Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa
File:                     49d29814-d109-355b-9890-c16ddcce635e.roa (raw, json)
Hash identifier:          B5Whbk8DYK79fBJtrqzpy32lnzyGePCOKz7BjfmO6RU=
Subject key identifier:   D3:78:4B:4F:A6:9A:20:68:1B:E8:CF:2B:CB:68:88:DF:02:81:5B:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1897BCB6100FD304809CA560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        104.98.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:bc:b6:10:0f:d3:04:80:9c:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=2c9d62af-103d-4134-a1cd-dee21741dc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:d8:2c:34:8a:24:43:a7:4f:8d:6f:53:e3:
                    2a:db:56:56:f8:69:52:9e:81:23:80:42:d4:cd:33:
                    17:1f:99:97:36:8f:09:6e:38:06:e4:7c:a8:e6:ea:
                    25:96:58:35:91:ae:90:f8:73:59:92:e4:1f:da:68:
                    f5:9f:28:dc:85:fa:b3:be:31:f6:fa:ce:37:e4:83:
                    d3:b3:56:c7:09:8b:9d:14:f9:20:c1:2d:b0:7a:03:
                    73:2d:1e:b2:82:81:0f:b6:78:de:35:1b:a0:52:8e:
                    a4:64:d1:d7:70:04:78:fe:85:22:1d:a7:7c:74:ca:
                    a8:d5:ec:4f:6a:9b:a4:de:d0:93:2e:df:8e:a3:14:
                    25:09:2a:eb:67:b4:53:13:93:4f:dd:34:35:e4:9e:
                    ae:67:7d:c0:e5:43:bf:ae:d0:e1:82:d3:62:ad:c9:
                    54:a0:3d:2d:9d:47:81:d2:13:06:bd:b6:bd:36:b1:
                    db:62:3a:f9:3c:6f:87:44:5b:6e:f2:7c:b4:5d:74:
                    96:e6:69:76:a8:60:a7:55:ea:b0:92:c1:28:6c:b8:
                    4f:05:17:c3:44:6c:ca:da:6a:4b:2f:9c:33:2c:72:
                    35:50:d4:00:a1:18:9a:8f:22:3c:5c:71:d1:a4:d9:
                    db:08:63:da:79:d2:1a:51:ea:18:3d:1a:6c:94:f9:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:78:4B:4F:A6:9A:20:68:1B:E8:CF:2B:CB:68:88:DF:02:81:5B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.98.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:5a:fa:04:fe:12:50:f1:12:29:e8:04:09:e5:ed:7d:f2:
         e7:a5:63:37:66:a7:92:1e:3d:7f:af:49:65:4f:01:41:4e:21:
         a1:cf:7b:25:b7:62:01:60:ee:5f:dd:32:e3:c0:ae:ef:26:d4:
         36:2e:91:c1:95:e4:0d:60:db:73:a1:7c:ba:a7:ba:8b:f6:2a:
         f8:c9:0b:53:c1:53:b0:0a:13:86:2d:4f:8f:f5:eb:51:2c:9c:
         fc:2f:65:28:7b:ef:a2:62:c7:ec:20:62:98:8c:f8:fe:dc:07:
         f1:39:5c:00:95:c3:5f:e0:16:3a:1e:1c:e9:3f:e2:d3:65:a6:
         5a:2e:e6:a8:e8:21:68:8e:30:21:f3:7b:dc:42:f2:42:e8:f5:
         54:7e:20:51:54:34:e7:2a:26:06:e1:ef:dc:68:5d:98:ef:66:
         3b:e9:51:0b:02:0b:4d:7a:45:59:c9:99:3e:ee:97:c1:ae:7b:
         ba:fd:0c:88:81:a7:a6:d4:d0:d6:08:cf:09:e4:bd:25:6d:09:
         de:5d:0a:03:57:f6:b4:2a:d4:2e:3c:9f:08:60:90:79:b6:78:
         00:d9:13:8f:a1:cd:bc:d4:82:4a:24:7a:e9:a5:94:82:d8:e7:
         cf:ff:28:24:3e:03:14:81:f4:c4:e1:cf:b4:f4:d0:d1:40:9e:
         a5:71:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:42:50 2026 by rpki-client