Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa
File:                     1ec66764-de3c-396b-8fb9-7220c150b28e.roa (raw, json)
Hash identifier:          +dQTiinjhLiP25lmGThb8i5q2fWoVZV3Ro57H2FKxtQ=
Subject key identifier:   AE:E1:A0:FA:E0:96:DA:3C:1E:06:B4:34:4F:CD:5E:A8:13:FD:EE:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D95F0106913F7CED976E19A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        104.89.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:10:69:13:f7:ce:d9:76:e1:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=a94a423f-a1c0-4656-8c4e-f8ece3676bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:e0:24:8b:9d:82:dd:52:66:60:de:97:03:
                    fd:90:b1:7a:16:38:bc:67:9a:6b:65:86:a9:2e:23:
                    34:96:e7:7f:89:80:ca:df:5c:fc:cc:a0:06:ee:1c:
                    18:52:6b:de:b4:05:b6:eb:76:13:25:7b:38:81:99:
                    25:34:c3:53:d6:7a:d9:73:c0:73:a0:3c:7c:0a:9f:
                    11:19:79:ee:bd:55:fa:cc:ca:2e:97:b8:84:97:92:
                    3c:cc:f7:16:b5:83:7f:90:6c:c3:b2:af:c9:50:ce:
                    a4:42:b8:17:f6:c0:ce:85:47:27:cd:5e:fc:97:89:
                    54:2c:52:cf:9a:31:31:4a:49:3c:2f:12:76:29:20:
                    e6:4d:49:d8:07:61:62:01:ef:73:d3:86:2d:f6:03:
                    56:f4:5c:70:a1:cb:39:80:01:db:cd:af:1b:34:fa:
                    82:24:14:ba:c1:23:2f:6c:9b:e9:0e:8d:41:c9:52:
                    ed:88:b6:17:40:ba:86:61:0f:76:bb:83:c3:10:2c:
                    c2:e8:f0:69:89:b3:a1:0d:f6:62:ff:dd:c9:b6:9f:
                    17:e3:f6:4e:b3:cc:f0:1f:b1:9c:eb:f6:4f:83:d9:
                    f8:88:b5:80:71:87:96:76:ac:50:d6:c6:ab:59:84:
                    b3:18:54:09:1e:24:e4:af:8b:2c:df:e1:4b:98:31:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E1:A0:FA:E0:96:DA:3C:1E:06:B4:34:4F:CD:5E:A8:13:FD:EE:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.89.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:17:42:79:03:cc:ea:4e:86:6a:bb:46:84:87:63:9e:c9:
         56:86:65:a1:bb:28:eb:31:17:aa:94:ee:7a:ed:a4:ed:d4:30:
         12:b2:bf:33:d5:21:2b:d8:cc:d2:33:c8:5a:93:a8:af:94:75:
         92:d5:8d:93:b9:ba:db:cf:4d:ba:80:b6:15:91:8b:ce:7d:cf:
         4f:2c:40:b5:45:94:f9:01:b1:1f:48:cf:97:42:a2:a6:e0:cb:
         02:26:35:03:42:34:73:33:a6:aa:af:68:50:f9:7d:6e:68:60:
         8f:33:70:49:7f:c0:23:d5:95:e8:77:05:69:05:b2:91:6f:f9:
         ee:25:0e:f9:99:97:2e:1c:ee:fa:f5:8a:8e:c6:84:d9:7b:13:
         7f:fc:47:6e:cb:8a:59:aa:a7:c5:74:71:e6:ae:6e:58:ef:0e:
         10:ee:81:6e:23:1f:fc:82:27:0c:8f:87:c1:2e:c3:20:be:f1:
         ae:3f:fc:fe:e7:a0:e6:99:19:36:f8:ee:93:97:95:eb:3f:c1:
         0c:d1:fc:17:ef:22:76:b5:85:f4:0b:ad:ff:23:98:c6:38:8d:
         cd:98:1c:d1:78:b6:f3:d1:ff:d3:48:d7:ee:a5:d6:18:62:c2:
         08:df:27:ff:52:61:f5:49:b0:9c:d5:6a:0e:69:28:2f:8f:39:
         bd:1d:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:54 2026 by rpki-client