Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
File:                     ff7900da-0420-38fc-8569-0df46155e9fa.roa (raw, json)
Hash identifier:          ZtaWgNMPp54hDNWrABcK6hx+/IKdU/wb9Z/pKOX8+rI=
Subject key identifier:   5E:A8:CB:7D:29:C7:5F:20:40:B9:1A:5B:1E:34:9D:0D:5B:83:67:2C
Certificate issuer:       /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial:       010D0C9F4328584E8C8A4EFA6FFDC843C9F71B40
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     14701
IP address blocks:        104.232.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4e:fa:6f:fd:c8:43:c9:f7:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=cb82ccb5-32f4-480c-85b5-47c8b7cf85ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:b8:73:1e:02:86:56:77:5a:26:bb:99:32:
                    d6:63:b1:0f:e0:92:13:94:d9:cf:5b:32:60:89:9b:
                    4e:32:bf:dc:32:5c:cb:0a:e2:ec:29:75:8e:c8:b9:
                    9f:30:1b:d5:6f:89:2d:c2:4b:fd:51:44:c2:f2:1c:
                    5d:97:58:2d:83:a3:86:fa:09:42:6b:e1:5c:aa:9e:
                    53:94:46:45:f9:d9:c2:e7:4d:8d:1f:db:04:1e:fa:
                    7b:67:2d:7e:8e:9b:d1:e9:4a:93:01:28:8b:85:24:
                    71:ae:15:79:08:6e:8a:74:3c:f0:a4:8c:c0:4e:83:
                    5b:97:46:83:c8:2c:d7:c4:fe:fb:2e:fa:78:72:ab:
                    36:7b:da:db:09:2c:49:7f:48:3e:14:7a:bb:2b:f3:
                    f2:3e:95:40:97:0d:73:1b:36:dd:f2:5a:5a:f6:07:
                    02:29:59:38:93:18:63:ee:c9:f8:8f:3b:6d:0a:b7:
                    2d:43:cb:b0:93:f9:85:39:bd:64:df:d5:27:0e:d3:
                    50:0e:d1:63:b5:2f:93:4c:db:39:9c:f1:95:66:12:
                    8e:66:e4:0b:30:ed:7b:2f:37:d7:8f:9a:36:0e:bd:
                    80:cc:47:93:cb:a0:f8:d0:e2:8c:08:49:84:c2:8c:
                    06:f3:0d:f3:3a:50:ca:1b:af:af:6c:20:45:aa:1a:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:CB:7D:29:C7:5F:20:40:B9:1A:5B:1E:34:9D:0D:5B:83:67:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl

            X509v3 Authority Key Identifier:
                keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:48:e3:6f:23:d1:31:74:af:99:bb:c2:4a:47:e1:44:d3:
         61:eb:3b:1c:d3:cb:0f:59:cd:b5:52:56:e0:0e:c2:bb:af:da:
         42:56:ee:e6:32:36:ee:f9:2c:e8:ab:a1:66:15:bd:3e:e2:be:
         25:a6:74:2b:ec:fc:a9:26:fe:6b:11:4a:fd:51:17:a1:dd:0f:
         4e:a7:a7:ac:7e:2d:fe:d8:f8:80:80:15:4f:06:4d:89:12:0c:
         b6:70:45:e5:5e:9f:32:cf:f4:ee:46:24:4a:5f:4c:72:cb:0a:
         d6:af:df:de:37:c5:07:46:1f:e5:c4:09:d6:34:5b:49:4b:95:
         1f:18:38:f7:da:aa:1b:b1:5c:8b:71:ca:af:d7:08:e8:04:b3:
         20:61:8a:98:1c:e6:9a:bd:f3:31:f3:d6:55:9d:0b:34:ca:aa:
         af:49:17:4d:d2:76:6a:9f:f2:68:5b:4b:3b:d3:10:64:27:08:
         06:0d:22:0b:70:d2:5b:36:74:13:fe:a3:6f:e8:31:ca:0c:3c:
         70:b4:c0:3e:71:df:f5:bc:4a:f9:6a:2f:77:bd:23:1e:9b:75:
         20:13:57:20:1c:4f:d3:07:de:10:30:29:5b:44:3c:4f:a5:67:
         82:29:da:bf:a7:d8:bc:81:1a:a0:2e:d3:d6:ca:ba:8b:78:18:
         7a:7a:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:54 2026 by rpki-client