Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dbb7f0e-58b1-3e91-b217-54ff7803640d.roa
File:                     1dbb7f0e-58b1-3e91-b217-54ff7803640d.roa (raw, json)
Hash identifier:          5qVIkn0KizDAjmOofzGDNg6oUjNIQFbl6XxvBzgzytA=
Subject key identifier:   2A:BF:3D:03:C2:3F:BA:18:A5:B4:6C:C6:09:D9:1B:93:6E:46:00:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4F8B628D509348ACB8C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dbb7f0e-58b1-3e91-b217-54ff7803640d.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     35994
IP address blocks:        104.125.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f8:b6:28:d5:09:34:8a:cb:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=78b050f9-00f5-4a83-aa91-0eb9a36686cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:fb:4c:22:48:4b:c5:d9:8a:19:df:c6:c6:
                    bd:96:67:ea:ad:c1:fc:fa:91:4f:58:e3:f6:9e:b4:
                    3a:fd:75:e6:b7:e3:87:66:bc:83:f3:95:ad:3a:78:
                    78:13:4e:fa:72:e7:e4:a9:d9:c9:3f:ff:47:9b:cb:
                    b3:62:53:9e:2f:0b:c4:d0:d6:fd:09:44:3c:85:dd:
                    af:93:5d:b1:0c:3b:4d:3c:0e:70:cf:a5:e1:3b:63:
                    71:68:0a:e4:ad:a8:ce:f9:59:3e:6c:e1:0e:f1:bd:
                    61:93:15:81:03:52:8d:54:6e:01:3a:52:37:f6:0e:
                    75:73:3f:e2:36:de:19:a0:49:81:90:2a:9f:0b:c3:
                    a0:c8:df:20:97:8c:dd:dc:27:63:61:a9:9e:38:7a:
                    c3:a5:e8:20:25:3b:04:f6:5a:4b:6d:ac:4b:0f:29:
                    5a:8a:d5:0a:ba:f0:4c:8c:aa:da:9a:47:e6:cd:bb:
                    51:60:8a:c0:6d:08:8d:fd:3c:ec:52:3a:55:46:33:
                    c9:db:ca:34:a3:88:0b:67:7f:23:5f:4c:4a:21:69:
                    c3:1b:47:83:50:8d:27:ab:30:03:12:f6:df:d1:7b:
                    75:f6:b3:e7:54:a3:bb:e0:ce:1f:e3:25:b4:37:66:
                    bd:6c:3e:0f:69:4f:c6:ff:bf:b9:3d:b1:45:09:f1:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:3D:03:C2:3F:BA:18:A5:B4:6C:C6:09:D9:1B:93:6E:46:00:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dbb7f0e-58b1-3e91-b217-54ff7803640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.125.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:d3:e8:ea:7b:10:3d:86:e1:ba:39:94:45:40:d8:0c:84:
         42:0b:e2:0f:04:d3:57:cc:5d:1d:6b:92:c3:b1:56:22:ed:07:
         03:f9:76:39:1d:e8:dc:2c:57:c1:67:b7:12:0c:25:04:11:1f:
         6d:3c:ba:f2:35:d9:34:a4:31:c4:f4:fc:34:d2:68:d9:d4:54:
         f2:35:4f:1e:aa:8a:d0:51:5e:d9:37:14:2b:91:f8:d0:56:8c:
         a4:db:64:13:90:78:2e:c1:a9:c5:72:fd:f4:15:89:af:b0:7b:
         ca:e7:b0:bf:9a:89:29:49:dd:df:19:ee:b6:b0:1a:70:a1:08:
         12:fe:23:ee:f5:3f:ef:57:10:34:e7:65:0a:d5:f3:01:25:20:
         4b:c7:e5:e9:3e:20:58:62:d8:39:48:19:d1:49:74:05:5a:c8:
         cc:5c:4c:da:81:90:0b:7f:eb:53:c7:9d:91:d1:7c:bf:ba:8e:
         4f:fc:1f:95:ee:c0:c7:70:76:ff:49:18:2f:8d:e4:d4:65:89:
         63:83:96:1c:e2:91:68:e9:81:44:88:b4:12:79:c5:2e:3c:4f:
         80:8e:ae:4a:df:b3:ad:39:37:80:52:45:5c:f2:0a:ca:7d:5a:
         1e:ba:50:1a:ac:f2:9c:41:cb:ba:fc:5e:54:38:c1:e9:4c:78:
         39:cf:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:41 2026 by rpki-client