Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa
File:                     ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa (raw, json)
Hash identifier:          U9vn4Hz/thoiNAz3qjRY9MbEQsMf8K2mqSDdC22bttk=
Subject key identifier:   FD:90:4C:DA:35:02:E2:6D:2F:EA:B9:F3:9D:1D:CC:3E:5F:B1:A7:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8F3DB69F4726F3251D4D9A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     24319
IP address blocks:        104.124.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:b6:9f:47:26:f3:25:1d:4d:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=b1e6929c-f82c-4695-916f-c65c344cb916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:2d:b8:6c:53:c2:0d:d0:e1:33:e9:14:9c:
                    a1:6f:67:ac:15:f3:e9:a1:e7:51:6d:64:1c:f4:96:
                    75:ac:ae:8d:bc:44:ff:fa:6f:d3:fe:f9:02:45:d1:
                    b3:9a:85:e0:bb:a4:f6:c8:ad:7b:ff:5f:b9:30:d1:
                    d7:30:44:8d:c0:4e:a7:76:1e:b1:8a:c7:17:aa:f8:
                    72:58:be:20:05:ff:e2:aa:b2:96:d1:99:fb:7a:98:
                    d5:2d:fb:da:24:2e:dd:a4:d5:8a:56:ce:71:1c:c2:
                    10:66:3f:5c:10:b4:f2:29:b6:db:5c:c2:bb:7c:66:
                    2d:f6:42:b5:f9:22:f2:4a:45:6e:d4:fe:c9:18:e7:
                    76:58:af:90:30:d0:b0:5b:fb:1b:65:c6:e1:49:72:
                    72:5a:26:07:c2:33:f4:52:e8:83:07:56:90:35:ac:
                    66:13:ac:6a:ba:3b:d6:b7:3e:1e:2d:93:1c:27:f1:
                    d1:fd:9c:c2:b1:98:9a:98:81:27:85:16:66:a6:dc:
                    b3:59:e0:62:06:1b:38:f2:04:16:83:2e:b3:32:eb:
                    e5:c5:85:94:40:37:15:53:02:f8:24:30:ff:c4:0c:
                    41:78:8d:0f:a3:60:10:15:a9:b2:7b:f5:e3:e2:65:
                    24:72:b5:b5:40:a4:ab:e4:2c:ef:c1:ca:05:b5:58:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:90:4C:DA:35:02:E2:6D:2F:EA:B9:F3:9D:1D:CC:3E:5F:B1:A7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.124.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:20:1b:33:f6:34:91:67:2b:51:06:42:6a:a4:95:d1:3c:
         f4:4f:69:f1:f4:b3:7c:87:24:7f:4e:06:67:3b:1a:f8:55:89:
         82:29:fe:7a:bc:3a:66:ca:17:29:6e:17:54:13:79:61:3d:d5:
         b9:9f:2a:26:0a:70:95:47:61:98:af:da:b3:29:6b:4c:3a:92:
         f2:fc:cd:02:1f:76:a4:99:6e:b9:4a:5a:82:22:be:94:71:36:
         20:23:4f:ea:9b:7e:b5:52:cf:6e:ba:d9:6e:15:36:12:29:1a:
         9b:d5:8c:a6:33:f9:59:5f:0e:f4:18:b8:b3:b4:47:8e:ac:1e:
         78:11:2b:2c:c2:6b:d2:5e:ef:0b:ba:13:4a:9a:32:27:d9:09:
         97:5f:3f:f4:f7:b3:2f:f0:b1:33:ee:00:17:f7:5c:ed:54:e9:
         8a:07:dc:9d:98:44:4a:a1:84:fd:8d:6f:32:c2:e2:f6:35:db:
         3e:09:5b:cf:e5:2a:01:2c:07:91:88:3b:75:bb:c1:da:f4:b4:
         cd:bf:45:4b:b0:af:e9:53:4f:04:91:f7:99:de:05:c6:b7:34:
         a5:a2:71:6a:02:4a:cb:40:d3:96:ff:50:65:9d:ce:c2:04:14:
         62:5b:f3:68:64:78:2a:3e:20:22:ad:b0:2e:e3:f8:5c:4a:0c:
         b6:09:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:27:45 2026 by rpki-client