Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd2a3e6d-eb46-35e9-a730-878f9eb837e3.roa
File:                     cd2a3e6d-eb46-35e9-a730-878f9eb837e3.roa (raw, json)
Hash identifier:          AofVo9AygCiNPh9bYI4KsFMSON5oT4sZ0TkqJPGdeKU=
Subject key identifier:   2C:00:5F:69:52:03:27:EF:A7:3B:78:09:0B:65:3B:32:99:7F:D0:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F15CD007CA00DB164FF7E6580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd2a3e6d-eb46-35e9-a730-878f9eb837e3.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        104.75.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:00:7c:a0:0d:b1:64:ff:7e:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=ca31e05f-76d7-4509-9a46-88bd7e74c41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:d5:08:dc:7c:77:20:12:c3:36:3f:24:27:
                    00:58:da:ad:f9:7e:05:48:a6:98:b5:5f:fb:68:48:
                    fc:85:d0:25:35:ca:3f:7b:dd:d0:bf:45:3b:2d:ec:
                    a5:30:00:f6:a0:8b:72:ac:e9:0c:cc:48:42:92:c0:
                    9b:8d:57:14:a7:ce:cf:b9:d8:4f:06:dc:f0:b1:ee:
                    0e:f2:86:38:89:5c:49:7b:48:c1:01:04:5a:05:7f:
                    17:8a:86:37:f4:64:98:6a:3d:4c:c9:ff:b2:24:9a:
                    39:11:1b:9e:f1:15:81:eb:2b:54:eb:26:46:3e:b1:
                    84:d4:e9:53:75:8e:68:08:91:ea:03:b4:1f:68:96:
                    fb:9a:4d:cc:6e:dd:d0:49:51:05:9f:27:65:f5:80:
                    e4:e4:77:5f:33:00:b6:2c:a5:4b:04:b5:8b:c6:f1:
                    b0:ee:52:fd:b8:9f:93:e9:33:8d:03:d7:4d:ac:36:
                    33:20:bb:e8:31:93:47:24:e8:43:fd:35:16:67:9e:
                    cc:6b:66:41:7c:9c:40:94:ab:88:9f:63:59:fc:93:
                    f1:4c:a7:e8:d0:22:c8:33:fe:8f:a0:e9:92:52:aa:
                    6d:f6:c9:96:16:31:fc:2b:fd:4d:36:74:b1:68:2e:
                    6b:7b:d5:e2:41:2a:a3:c8:df:af:98:04:f8:dd:9d:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:5F:69:52:03:27:EF:A7:3B:78:09:0B:65:3B:32:99:7F:D0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd2a3e6d-eb46-35e9-a730-878f9eb837e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.75.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:a9:05:43:b7:2c:c5:f3:9b:25:5e:6a:5b:97:6e:1f:81:
         39:3c:9d:eb:40:5c:e7:ed:69:3c:10:66:80:b6:4c:42:70:87:
         e2:c4:76:c4:a4:e9:d9:a1:35:36:3f:c8:5e:b9:01:df:46:30:
         01:8f:f3:33:cd:20:c7:4d:50:9a:ec:6d:39:cc:6d:ee:f4:e4:
         90:e7:95:5f:03:ea:a5:cc:e3:fc:17:41:4a:86:91:f3:58:78:
         3b:35:b8:61:6f:4a:4b:30:ca:63:d1:3e:47:8e:32:4e:74:56:
         96:90:52:4c:23:a3:b7:41:7c:f3:a9:99:62:6b:16:fd:68:26:
         e2:eb:5a:ae:1a:18:12:66:d8:d1:a5:79:0a:ae:d8:c7:8e:00:
         8f:51:9d:e4:6c:ca:71:d5:7d:c0:f7:45:d1:d5:a3:f3:83:b7:
         35:31:aa:3a:0b:f4:50:aa:37:14:f8:49:57:5d:f4:9b:0d:b7:
         94:2b:00:c2:bd:99:8c:43:eb:bd:5f:7e:c6:57:3f:c5:7e:5f:
         93:0b:ea:c2:7b:de:f3:58:c1:d3:dd:f7:39:d9:43:11:40:0f:
         66:3f:51:8d:dc:e2:df:2a:59:6f:a7:c3:c6:36:25:f7:75:b9:
         ff:3d:9c:0d:9e:fb:e7:24:ff:62:63:f8:e3:d4:ee:a1:e9:65:
         0d:1e:ac:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQB8oA2xZP9+ZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk
Y2EzMWUwNWYtNzZkNy00NTA5LTlhNDYtODhiZDdlNzRjNDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLfVCNx8dyASwzY/JCcAWNqt+X4FSKaYtV/7
aEj8hdAlNco/e93Qv0U7LeylMAD2oItyrOkMzEhCksCbjVcUp87PudhPBtzwse4O
8oY4iVxJe0jBAQRaBX8XioY39GSYaj1Myf+yJJo5ERue8RWB6ytU6yZGPrGE1OlT
dY5oCJHqA7QfaJb7mk3Mbt3QSVEFnydl9YDk5HdfMwC2LKVLBLWLxvGw7lL9uJ+T
6TONA9dNrDYzILvoMZNHJOhD/TUWZ57Ma2ZBfJxAlKuIn2NZ/JPxTKfo0CLIM/6P
oOmSUqpt9smWFjH8K/1NNnSxaC5re9XiQSqjyN+vmAT43Z32TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwAX2lSAyfvpzt4CQtlOzKZf9BBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2QyYTNlNmQtZWI0Ni0z
NWU5LWE3MzAtODc4ZjllYjgzN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEupMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKhqQVDtyzF85slXmpbl24fgTk8netAXOftaTwQZoC2TEJwh+LEdsSk
6dmhNTY/yF65Ad9GMAGP8zPNIMdNUJrsbTnMbe705JDnlV8D6qXM4/wXQUqGkfNY
eDs1uGFvSkswymPRPkeOMk50VpaQUkwjo7dBfPOpmWJrFv1oJuLrWq4aGBJm2NGl
eQqu2MeOAI9RneRsynHVfcD3RdHVo/ODtzUxqjoL9FCqNxT4SVdd9JsNt5QrAMK9
mYxD671ffsZXP8V+X5ML6sJ73vNYwdPd9znZQxFAD2Y/UY3c4t8qWW+nw8Y2Jfd1
uf89nA2e++ck/2Jj+OPU7qHpZQ0erD4=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:50 2026 by rpki-client