4c:9b:12:c7:cd:15:8c:
                    e1:de:90:89:67:12:8f:7a:0e:26:4b:ad:55:af:e6:
                    0f:11:c4:c2:ff:08:41:35:18:71:bc:cb:42:aa:d5:
                    d7:aa:82:73:c9:f8:f5:b7:a6:67:d9:a0:60:52:a0:
                    eb:6f:31:03:79:95:7e:2e:b9:10:94:3f:23:80:6d:
                    70:5c:1f:8d:5f:30:a4:4a:21:b7:44:45:fb:7a:d1:
                    f7:91:b7:63:61:62:03:fa:8e:d0:f4:c7:8d:48:cd:
                    e8:a5:c4:1d:68:1f:8c:44:f8:9e:17:8d:40:f8:89:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:79:7B:AC:A5:8B:A4:5B:73:6E:86:F2:DB:D2:F4:42:50:23:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/121eb552-670b-3312-a4e8-67ee7041d6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.124.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:84:87:92:3d:e2:bc:ca:b3:35:aa:23:37:ad:b7:3e:ac:5b:
         db:b5:33:83:26:b5:93:b1:20:f4:f4:8f:0e:6c:14:fb:1a:33:
         d0:39:09:5e:68:9f:7c:f8:ee:43:09:ec:94:00:59:70:e9:bd:
         aa:61:67:51:ee:af:7a:ae:92:eb:0d:55:9b:45:a6:bb:33:1f:
         1b:d2:d6:19:23:26:d4:f5:34:6b:36:91:75:98:f3:ed:49:35:
         7a:5f:71:07:61:d1:ad:d8:0c:66:c6:85:c5:ef:59:df:fd:07:
         a4:05:61:ba:a1:62:b0:a4:fb:8e:0e:b6:5f:02:86:cb:9e:3b:
         27:6f:e2:36:1d:c7:61:8d:7d:7c:a7:9c:32:85:0f:3a:78:b3:
         c2:c1:29:19:f6:e0:0b:ba:a4:a1:75:54:ff:60:00:a2:c2:c6:
         10:ed:df:ed:57:d7:22:dd:e2:4d:52:95:ec:89:a9:1d:0e:a7:
         aa:3f:61:08:a5:54:3f:89:ef:01:b0:a8:09:e3:4a:76:6e:3a:
         3c:2d:6a:83:5a:e2:6f:19:91:52:10:95:31:be:7f:6a:bf:65:
         b0:94:7f:69:a8:32:eb:04:44:41:cc:82:16:4d:77:07:d0:de:
         ad:dd:32:38:d8:42:ff:89:3c:08:6f:55:2c:24:f2:c5:75:2e:
         e3:4a:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:16:56 2025 by rpki-client