Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa
File:                     90496ec0-d349-3cbd-85ee-6fa076074c1f.roa (raw, json)
Hash identifier:          T6cKk7pv1DIJpRAPEek6oY08hOmZRt4K+oYvX/+khx0=
Subject key identifier:   A9:E8:1E:37:8A:98:8E:74:E8:58:84:66:CF:8B:41:89:FC:1D:56:97
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9A20255F7043AD604E5A8D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     16625
IP address blocks:        104.121.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:25:5f:70:43:ad:60:4e:5a:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d955bc4a-d632-4f30-bc1a-68b8cc1309f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:0d:35:f5:f3:af:26:58:74:11:62:1a:a8:
                    88:97:ff:82:8a:b6:78:49:9a:30:c3:09:76:ca:ce:
                    84:f9:44:ab:06:2c:2d:73:09:be:48:f7:00:77:58:
                    72:d4:0b:f7:ca:f6:3b:b4:fd:19:54:a5:0c:b4:bc:
                    da:dc:c4:68:65:54:87:54:98:5a:1b:47:f7:34:b8:
                    51:f8:c8:d1:c8:25:ce:1b:c9:23:d2:95:c8:25:8a:
                    e9:5f:00:db:c6:39:62:a0:09:4c:8d:57:d5:c2:f4:
                    be:1a:04:ec:8c:8c:b1:38:fd:ec:d9:79:99:46:28:
                    ab:a9:e6:ef:91:41:ee:d6:af:fa:97:d0:69:99:47:
                    59:94:52:3d:0f:a4:c7:81:07:1b:17:16:80:17:6e:
                    5b:fb:ac:7e:f3:bf:48:bc:ee:a5:41:4c:95:69:62:
                    94:4f:19:20:b0:63:34:f2:ac:fb:c3:6b:a3:93:08:
                    2f:99:68:bf:1a:6c:c1:19:21:c3:7e:1f:e1:70:b1:
                    ee:02:a8:07:ef:ff:da:90:da:8e:4d:87:71:9b:91:
                    03:86:9d:42:56:e9:0e:0c:7d:1c:65:5c:e0:69:4e:
                    a5:16:5e:8f:03:cb:d9:9b:db:65:28:bb:32:e4:fe:
                    f4:6a:b9:96:5d:59:bd:78:4e:eb:e8:a8:4f:eb:5a:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:1E:37:8A:98:8E:74:E8:58:84:66:CF:8B:41:89:FC:1D:56:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.121.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:f0:1a:7a:85:f8:5e:32:6c:ad:42:c0:71:81:ef:82:b8:
         74:80:75:5d:cc:73:34:f0:ff:ca:72:6f:a3:cb:a9:2e:89:b8:
         a5:95:b8:47:fe:a0:cd:f9:b5:21:60:5a:4c:7b:96:3f:f6:c3:
         25:09:02:71:bf:be:f2:0b:0a:1d:1c:8a:9b:27:ba:18:71:90:
         90:88:61:f2:72:87:f6:5a:06:3c:a8:bf:90:c0:15:3c:25:80:
         c9:59:1a:7b:92:a9:9f:e3:21:a9:d1:d7:28:e1:d8:8d:40:03:
         c8:4f:24:14:5d:39:94:00:df:a5:0f:91:3f:c6:e0:64:da:a7:
         c2:f8:75:11:ec:d7:ec:19:ab:d7:d2:5c:20:16:d4:f8:3d:58:
         1a:ca:2b:49:e0:44:24:ee:80:ea:c5:07:55:8f:4a:f8:a9:e9:
         da:52:9d:d4:65:a0:b6:b7:36:94:34:80:cf:cf:08:35:b2:98:
         02:cb:bc:55:41:cd:7b:46:44:74:ca:cd:20:57:ef:41:81:66:
         c3:67:9f:5a:61:5c:39:16:24:ee:b4:a0:68:c0:10:46:51:ae:
         e6:3f:10:aa:b9:72:dc:fc:a1:48:05:27:6c:39:ce:be:40:c3:
         91:e7:5b:61:11:82:9d:25:dc:5f:98:9f:3a:91:e8:e0:da:7a:
         44:4a:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:28 2026 by rpki-client