Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a16944e-4cb7-3f3c-9949-ec8291c111ee.roa
File:                     5a16944e-4cb7-3f3c-9949-ec8291c111ee.roa (raw, json)
Hash identifier:          UZ8kzZYMA8TfeibHmiBXo4CSI2VHmRz1nZdyheww4ow=
Subject key identifier:   12:54:CD:99:3E:BA:97:35:D0:18:5F:42:C1:9A:3F:E0:51:F0:45:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB01EF6E8377F378F8F64EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a16944e-4cb7-3f3c-9949-ec8291c111ee.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     63949
IP address blocks:        104.105.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:ef:6e:83:77:f3:78:f8:f6:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=31b1e531-7a2b-4d27-9704-4d1ef1c72396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:37:bb:b0:32:19:10:cb:e5:e1:6c:2b:91:
                    90:92:c1:ae:10:5b:7a:23:d3:c4:74:86:33:a8:d7:
                    23:62:c4:30:41:22:01:ba:d6:4e:ef:73:9f:78:be:
                    f5:eb:2b:39:35:61:9d:c5:e4:10:61:a5:f0:82:15:
                    bb:a0:db:92:08:51:d1:05:8a:79:2a:92:a5:7d:0f:
                    9f:ab:63:a2:f8:4e:f0:5e:4e:c1:59:4c:b8:3c:60:
                    71:a6:56:e0:d1:f3:64:4f:05:2e:ee:dd:87:4f:c6:
                    ca:6f:d8:70:d2:b7:85:f2:5e:11:c3:7e:c1:65:ef:
                    2b:3b:b4:de:28:15:21:b0:e3:c5:86:70:d2:26:d9:
                    25:2f:8f:66:eb:ff:fa:92:02:26:cb:50:c3:ea:2e:
                    a6:0b:f2:d1:13:63:98:20:35:d7:3a:99:96:c2:38:
                    75:97:0e:5b:36:91:db:bc:36:92:04:3a:58:5c:68:
                    85:9a:85:b5:89:1c:2d:02:dd:8f:08:56:5a:b9:1b:
                    15:11:28:b6:4b:e4:3d:39:f6:8e:31:b3:1d:d8:59:
                    85:a5:c1:8d:2d:d4:63:fc:4c:33:56:a2:2a:8d:b5:
                    0e:02:a1:96:ea:96:9d:5c:e9:87:b6:cd:8f:29:4e:
                    97:99:7c:e0:d1:4a:a4:8c:49:60:ac:9b:80:d4:45:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:CD:99:3E:BA:97:35:D0:18:5F:42:C1:9A:3F:E0:51:F0:45:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a16944e-4cb7-3f3c-9949-ec8291c111ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.105.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:c6:46:12:ba:80:5c:85:19:00:9d:e0:57:50:f1:e5:43:
         b0:e4:01:4c:a0:70:f9:10:b2:43:b9:d7:ee:16:2f:9b:7c:85:
         6c:26:a0:99:0c:9d:3c:a1:3a:52:51:3a:53:03:c6:81:b5:05:
         3b:d3:51:24:08:12:c1:e4:59:be:88:4c:60:15:6a:74:8e:90:
         a5:32:3f:ce:f1:a0:0c:5f:61:56:1d:c3:74:1a:73:04:71:69:
         2a:af:aa:8c:71:df:9d:55:e2:12:fe:b4:ea:5f:75:a1:ca:ba:
         a0:e3:e6:28:1c:fa:6f:32:e5:97:94:5a:c2:05:fb:84:0e:87:
         3e:ad:4f:72:64:12:69:d8:ee:a1:f7:a2:d0:33:01:9d:96:65:
         31:69:bb:92:65:d4:fc:d1:c2:11:5b:ae:4e:60:33:a4:60:0d:
         80:b2:01:0a:a6:bf:66:e0:80:31:70:04:06:db:8d:5a:1b:b7:
         30:1a:2a:21:fd:1e:48:8f:36:87:c7:3d:eb:73:78:3f:ab:a1:
         62:26:13:eb:44:ea:f8:5b:95:f2:83:72:30:a4:c8:1b:ac:11:
         80:1d:f6:b1:ee:19:a4:31:4d:93:1f:85:23:3a:e4:a0:1d:a4:
         04:39:57:54:45:c7:de:15:33:49:7a:c4:41:f3:0f:64:17:83:
         c4:be:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:07 2026 by rpki-client