Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa
File:                     4493a76f-b62c-3b5d-8538-1b27eee707ee.roa (raw, json)
Hash identifier:          sauhrvPSRt3aVVSBaproZtu9Lzz3u4lHRBewfilji4s=
Subject key identifier:   6A:B1:77:46:01:7D:52:3A:FE:EE:41:C7:DD:1E:C2:79:F2:E1:72:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1897B662D39D24574F1C9E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     35994
IP address blocks:        104.101.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:b6:62:d3:9d:24:57:4f:1c:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=9a9e9102-f034-4d6a-a6eb-df91a67f87d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:bd:2d:74:d5:cf:c5:39:c0:af:0c:f2:c5:
                    66:7e:4a:60:a8:7e:8b:23:80:08:c8:89:73:75:f2:
                    3c:00:fe:3c:bc:4c:dc:6c:7d:e1:c5:ad:e3:1c:32:
                    ca:3a:64:54:50:68:18:6e:9b:8e:42:ad:b6:43:b4:
                    34:86:d4:5d:4e:59:a2:55:82:42:9e:c7:db:0f:90:
                    a5:11:40:ab:32:a0:63:0d:23:80:29:df:98:c7:c7:
                    2c:d9:ac:99:38:c8:7f:27:b0:a5:da:db:a2:c0:3d:
                    9f:49:b8:09:22:8c:8c:ed:9d:df:72:3e:5f:f7:12:
                    36:64:cc:cc:11:0f:74:d5:d1:da:8c:0a:b3:5e:7a:
                    59:f9:55:3f:50:80:94:de:8d:b7:2a:44:33:94:c9:
                    8e:e9:61:3d:f4:dd:e4:d7:33:8d:f3:65:c8:5b:b2:
                    d4:f5:98:6d:dc:16:31:b5:74:9b:2f:aa:a0:c6:48:
                    3f:f6:62:61:45:04:d8:fe:09:4e:3b:7d:a5:d7:6e:
                    ae:38:8a:5a:6c:4b:b4:38:06:7b:ad:df:2e:24:eb:
                    1d:e0:9e:e2:09:cc:ae:07:ab:cc:d1:b6:bc:6a:12:
                    8b:3f:39:2b:4e:18:ae:2f:1d:a9:a7:8d:96:d3:fe:
                    f4:f9:65:4b:d8:d3:db:3b:36:fd:47:e7:58:b6:03:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:77:46:01:7D:52:3A:FE:EE:41:C7:DD:1E:C2:79:F2:E1:72:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.101.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:df:e9:6d:a1:70:23:a3:05:fc:85:62:82:59:1c:18:44:b7:
         fa:10:00:0d:c4:ef:a1:a8:c9:96:f8:5d:81:b1:38:d5:bd:e0:
         4e:64:52:f6:af:4c:12:3e:a5:0d:ba:3a:cf:60:a6:77:75:f9:
         99:49:cf:a9:ae:33:61:42:4a:de:f0:bf:98:d2:c8:94:1e:c4:
         87:a6:9b:a4:ed:06:09:3f:95:3f:b6:4c:97:c8:dd:74:d2:d2:
         26:e2:a4:a7:38:69:3c:c0:4f:9b:1d:14:e9:cd:4d:b0:70:71:
         15:54:48:f6:61:d8:9b:3d:68:e8:cb:d6:d7:20:58:bf:a3:f2:
         e0:eb:ae:df:dc:c2:c8:d4:d0:89:e9:a6:49:1f:3a:b3:e4:06:
         42:5f:0d:3e:ae:7f:55:48:c7:0c:dc:dd:d3:1f:7a:25:d2:0c:
         3e:cd:f7:17:21:b8:49:2b:e0:85:5d:f5:ee:1c:eb:b3:45:ee:
         1e:ff:88:d1:9c:42:5d:76:3d:47:8b:be:53:6a:bf:94:4f:97:
         83:8d:22:62:38:d3:77:94:bd:8b:58:4d:aa:50:16:25:22:5e:
         56:1e:ef:c2:3a:c2:7a:c7:27:98:b2:54:32:70:f2:c1:3f:f6:
         33:92:56:1b:ce:82:25:76:7c:1d:7f:e0:fc:19:2e:ad:9d:ff:
         ac:00:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:56:18 2026 by rpki-client