Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/5d3d9f23-6491-36da-b591-dc875f2faf35.roa
File:                     5d3d9f23-6491-36da-b591-dc875f2faf35.roa (raw, json)
Hash identifier:          zm/Umd3ebf5V7RpHovbeMOEW9SI9kn1cVEN/ozAcPAc=
Subject key identifier:   99:44:72:4C:1E:45:DC:E3:5E:8A:E8:0E:93:6E:3D:1B:97:F3:A4:51
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F4328584F3CE296B3EC2852BBD3204000
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/5d3d9f23-6491-36da-b591-dc875f2faf35.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     401199
IP address blocks:        104.204.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:96:b3:ec:28:52:bb:d3:20:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=fd5fa33f-cee8-496a-9b58-9ffcd9126e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:10:69:76:41:d3:3f:a9:16:60:ce:b6:2d:
                    8e:3f:98:98:a8:80:b3:b1:39:5c:8a:71:cc:91:97:
                    e9:a9:cb:19:98:2c:a3:04:53:55:f6:77:38:6e:81:
                    fc:9b:cf:52:42:29:46:04:1e:49:2d:92:01:53:32:
                    ac:d9:32:f1:bc:5e:b3:45:ed:1c:a1:75:fe:6f:8b:
                    ab:7c:c4:dc:b9:c2:07:36:a7:ef:76:41:de:1f:0e:
                    92:4c:16:87:af:93:6f:6c:ce:44:3f:1c:84:97:49:
                    b4:56:dd:3c:bb:45:06:bf:3c:9f:15:f3:39:53:9c:
                    35:2d:8d:50:54:c1:a4:46:d6:6f:e8:9b:9b:6b:d4:
                    24:de:f0:ef:10:fb:e6:ac:83:b7:b3:03:56:24:ed:
                    f3:cb:57:b3:d4:c1:7e:c7:7e:7d:2f:78:6f:ae:2a:
                    eb:4c:34:7e:7a:32:a6:54:32:1b:b4:45:c3:2c:43:
                    c6:5e:ac:13:9c:23:25:5e:05:3d:29:61:08:03:37:
                    e8:95:3d:f9:07:80:d3:5c:a7:8b:2d:11:fa:63:ab:
                    e6:ca:68:2d:1c:e4:a0:3a:37:9b:a1:f2:c7:da:d5:
                    1b:3f:f7:2d:96:b0:c9:bb:68:40:e8:24:06:22:bd:
                    dd:01:46:ad:b5:e7:e7:df:fb:40:68:bd:13:50:0e:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:72:4C:1E:45:DC:E3:5E:8A:E8:0E:93:6E:3D:1B:97:F3:A4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/5d3d9f23-6491-36da-b591-dc875f2faf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:d5:3c:9e:14:8f:7b:49:f7:2f:0b:4a:fc:56:54:9e:06:
         d1:d1:21:47:ac:66:db:3e:fa:0c:f8:a4:8e:22:29:b9:dc:d4:
         fa:bb:b4:c0:db:2b:20:19:80:52:a3:50:31:89:c0:da:fb:af:
         64:2c:23:bb:2b:c8:81:c1:d6:aa:26:2a:bf:e9:22:0b:6a:5b:
         22:94:59:c2:c6:ad:5b:d0:50:c0:db:bc:ec:a8:f1:72:7e:92:
         cd:2c:d0:bb:08:20:d1:c8:c9:2d:be:95:d4:8f:98:53:ca:89:
         64:76:55:dd:a2:e3:ef:7a:9d:15:d9:41:63:59:3b:0e:d4:5a:
         64:6b:c3:22:05:e1:77:73:aa:67:0f:43:63:76:4b:3b:44:2c:
         88:be:d3:cc:15:8c:6c:7e:80:fb:e0:97:85:18:b0:29:2a:94:
         eb:d3:48:3d:b2:38:95:ad:ac:6e:c9:99:1e:af:ec:93:ff:e5:
         09:49:72:0e:0f:ad:86:76:1a:a9:20:93:ac:6c:4a:05:0d:c1:
         dc:c3:49:4b:f5:8b:bf:63:ba:54:f6:9c:d7:a5:d8:91:1d:23:
         8c:6d:75:a8:eb:5f:a3:ad:57:63:2a:dd:9b:ae:ca:81:ea:41:
         85:ba:d0:01:ec:ed:e3:c2:b1:4b:33:39:7a:b3:43:13:0e:4d:
         17:72:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:08:47 2026 by rpki-client