Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930414a1-2b1c-351b-94f8-4a0a354efc90.roa
File:                     930414a1-2b1c-351b-94f8-4a0a354efc90.roa (raw, json)
Hash identifier:          o8qRJH3jSQmskLQ0+bJ61hvBtp96uKmZYqKy+bBHxvw=
Subject key identifier:   BA:77:E8:C3:2A:18:D5:1F:1B:8D:03:6A:F8:48:90:F7:C3:7D:11:0D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1CC7AF667C446AA27A628FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930414a1-2b1c-351b-94f8-4a0a354efc90.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     16625
IP address blocks:        104.127.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:af:66:7c:44:6a:a2:7a:62:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=1a8df9fa-9c0b-49fc-aee6-de394f4aa4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:c8:75:f9:4b:d7:24:a8:a9:a8:ea:a4:69:
                    b4:3b:01:b5:5c:4f:e4:7e:8e:0b:82:63:cb:da:06:
                    f2:02:8c:7d:67:14:80:b3:bc:66:90:c3:cf:9d:83:
                    f9:85:e6:04:47:9c:aa:ed:d4:fe:45:53:5b:18:d3:
                    e9:3d:45:5a:5e:bc:8d:26:68:30:db:29:7a:b7:eb:
                    43:ff:22:b6:cc:01:07:b0:34:66:45:04:1d:f3:f9:
                    9d:96:60:9b:82:d1:eb:a7:59:1b:40:d8:6a:0d:e9:
                    29:ad:a3:37:51:3a:ca:64:3e:66:40:89:c8:50:16:
                    a4:66:7c:60:3c:63:a3:3a:2d:8a:d2:ea:6d:cb:88:
                    ed:a2:32:2a:aa:d4:c4:e1:7b:49:83:21:80:7e:e1:
                    3c:f8:0a:2c:07:4f:d5:9d:20:17:34:f2:bd:cb:9f:
                    43:d8:fd:8f:3d:f6:f2:38:f8:9a:b2:45:6a:79:3d:
                    18:19:4f:2a:3e:4f:fb:44:49:35:e0:62:e6:15:ab:
                    b1:df:d4:78:ce:ab:1c:dc:d6:f9:28:b6:0f:60:f5:
                    92:41:89:9c:77:6b:96:21:fd:a1:5f:b8:38:63:f8:
                    15:c4:4a:1a:20:ae:58:92:3a:d3:12:60:ad:a4:28:
                    3f:2c:5f:cf:03:14:84:4e:4d:78:36:0c:07:8c:1b:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:E8:C3:2A:18:D5:1F:1B:8D:03:6A:F8:48:90:F7:C3:7D:11:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930414a1-2b1c-351b-94f8-4a0a354efc90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.127.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:c3:b3:02:9b:bc:52:df:1f:e9:6e:6a:84:01:4c:80:21:
         b6:da:e7:50:76:ea:b1:22:52:0c:c1:a6:68:2d:2b:17:e4:3f:
         fc:ed:a9:74:ad:1c:8d:e8:c0:48:06:85:11:1c:24:e3:be:99:
         33:7d:b9:8e:8a:d5:b9:21:bb:c9:30:af:0c:a6:09:86:d9:ed:
         94:92:03:7a:c6:a9:4c:34:6d:87:9e:31:a3:4c:3a:3c:36:70:
         bb:da:46:7d:72:04:f9:91:df:33:66:c3:63:2c:bf:89:9d:24:
         14:ca:87:e8:72:a7:c1:91:f7:e2:06:a3:ad:59:eb:c9:18:3f:
         d5:52:e0:86:90:d0:3c:7b:a5:9c:98:a7:84:d0:44:9f:d0:cc:
         f4:81:05:22:a9:c9:b1:af:80:f4:f7:12:db:33:32:a4:dc:72:
         cd:84:76:5b:4c:4f:cc:12:3e:44:dc:77:0e:e3:a0:e9:43:45:
         31:da:7a:f7:45:e5:32:b7:7c:a9:47:38:3a:92:63:fe:8d:b7:
         f4:07:84:5d:c9:8c:20:5e:d5:70:d1:c7:11:ca:6e:06:70:98:
         c9:21:aa:b2:f4:df:d3:4d:e6:a8:90:f0:6e:78:2a:39:01:1d:
         b2:38:91:6a:de:2e:6a:bb:6b:b2:89:84:9a:58:90:ab:bf:49:
         32:03:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:43:59 2026 by rpki-client