Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa
File:                     557e6083-1ac3-333a-8de6-3598afc9cd07.roa (raw, json)
Hash identifier:          udWuvdvCqm7waGmvt+ud6+LhbDoRM1rb2UjytXamEyQ=
Subject key identifier:   C2:8D:5B:F0:03:62:7A:15:06:80:8E:3A:3C:C9:76:A1:81:CC:FA:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F71EDAE369D30177763398EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     63949
IP address blocks:        172.235.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:ae:36:9d:30:17:77:63:39:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=668c6dde-3974-489b-a941-94bf30febcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:4f:03:3b:fb:2a:fc:bd:8b:de:f4:dd:0c:
                    ba:a8:06:a7:e7:ef:d0:f9:16:ae:2f:da:ca:83:9b:
                    61:71:81:ff:2f:d9:98:72:ca:c9:c9:64:d6:44:01:
                    c3:5d:e8:6c:dd:37:f4:86:d4:14:6d:ff:13:cc:ba:
                    87:5c:97:a7:3e:88:c1:0b:ac:50:38:53:10:a7:0d:
                    36:6b:ab:6d:e2:95:a1:f0:b9:d0:d6:23:f5:5e:0a:
                    ce:29:1f:de:77:c9:9f:13:63:c5:6f:7a:37:d9:8a:
                    df:68:58:d7:3d:99:a8:7f:76:2e:87:15:81:c4:d3:
                    6d:4e:72:1e:27:0c:c3:05:82:52:8f:76:03:7a:68:
                    a0:ab:52:0c:95:61:d4:6c:2d:a1:5d:ef:40:f5:6a:
                    25:0f:78:2f:43:6e:f9:65:f6:9d:13:37:d8:a1:de:
                    e3:a5:7f:28:be:5e:58:a2:67:8c:4c:c4:6a:6c:95:
                    d1:d7:bc:ad:ca:0f:0b:e1:e8:6e:db:d7:2a:36:1b:
                    21:0f:31:fd:f8:01:6c:91:69:78:5f:42:d0:fc:88:
                    9b:ef:e4:5f:51:18:15:20:e6:99:6e:88:12:de:3f:
                    e0:b4:92:81:b6:48:77:2d:75:73:82:7b:0d:1d:1c:
                    20:e3:6a:e5:71:aa:df:42:5a:09:f6:22:35:03:3a:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:5B:F0:03:62:7A:15:06:80:8E:3A:3C:C9:76:A1:81:CC:FA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:87:c4:1e:0d:96:bc:0d:b9:53:4e:f7:77:9f:9b:7c:39:
         60:c6:8c:9e:58:b0:d0:7d:e2:5d:bf:eb:bf:5e:7a:05:f0:89:
         dd:4c:16:93:b8:63:b6:a1:1b:52:61:3c:ec:a5:60:6d:1a:84:
         47:70:d9:8b:07:ce:1e:ab:33:8d:40:f5:83:2c:81:e0:4a:11:
         09:7e:c0:5d:90:a9:dd:83:42:ca:e5:e7:68:86:46:d7:7f:f9:
         b7:b2:af:2f:48:1b:a9:e7:4c:08:03:0c:54:7f:bf:de:93:c4:
         ba:47:71:48:f3:d3:94:a3:de:2c:34:a1:2e:f6:da:71:b5:c1:
         1f:8c:13:71:9b:38:a5:66:a8:ff:a9:37:c7:68:c1:21:19:02:
         cd:24:a0:2d:2e:60:b5:b0:8b:82:0b:f5:03:69:c1:8b:1a:47:
         04:55:bb:7c:bb:88:99:0d:2b:7a:1f:59:07:08:91:b1:d0:0a:
         22:a7:f0:22:18:bc:03:0b:59:64:ae:e8:49:0a:5a:27:1a:82:
         31:4a:1c:ea:2c:3f:e3:aa:c8:9d:f1:ba:f3:e0:a2:fc:eb:ea:
         d6:71:a7:f6:12:1b:3f:e2:f2:7f:dd:61:4b:b0:98:c3:a0:d6:
         7f:b0:1e:63:c4:6c:c6:9c:7e:f5:56:1c:61:bf:95:12:ca:c4:
         c8:51:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:45:25 2026 by rpki-client