Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0355acfa-2eb5-30c3-b27a-003fe88e2af5.roa
File:                     0355acfa-2eb5-30c3-b27a-003fe88e2af5.roa (raw, json)
Hash identifier:          Q4V4M9grlL8wL7kmpha/i0/5KpKEZ8IDrxKUTD+hQ50=
Subject key identifier:   3F:CB:E2:D4:A0:C5:70:05:1E:26:A8:4C:1F:16:B4:F7:C3:3D:70:0F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9A20268205558744C26CAA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0355acfa-2eb5-30c3-b27a-003fe88e2af5.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     20940
IP address blocks:        104.123.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:26:82:05:55:87:44:c2:6c:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=ad9e5af3-d469-4fc8-9e41-088e576b3c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:69:f9:48:11:a2:84:22:35:db:4d:8f:50:
                    80:4f:23:52:12:9b:f5:59:3f:68:e9:d4:3b:34:09:
                    8c:0d:f5:10:76:9b:b6:f2:a5:a6:62:10:92:c3:83:
                    c6:c6:a0:8a:8d:cd:34:6d:76:a1:23:88:c0:b5:0a:
                    79:24:29:52:7f:73:2b:1a:db:3a:da:e9:ca:f3:52:
                    72:1c:4b:d0:38:ae:f8:1c:d9:80:34:2a:b9:fb:37:
                    15:21:3d:d7:e3:93:b7:95:af:22:77:28:99:7d:08:
                    83:21:2d:1a:fe:4b:b2:c8:93:5f:ca:54:be:b5:44:
                    0c:f4:86:c3:be:e1:2b:a9:9d:c3:fe:fa:c8:0b:8a:
                    9c:5f:a0:c5:0a:0b:bc:ee:4c:4e:43:7b:16:15:d1:
                    6e:10:9b:ce:ae:91:d9:1e:04:c7:fc:1e:b0:9a:d9:
                    28:95:f4:8d:57:b7:f9:2a:a4:39:c4:90:df:3a:01:
                    74:80:df:fe:4a:05:13:38:8d:e1:db:48:93:10:da:
                    e6:51:b9:ba:e4:ee:81:e6:89:cb:6e:c7:95:ec:75:
                    8a:14:68:f5:33:53:96:fe:1a:e3:d1:2a:43:fe:36:
                    0c:92:b8:6f:58:6a:a5:b8:14:00:5d:42:d1:e4:23:
                    90:eb:75:ea:36:1b:c7:40:85:b0:92:c1:38:cc:45:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CB:E2:D4:A0:C5:70:05:1E:26:A8:4C:1F:16:B4:F7:C3:3D:70:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0355acfa-2eb5-30c3-b27a-003fe88e2af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:38:e1:6e:90:92:53:14:3e:98:48:3a:24:2d:c5:e7:95:52:
         96:07:c4:b1:fc:1b:50:46:a8:2f:95:6b:e7:f8:14:7c:dc:09:
         41:b6:45:b4:ca:2c:92:3b:2e:10:27:a1:c7:c2:f5:6d:36:06:
         31:c9:b0:91:1a:e9:52:63:08:8e:0e:01:5f:8f:4c:6d:28:80:
         d3:47:11:c1:f6:72:1c:40:b1:1d:75:d6:74:c2:7f:9a:02:15:
         04:b0:56:07:47:af:06:25:a8:83:fd:c3:61:45:c7:57:d0:fa:
         b7:25:ba:f0:89:a8:63:0f:dd:b1:92:e8:99:a4:4a:5d:9b:d6:
         16:88:54:d2:f9:25:28:27:d9:cc:f3:3e:c6:e0:b4:48:2f:30:
         36:a0:48:8a:b9:aa:02:8c:67:21:9f:b2:99:af:b3:97:a5:c6:
         fb:ee:35:cc:22:6d:26:f4:c4:24:5c:73:6b:ef:4e:26:f0:ff:
         0b:65:67:52:a9:f0:35:ec:14:1a:45:d1:a3:ef:ed:e4:6a:ca:
         be:f6:a3:10:8d:4e:42:1c:cf:47:bf:eb:62:ca:6c:54:79:8f:
         c0:2f:45:9a:21:08:79:6d:ea:9a:f1:76:1d:7e:d8:9c:cc:ff:
         20:08:83:c3:e2:91:1f:98:19:56:22:8e:45:df:4d:aa:55:8c:
         fe:f6:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:43 2026 by rpki-client