Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
File:                     3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa (raw, json)
Hash identifier:          BAzquxiRlY1WzbSM+S2YmTLmvvR6ssJ7NHIHZOCY8ak=
Subject key identifier:   B9:67:AE:62:6E:C4:0E:A0:44:FB:FC:89:C7:A0:10:26:DE:D9:B2:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6B0A273EF7D2BFD5006E5880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.70.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:27:3e:f7:d2:bf:d5:00:6e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=fcdd76d7-1564-47f3-93f8-9953df309be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:af:6f:c4:e7:04:39:23:fa:29:27:fc:5f:
                    ba:fd:a5:1b:83:c9:c0:e1:12:f6:35:ef:19:9e:46:
                    ea:51:ae:62:5b:c7:4e:4d:4f:3f:1f:de:0a:39:77:
                    6e:80:bf:22:c0:6a:e2:05:8a:b5:40:8e:ed:22:5d:
                    7a:d7:fa:a4:3b:47:ff:f7:66:57:c6:bd:90:a6:df:
                    f9:e3:9a:4b:fe:36:42:d3:03:3a:40:86:1a:fd:03:
                    2d:1c:77:a2:7c:c1:c0:2d:0e:84:59:1e:d0:02:5c:
                    66:3f:34:7f:d4:60:fc:42:98:eb:79:df:06:dc:87:
                    aa:05:a7:41:7c:35:11:af:02:0c:0e:99:8c:58:3b:
                    3a:cd:88:d5:e1:91:73:66:a2:9c:b2:43:ce:5b:e6:
                    01:8c:47:d1:88:da:cd:b9:d1:1a:10:28:f4:3a:ae:
                    cd:d8:60:e4:f9:ab:66:e6:20:3f:51:49:3e:d1:da:
                    6b:60:12:bf:dd:72:b7:b9:5f:7a:95:7e:75:84:95:
                    9e:b2:0d:fe:33:7e:86:5c:ef:69:d1:99:4f:a5:56:
                    59:36:f7:5f:e8:9e:e0:be:8c:be:9f:0e:cc:ac:d0:
                    5a:ae:95:9b:62:d6:bf:10:fa:ad:f1:f0:12:9f:df:
                    05:9a:18:33:45:27:01:86:b1:45:8c:93:06:8a:9b:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:AE:62:6E:C4:0E:A0:44:FB:FC:89:C7:A0:10:26:DE:D9:B2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:8a:c2:0c:fe:2a:14:98:e2:95:c2:71:8f:7a:a2:3a:eb:
         18:ce:68:77:4d:ec:b8:b5:6f:bd:bc:23:c2:0b:42:f1:8b:5e:
         65:a8:42:b2:e8:23:cd:18:d2:8b:64:cf:30:ce:de:96:9d:65:
         7d:b2:ea:cf:94:44:ca:fc:19:59:c5:3c:89:7b:41:b2:9c:76:
         6e:e0:4e:85:8c:44:75:f9:e6:d5:ed:75:8a:7b:17:cf:d0:8d:
         31:c9:43:04:4c:ca:6c:87:5c:da:4f:57:0a:2e:b4:29:bc:28:
         d0:34:12:9d:ff:9e:6b:03:44:f3:84:e0:3a:08:10:fc:32:f4:
         72:93:7f:1e:07:14:49:44:8b:8a:6a:4d:fa:53:ee:60:fa:d8:
         dc:f8:d0:10:b6:76:c6:da:99:60:ab:9b:4d:37:64:ed:7d:0c:
         96:be:29:17:ee:1d:e9:84:0b:c5:ec:50:3f:a9:9c:fa:91:52:
         1c:96:11:77:fc:ab:f7:18:54:d1:e6:90:12:46:e9:74:b5:95:
         ad:fe:ac:91:a7:f4:f0:ac:b6:30:23:eb:27:8a:54:92:aa:47:
         96:b5:a5:89:79:0d:db:a2:42:a7:25:eb:6e:db:6c:04:62:59:
         a0:d2:00:81:9d:01:a1:00:62:2f:02:61:de:10:d1:5e:83:1a:
         0e:c0:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:30 2026 by rpki-client