Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa
File:                     371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa (raw, json)
Hash identifier:          WEoQCjsj1rIFbqzjxtaXLQidUVSq6yVilo4WsFs/9ho=
Subject key identifier:   9C:7A:5A:86:DF:EF:31:11:65:0D:DE:C0:6E:1C:F1:90:0E:08:3D:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8F3DBA8BC36E84272EAF0AF0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     12222
IP address blocks:        104.101.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ba:8b:c3:6e:84:27:2e:af:0a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=6954236e-8708-4b3b-ad00-0b178eda750f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:e3:24:1d:cd:b7:1f:60:62:74:1e:f0:d2:
                    11:7f:ac:83:58:87:5d:ad:d7:66:c1:b7:55:11:f9:
                    f0:06:e2:0c:df:c1:b4:c1:2f:bd:12:ad:95:75:cd:
                    52:1b:c4:2b:f5:32:f9:21:95:19:39:cd:48:50:f5:
                    a8:f9:f9:8a:76:8f:60:fd:99:a7:7b:d0:4a:0c:25:
                    62:b4:99:42:4a:b3:1b:9c:17:5c:60:5f:a2:e4:e9:
                    b2:cb:32:8f:6f:7c:77:33:b6:6e:24:e4:c7:d4:70:
                    c6:22:b3:2c:41:4c:83:b4:9e:ac:99:9c:7d:9f:85:
                    59:00:ed:e3:b8:ee:b7:96:73:8c:c5:cc:e2:e7:a6:
                    40:b4:1e:d4:1f:60:46:fc:7c:8d:4e:72:e0:33:ce:
                    83:44:be:e1:c3:13:2a:bf:95:69:c3:5d:a5:b8:66:
                    44:2b:94:55:9b:0f:5d:15:9b:30:05:de:df:9f:5f:
                    2e:d3:b5:79:88:22:60:e7:58:8d:d4:de:e6:12:59:
                    24:dc:de:ee:39:f4:b5:be:d2:62:85:b1:ea:e2:4d:
                    af:0a:fe:0f:69:b7:40:87:a7:76:81:72:e8:7f:34:
                    ba:f9:c6:c0:3d:4b:42:29:da:77:08:e2:ff:1e:e2:
                    a3:3a:33:60:ce:54:f7:9e:b9:b0:88:05:9b:bd:19:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:5A:86:DF:EF:31:11:65:0D:DE:C0:6E:1C:F1:90:0E:08:3D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.101.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:97:29:6f:14:f3:51:2e:c3:89:ee:5e:6a:1d:4a:97:92:81:
         12:4b:b9:95:c1:df:a3:26:57:24:e7:84:33:73:fe:5b:19:44:
         df:43:0a:e2:01:5b:33:f1:0e:a0:95:5c:f8:45:fa:d9:a0:b3:
         38:82:c9:f7:f4:50:ba:77:9a:0e:93:04:27:f0:0c:c2:62:78:
         82:db:c7:f9:e4:85:dd:21:5d:c6:11:10:97:67:55:7f:c9:14:
         36:c1:01:e0:f6:e5:fd:41:17:dc:37:f1:35:31:58:9f:2a:3d:
         d1:23:28:03:35:66:3f:9d:9c:ce:c5:c4:da:9f:43:fe:42:6f:
         c7:f3:e6:89:83:d7:e2:9a:67:87:bc:e1:f5:1d:0a:c3:db:54:
         06:04:cb:64:28:63:75:cb:d4:da:cf:47:69:c9:11:cc:09:53:
         ea:84:31:b9:f2:a3:ef:2f:d9:2b:12:bc:c6:f0:d6:9c:30:d7:
         83:ca:c1:07:67:4c:d2:a0:42:c2:89:58:b9:a6:da:03:b6:d1:
         c1:a6:ae:0a:d3:d6:3e:f8:da:0d:3d:60:f4:0a:90:d4:59:2e:
         cf:f8:1a:4a:5c:9e:a2:3b:41:4d:c4:76:c0:46:3f:13:8b:4d:
         3a:c3:0a:2a:31:26:e7:d8:ce:5e:f3:13:09:b8:45:19:3d:d4:
         bc:44:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:11:09 2026 by rpki-client