Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa
File:                     6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa (raw, json)
Hash identifier:          zg6cPG329Hgd8lGtFp4c4XhuIebB0AEDz2GgsA2PvOk=
Subject key identifier:   75:54:57:6E:51:AD:7A:9A:29:80:86:7D:8E:79:70:10:BC:B2:45:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1897BD4F7AE461F0003DE0A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        104.100.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:bd:4f:7a:e4:61:f0:00:3d:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=7961c0ef-66d5-4d50-8f13-4829e5feba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:6a:76:f2:63:d0:93:40:82:73:c1:34:7e:
                    01:b6:c8:e5:5a:6b:d4:ff:7f:35:c0:d8:bd:14:96:
                    28:8a:a9:67:81:b2:83:14:88:22:a8:2a:fb:8d:a4:
                    b7:5c:d0:59:68:54:60:b3:1d:66:36:ae:e3:ee:d1:
                    a7:df:70:0b:6a:97:39:be:11:de:5d:f0:9f:e9:32:
                    1f:46:bb:32:df:21:f6:6e:4a:07:85:4c:a7:ea:b2:
                    46:82:49:14:b9:37:c1:29:7b:6d:17:0c:33:44:d6:
                    0a:54:4b:a2:35:63:b9:55:5b:32:b8:91:6b:50:8a:
                    3e:96:e7:e3:eb:c6:c0:10:c1:48:e0:1a:ac:95:c0:
                    ac:b3:c9:3f:b9:e1:d7:45:10:12:c0:91:66:47:24:
                    d1:ed:32:8b:59:a4:d6:c0:47:9f:7f:0f:0b:c6:b0:
                    18:15:9c:a9:28:ff:54:54:81:1a:31:7b:fa:79:37:
                    c7:40:74:93:9a:c5:4a:fc:af:7f:03:0f:54:68:e2:
                    67:d2:e1:09:b6:fe:d6:d9:62:64:57:42:51:fe:ab:
                    44:e6:29:ab:6d:fa:fd:32:e1:80:65:00:a6:6e:68:
                    ae:b3:ae:82:3b:98:15:57:7f:b8:3c:83:95:70:42:
                    02:a0:50:84:de:5a:c7:2b:98:a8:c9:d2:3f:8b:25:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:54:57:6E:51:AD:7A:9A:29:80:86:7D:8E:79:70:10:BC:B2:45:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.100.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cc:7e:b7:89:e3:6b:21:ea:7e:a0:6d:92:61:3f:95:ea:a3:
         52:b7:b2:d4:19:37:f1:f8:ac:36:eb:5e:dc:52:1c:83:5b:4e:
         b6:c3:c0:d1:bb:f2:8a:9a:32:8a:f6:a3:80:33:e8:be:8b:5e:
         96:e7:46:47:d7:9b:3f:ab:a1:51:af:1a:f6:61:19:27:2c:6b:
         45:eb:ba:8e:8c:db:b4:99:25:3b:14:ff:d4:05:30:c1:c8:76:
         23:cf:89:16:37:cf:3b:9c:73:42:95:06:7e:52:3b:67:96:36:
         79:b9:e9:a9:a5:0b:16:f7:13:41:10:e5:18:cd:f3:7a:72:a4:
         73:e5:73:c1:44:d6:75:46:4f:6f:b3:ec:a6:47:92:d8:a7:a4:
         9f:10:eb:9b:10:9c:dd:15:38:9c:f4:3e:15:fb:d4:05:6d:4a:
         5b:b8:ca:d4:80:f1:82:0f:ee:44:e5:da:3f:9b:1d:d0:50:6d:
         d5:5b:d7:c5:2a:4b:14:fc:8d:7a:f8:ec:ed:35:95:8d:d8:2b:
         6b:9e:15:11:22:87:3b:58:01:a4:d4:29:0b:24:ef:64:88:b1:
         ed:47:7d:55:5e:0e:c0:92:11:83:bf:b7:34:96:e1:6b:6a:60:
         59:18:f4:37:19:31:74:14:6a:04:6d:79:4b:b4:7e:f7:d2:b4:
         c4:86:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:25:55 2026 by rpki-client