Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa
File:                     9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa (raw, json)
Hash identifier:          0G/pTCDlX0rjybQTpeJkJ508TFdNfH4hTLHZBo52HqA=
Subject key identifier:   1C:11:9B:24:C2:92:CE:50:F1:D2:70:89:A5:48:37:6E:45:F8:5D:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CB28748AEEE7DE5F2EAEEAD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        104.70.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:48:ae:ee:7d:e5:f2:ea:ee:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=1cb613ea-b955-4f69-8bee-c13657d0f28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:77:59:ef:ae:da:10:e4:5a:77:56:a8:64:
                    ef:5b:df:07:76:12:b7:c6:11:bf:33:0e:a2:95:1d:
                    a5:99:a5:84:5d:4d:83:c2:ad:e1:67:e7:6f:63:1e:
                    67:e8:91:7b:66:d8:5c:2b:34:9f:02:57:4f:f7:a8:
                    22:04:fb:8a:81:64:92:b2:73:ed:6a:ae:83:f0:85:
                    2e:cb:c2:97:e5:ca:37:86:2e:a5:e7:2d:d1:7a:80:
                    14:f2:93:6f:38:30:8e:5c:9b:37:ff:eb:f4:db:37:
                    54:6a:86:d5:3c:6a:aa:6f:e4:a9:e5:e3:1a:0f:ed:
                    18:de:43:c2:27:bf:e9:6c:e6:7c:a4:79:11:c1:52:
                    a8:ac:df:c7:10:d7:a5:58:a2:b8:89:fd:82:99:a1:
                    33:86:31:cd:7d:24:95:e6:f0:49:04:68:37:a5:56:
                    14:86:b8:fb:0a:0a:ff:09:9b:04:00:b2:0d:ef:af:
                    a5:f3:b7:75:05:11:3a:6f:4b:92:69:4d:b4:35:25:
                    33:49:b8:62:d5:64:8c:af:ef:95:29:f5:25:3b:4e:
                    82:40:a5:80:82:91:d1:ef:a2:44:00:75:16:1b:fa:
                    57:cc:aa:26:55:bd:61:2c:0c:88:06:4a:2f:12:ca:
                    55:4e:6e:87:7a:24:25:a4:b1:7d:b3:42:9a:ae:1e:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:11:9B:24:C2:92:CE:50:F1:D2:70:89:A5:48:37:6E:45:F8:5D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2622cb-9341-3268-9c0e-db7be0fc2c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:40:3a:2c:0a:8e:b6:38:8d:2c:c6:38:ac:56:01:a1:32:
         0c:ca:83:70:50:00:51:64:16:4e:57:e5:09:56:a1:73:37:90:
         b3:fa:fa:70:40:70:51:b6:87:9e:f8:c6:fc:90:a8:42:03:f0:
         1c:ab:c0:51:49:bb:e2:cd:5e:9b:b3:ff:6e:35:ca:3f:f9:b7:
         8c:e5:22:2a:43:46:8b:b9:ec:25:e9:7b:e2:c4:1c:a5:51:8f:
         26:2c:a2:68:92:08:a3:cf:cf:cb:ea:a1:df:47:b7:b5:e1:9d:
         72:fe:3b:5e:dc:32:c5:6e:34:2c:6b:a0:7c:fe:07:70:9e:52:
         20:87:98:88:00:c9:4f:ae:11:52:46:f4:2c:60:3e:5c:a4:86:
         0b:be:13:b3:92:12:7e:23:db:9b:91:ca:b2:bf:e5:42:1e:c4:
         58:f9:55:9b:7a:71:dc:ca:fa:19:0d:a7:41:76:d0:98:f1:a7:
         74:0c:a6:13:1a:d8:72:f9:ef:11:ee:40:e1:a4:99:cc:c4:ba:
         6a:ae:94:54:b6:f7:2c:0f:71:9a:7b:2f:3b:33:fe:a9:e8:f5:
         09:48:ef:12:ca:f7:21:14:0b:44:21:a3:10:86:da:e3:db:0c:
         9d:4a:ac:88:f6:6d:24:c1:43:2d:d4:23:93:b2:07:a6:fc:ef:
         b5:60:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:09 2026 by rpki-client