Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53d68e5-124b-3d15-8de8-e60ba3a5db50.roa
File:                     e53d68e5-124b-3d15-8de8-e60ba3a5db50.roa (raw, json)
Hash identifier:          1Gm4vz8384YCzgRfNtzMcw/WYqsTpHdKJT4OWPObYQE=
Subject key identifier:   69:74:53:99:85:24:3F:A0:19:F2:3F:6A:95:2C:85:C8:0F:59:93:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F15CD01534DFCC8B159175380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53d68e5-124b-3d15-8de8-e60ba3a5db50.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        104.77.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:01:53:4d:fc:c8:b1:59:17:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=58170b5b-5bba-482b-9da8-e1b1ecf458a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:12:f3:fc:f7:47:b7:fc:c5:4b:7d:00:07:
                    3b:0d:eb:87:88:dd:52:8a:8c:bb:90:df:51:86:97:
                    ce:a3:fe:97:2a:ee:e2:08:57:70:49:c0:5f:99:43:
                    eb:6b:fb:59:de:94:e9:c4:f5:6c:78:0a:aa:e7:4f:
                    73:c0:ab:21:91:27:2e:6f:1c:45:1b:7b:a9:b7:a7:
                    2e:33:48:31:05:05:fe:4f:a7:9f:47:ab:6b:c0:eb:
                    5c:20:52:7e:13:ed:dc:c1:a8:9a:d2:e5:3e:be:53:
                    a0:00:9f:39:25:70:f9:95:ea:96:0a:d7:39:f4:c6:
                    aa:e9:c4:ac:70:7d:c3:15:5b:38:eb:bf:e7:1a:7a:
                    87:0f:aa:6b:af:a3:2f:e0:b1:c9:e4:82:61:cf:3f:
                    fb:6c:36:66:b6:ee:4a:6c:03:4f:98:4b:05:83:24:
                    9f:c0:87:1b:cb:27:4a:3f:1e:05:a9:da:11:e6:e9:
                    13:77:9c:42:b8:7b:1e:5d:0e:b5:05:72:10:3f:ba:
                    c6:5c:90:63:f2:b0:57:3f:fd:5c:84:29:4d:b3:11:
                    34:ac:a4:b9:d6:9b:9b:79:c5:f9:95:f6:97:24:81:
                    8d:f4:4b:34:9d:93:7f:17:d0:28:5e:73:41:34:ea:
                    a0:99:e0:2a:d0:f2:71:d8:8e:63:a1:a9:05:bc:a2:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:53:99:85:24:3F:A0:19:F2:3F:6A:95:2C:85:C8:0F:59:93:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53d68e5-124b-3d15-8de8-e60ba3a5db50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:81:1c:30:aa:b4:27:1a:3b:b8:6c:44:be:a0:89:17:9f:cc:
         42:d6:8f:a5:69:f7:cf:da:b5:92:db:5f:f2:03:17:c4:29:66:
         5c:03:ae:7b:d7:7d:26:b7:bd:46:20:0f:82:9b:30:1f:d4:3c:
         16:ad:1b:71:ef:47:dc:d4:b6:eb:2d:ba:9e:3e:4a:31:02:18:
         32:08:9c:0d:12:59:40:8c:f3:62:ae:43:f7:6a:6b:4a:0c:f0:
         ea:16:7b:ce:3a:ac:cb:4d:e0:93:cb:58:a0:64:c9:60:e9:3a:
         0a:3f:b1:53:e9:b4:94:bb:ea:fe:40:5d:e5:76:7e:87:22:56:
         b4:6f:b3:6e:fd:35:ae:21:d5:de:73:50:1c:d4:04:35:69:f1:
         ba:ce:d7:5a:70:41:9a:12:b4:65:2b:00:10:80:52:c1:bf:5f:
         f1:f4:86:b6:7f:1f:fa:90:28:5d:9e:bf:7b:d9:26:d7:93:ac:
         9e:87:32:0f:a8:b6:3e:e3:bf:4b:9c:9a:1d:b5:49:8b:15:3e:
         89:df:04:cb:90:84:5d:c2:38:da:72:82:44:06:85:f0:83:7f:
         3a:48:ad:09:da:cf:57:c1:c9:e0:3d:78:ec:29:5c:1c:5e:f0:
         8a:da:e7:3a:a0:1a:95:20:ae:e8:22:53:d4:70:21:eb:92:4c:
         11:fa:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:43:39 2026 by rpki-client