Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa
File:                     34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa (raw, json)
Hash identifier:          +temFwGjD24cCkPgQx4fG3j8GRWpZR5KW+0P00P33V8=
Subject key identifier:   42:7C:3D:16:11:3E:E6:97:97:FD:70:09:DB:04:C3:5D:D4:20:15:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E736A3449DF6939285EB65E20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        104.67.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:34:49:df:69:39:28:5e:b6:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=41c1cb85-9a04-4e6e-a8ab-a61e2c0bbc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:0b:6a:b1:a3:21:2d:4d:86:17:5d:fd:ee:
                    05:be:4b:60:c0:e6:9c:1e:9c:84:3a:35:51:29:95:
                    aa:71:f6:09:45:bf:01:37:5f:99:03:f1:24:fe:38:
                    3d:b7:75:29:1a:5e:11:56:8e:b9:48:34:4e:cc:a9:
                    3a:e0:93:d7:77:4c:d5:58:5a:92:f7:4b:c9:33:8c:
                    c7:d6:1c:72:c2:e4:61:7c:85:19:4e:3f:79:7d:f9:
                    a0:01:be:e6:89:6e:e8:6b:15:d1:32:98:1f:04:2b:
                    83:b2:b1:fa:46:cc:c4:04:ea:99:0b:8e:c5:f3:fc:
                    5f:04:d9:6c:c2:42:6e:18:59:d6:9c:cc:6d:9d:39:
                    bf:78:4a:c7:1e:dc:7c:2f:79:30:25:05:38:6a:95:
                    df:9c:27:e8:06:c2:7e:5d:ab:a9:54:20:45:2d:61:
                    00:66:c8:22:3e:bf:95:0c:e9:05:bb:f0:30:ae:8b:
                    9a:43:38:ce:d9:cd:5f:19:d4:dd:64:28:b3:47:dd:
                    f7:8c:75:3b:d3:ef:0e:d4:b9:87:a1:0e:26:6d:c2:
                    b6:ce:99:a7:48:77:b5:67:dd:14:c8:7c:24:d2:66:
                    9b:d7:37:87:2b:eb:85:23:4a:90:0f:94:7f:42:28:
                    ee:fc:34:f0:ae:e1:d2:65:d8:9c:b7:9d:e7:79:59:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:3D:16:11:3E:E6:97:97:FD:70:09:DB:04:C3:5D:D4:20:15:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.67.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:19:45:35:0b:b0:f0:ac:b3:de:c1:61:37:4a:8f:34:e4:
         3b:5c:e0:83:d4:8b:fd:24:bf:f7:85:af:ec:b2:f2:f0:fb:9e:
         75:e5:99:ec:64:ab:95:3b:c4:a8:ad:32:a2:a2:aa:3f:be:a0:
         02:cd:ff:1b:7f:53:fc:fe:5c:fb:10:5c:ec:a6:91:7c:91:75:
         e3:ff:2f:40:d4:1a:eb:fe:55:8f:96:aa:8b:87:d1:ec:5d:21:
         22:2c:c1:bb:56:57:c1:76:50:f3:32:69:e1:54:5f:b9:05:2f:
         b7:5e:fc:b3:40:b2:3d:83:2c:54:d1:ec:44:e6:ac:35:ee:da:
         cb:96:7d:a9:41:09:18:47:bd:c7:18:1e:a0:f5:7b:05:6c:6f:
         e5:eb:58:5a:97:75:aa:c8:e7:e1:e1:1e:9b:9f:01:b0:6b:3e:
         f1:fd:c8:84:49:12:02:d6:1d:e7:03:6e:c6:5e:3f:2a:77:0f:
         f2:53:68:8a:85:7a:92:c5:04:b3:6c:d2:18:7f:ff:5c:4f:ec:
         99:f0:01:51:35:88:7c:42:74:34:f6:d4:74:22:c0:52:86:f6:
         98:c6:2b:ca:cb:9f:5f:02:f1:c9:04:21:2d:78:e4:0e:89:b5:
         c8:74:2e:74:21:43:41:ec:ee:09:52:60:da:1b:a4:b5:e5:e3:
         d7:37:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:25:17 2026 by rpki-client