Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
File:                     339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa (raw, json)
Hash identifier:          hUsNHJYu+vxkN1uFq7Q/z7pf9C5DMbBP767tNWBZCN8=
Subject key identifier:   E5:86:03:12:F7:EA:4D:90:4A:17:1E:62:3E:02:29:4D:18:93:7D:2B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D6AAA8889EAB3DF0415B7DDA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        104.250.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:88:89:ea:b3:df:04:15:b7:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=9fba65c1-91f0-462d-a181-52069910c7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:67:2b:a8:7b:8b:8e:1e:fd:16:7d:06:80:
                    9e:2a:05:39:c8:63:8d:aa:5f:1e:6f:0f:0d:2b:cd:
                    79:d7:20:d2:7e:56:e9:d9:a4:72:50:49:d7:58:78:
                    54:57:0e:1c:12:5e:a1:c5:10:53:26:e5:51:65:2f:
                    c5:d9:97:ee:9d:79:0b:6f:72:65:6f:ce:4f:3e:e5:
                    1e:6c:6f:1f:ac:50:3a:40:dc:ba:87:6a:2e:3d:62:
                    a1:28:f3:95:c3:aa:5e:67:51:8e:5c:92:29:f8:49:
                    08:9e:72:9f:a1:0a:ea:2e:f3:9e:da:4a:32:12:8b:
                    24:b6:97:ac:7a:e3:3a:34:1e:05:c8:44:c0:3d:02:
                    cd:d4:9e:e0:9c:aa:2d:be:43:07:b9:f3:d2:83:ed:
                    39:5a:c0:ab:0e:42:97:93:85:fb:42:fc:4b:c8:2c:
                    a3:7d:1c:8b:27:dc:b4:d4:1b:84:47:bf:53:2a:26:
                    19:0f:67:f1:d1:b4:bd:63:60:43:e5:81:51:cb:fe:
                    3b:3d:96:e8:ff:92:58:0a:11:a6:01:c2:cb:24:16:
                    30:ba:db:c1:10:28:66:f7:57:66:77:d5:6d:bd:ba:
                    fd:76:ed:6c:99:45:87:65:21:e1:99:74:0f:31:44:
                    e8:e5:d7:f5:67:60:99:52:51:6e:9a:d7:38:c6:31:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:03:12:F7:EA:4D:90:4A:17:1E:62:3E:02:29:4D:18:93:7D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:7a:2e:be:06:3a:ec:fd:b3:93:3f:b3:ce:d6:8d:66:35:
         ee:19:af:6b:cb:3f:ab:f7:bc:4f:c4:8c:75:87:09:0a:06:ff:
         45:b6:ef:21:82:73:bf:ec:37:7a:95:6b:3f:7b:38:15:68:93:
         68:1a:7b:30:5c:4d:03:8e:c1:00:dd:4c:01:ef:1e:42:bb:7f:
         59:e5:30:b8:3e:10:b2:85:2f:c5:c2:e8:34:c1:e3:53:b2:dd:
         57:5e:6e:66:41:4c:0a:ce:45:2c:e6:db:94:00:56:0b:ab:ed:
         6c:c9:bc:8a:7a:cc:58:69:ee:68:d2:d0:0d:cd:e3:41:22:86:
         de:9f:a1:0d:7b:32:6e:37:e6:0f:5d:44:32:9f:a8:a0:81:5e:
         2c:da:97:b1:61:12:65:26:5c:c2:0c:9a:fd:46:c0:d1:77:58:
         6a:51:5a:92:60:22:da:44:b9:09:06:15:ac:d4:3e:69:35:a7:
         5a:7f:f0:d5:6e:c8:4d:e7:07:3c:07:58:32:1c:3d:12:94:90:
         a8:41:73:14:4a:5f:b0:c7:c1:5a:6e:f9:45:be:8f:34:56:e0:
         5a:94:2b:cf:ad:65:7f:f4:cb:fa:a5:b5:21:75:4e:5f:c1:fc:
         94:73:b6:68:68:e1:39:ca:75:dd:a0:59:d4:d6:bf:bf:6c:22:
         51:fe:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:27 2026 by rpki-client