Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
File:                     d521682a-df3e-34d3-ab3e-27bd263e2578.roa (raw, json)
Hash identifier:          4KGHC6MSPVxRENZI1ykQ/1kdK647lQgoC6jnSWLUMos=
Subject key identifier:   EE:B5:28:E1:C0:6E:A5:EC:8F:37:12:E6:83:CB:FA:4E:D9:85:47:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64EA5C1897FF6C2882F980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     35994
IP address blocks:        104.121.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ea:5c:18:97:ff:6c:28:82:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=20be7473-6448-458c-8218-b2360cfa0bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:c5:95:c5:46:42:d3:e6:47:6d:cf:aa:52:
                    85:d1:c4:d7:06:b5:61:61:ec:92:b9:6b:38:bf:00:
                    07:57:28:1a:4a:be:54:6c:e1:bd:11:f8:aa:3a:e2:
                    7f:e6:68:d5:a7:0a:b3:95:8f:56:44:0a:d8:67:9e:
                    f3:cb:48:70:43:52:94:be:03:ec:b6:63:5b:bb:c2:
                    b6:f4:08:ff:84:0b:62:fe:27:c3:3b:eb:4f:f6:25:
                    47:26:e4:1f:c0:f3:02:c7:cf:43:1e:9d:f2:5a:9e:
                    1a:0a:0c:c3:49:52:5f:58:93:71:64:fc:bd:cb:db:
                    a6:5b:3c:21:0e:80:e0:f3:b5:3c:bc:e1:d0:0f:99:
                    d1:e6:c7:c7:1b:57:90:08:34:ff:76:14:fb:d0:2e:
                    1a:86:1f:a5:d6:76:4c:6d:76:8a:9b:be:b1:48:61:
                    66:66:e9:26:6a:44:06:8e:e1:d4:e4:fb:4e:68:55:
                    f6:88:71:b1:5b:81:0d:fa:35:d5:12:4d:56:db:7d:
                    69:6e:66:84:4c:bb:4e:fb:c0:94:51:55:d0:5f:a4:
                    e9:17:cf:fe:c8:02:1e:14:34:81:45:67:ed:c1:a4:
                    b4:f8:af:44:bb:68:2a:4a:74:78:59:e5:a1:bd:bb:
                    c4:a2:09:2f:d2:10:11:3f:05:17:cb:7a:6d:be:1c:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:28:E1:C0:6E:A5:EC:8F:37:12:E6:83:CB:FA:4E:D9:85:47:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.121.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:fc:6a:37:68:2c:ef:09:40:f5:45:66:14:51:6f:42:db:
         e0:4c:31:d1:75:5f:5b:de:98:c2:5d:94:ec:19:69:5f:1c:16:
         5d:29:fb:93:82:41:e1:70:19:c0:95:f9:de:a0:1c:46:34:69:
         d8:99:68:a0:e3:36:45:ea:9b:9d:fc:d7:83:1e:84:a5:fa:b9:
         3a:c7:66:ec:09:47:ab:1e:de:64:34:b8:a1:73:d0:25:4e:aa:
         ea:b0:1d:6d:86:95:ac:eb:2f:21:f6:1b:79:8c:bf:04:64:d4:
         4c:19:9a:52:0d:17:f5:c2:4a:d6:7f:7c:4d:68:7d:d3:21:ee:
         2c:eb:1f:53:e3:c2:95:05:cc:60:1c:4a:06:78:44:da:e3:6d:
         a0:63:7d:12:01:d9:ac:a6:47:ab:f1:85:e6:fc:56:04:e6:21:
         de:f9:ed:3c:02:b7:61:c5:a5:f3:65:82:80:e9:a4:88:c0:55:
         ff:ba:5b:f6:be:95:d9:87:97:b9:d5:4e:21:94:f9:9d:36:12:
         dc:94:04:79:2e:fc:bc:8b:bb:65:63:ff:cb:47:f3:5e:4b:55:
         4c:ae:19:51:e2:ed:1c:3d:36:a4:37:c2:ea:58:1c:9b:3c:35:
         3c:a5:6d:4f:27:33:a0:2e:33:59:78:ef:aa:a4:52:5e:2a:d0:
         05:31:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:01 2026 by rpki-client