Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46623d75-f4cf-30ff-a0f7-3a412f815b3c.roa
File:                     46623d75-f4cf-30ff-a0f7-3a412f815b3c.roa (raw, json)
Hash identifier:          uqoZqOiGIMEAZhOJ7BiGJuIhVAPZroSDfNr4AnbbIjw=
Subject key identifier:   52:AB:CF:C7:8A:64:02:12:F9:3E:CE:8A:26:4F:AE:74:DB:A1:F1:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CB81C92C59D39683B2D948B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46623d75-f4cf-30ff-a0f7-3a412f815b3c.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        104.109.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:92:c5:9d:39:68:3b:2d:94:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=d0092bdb-cd72-4fcf-837f-b3fdbf9d2cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:05:4e:79:b5:32:f3:b1:cc:df:cb:c9:be:
                    3a:de:d5:db:3e:c1:53:65:c6:c8:ed:e2:91:8b:02:
                    9a:db:c9:92:75:94:c3:ec:1a:7b:47:2c:c0:a5:8b:
                    0b:1a:97:bb:07:66:12:3c:a6:48:51:3d:a8:4b:ad:
                    eb:0a:4c:85:37:c0:b6:47:ad:80:24:4e:4d:17:4a:
                    d5:3e:f4:e3:c6:4b:ec:8e:17:1b:29:b6:60:45:24:
                    28:39:a6:06:70:eb:0e:3c:36:8a:b2:8f:6a:a7:11:
                    1f:b2:1c:08:18:e9:66:b0:f6:25:d0:b1:eb:1d:53:
                    65:e7:93:05:cc:b0:bd:cc:61:60:2d:8c:45:2d:be:
                    6c:b2:ed:45:4f:bf:92:af:e0:e1:3a:83:73:97:1b:
                    bc:8d:08:66:bf:65:8d:16:34:1e:4e:6f:66:00:40:
                    ed:c2:91:b2:3a:05:98:24:4d:21:c5:05:1e:2f:db:
                    5d:bc:3b:17:af:67:8b:37:22:c7:77:1f:df:3b:ad:
                    60:f6:9a:53:e3:0a:6f:19:68:0b:0a:5c:f4:ca:d0:
                    67:b6:f4:95:45:6b:74:7c:e4:b2:cb:f2:5a:10:f4:
                    bd:dc:13:bf:54:af:9e:fe:46:d4:3a:24:36:19:f9:
                    9f:06:51:db:4e:f1:85:6c:75:5a:ed:d4:28:27:67:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:CF:C7:8A:64:02:12:F9:3E:CE:8A:26:4F:AE:74:DB:A1:F1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46623d75-f4cf-30ff-a0f7-3a412f815b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.109.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:01:48:7a:0e:14:b0:c2:f9:85:2a:bd:4d:10:fc:3f:48:cc:
         7c:45:ec:ea:9c:55:d8:42:a5:b1:63:58:66:fd:2a:e2:cf:a4:
         d1:d8:7e:ae:a5:6c:a5:c9:f4:80:d2:4c:c5:f7:7c:00:63:c9:
         39:43:a1:db:68:91:d2:67:b0:e9:b8:39:93:90:b2:eb:6b:b9:
         e8:7e:8a:ef:dd:0b:6d:00:0a:11:89:82:b9:82:27:5d:41:3c:
         8f:2c:ec:3a:cc:1c:c8:06:fe:e4:8c:8d:66:23:99:cf:6d:7d:
         d7:45:a8:5b:9a:60:06:59:c8:a0:64:5b:14:8d:cb:e2:50:8a:
         cb:6d:79:2e:cd:29:c4:1c:1a:5f:05:ef:d3:49:ef:4d:dd:21:
         7c:9a:3c:25:49:9b:51:21:8e:48:2a:e0:7c:43:97:13:31:3a:
         cf:1e:6e:b8:41:d5:57:39:8f:da:8a:bf:ac:21:82:fb:e3:0c:
         f0:52:b8:43:4f:10:e2:20:db:46:56:97:df:4d:61:18:6b:c5:
         f9:3a:a5:7c:b3:a9:10:a8:80:a5:20:76:7b:f0:28:07:1e:96:
         78:bf:40:e0:36:86:ab:9d:a5:4e:10:53:d0:4d:ed:b8:74:ba:
         45:35:8b:56:f6:b5:9b:99:82:8c:b7:5f:13:64:05:07:7f:6a:
         19:f1:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:25 2026 by rpki-client