Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa62e93a-1d48-3022-991f-480e3ac58711.roa
File:                     fa62e93a-1d48-3022-991f-480e3ac58711.roa (raw, json)
Hash identifier:          /YCqectTYMcYnI7e/L1JnmEup93J3LMITIXsxzImkQQ=
Subject key identifier:   41:9F:C9:B4:B2:F8:77:10:81:18:A9:91:54:3B:87:B7:7D:2A:80:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7634ED337F403E8387132900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa62e93a-1d48-3022-991f-480e3ac58711.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        104.82.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ed:33:7f:40:3e:83:87:13:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=ceaded35-ca3f-4850-9812-015d9088960c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:db:cb:55:76:7a:15:9f:12:d2:61:67:de:
                    7f:c4:9e:ba:6c:8d:d4:c7:c9:93:3b:33:03:7f:0d:
                    b2:e5:fe:2c:08:69:95:e6:57:7d:2a:28:1e:fa:e5:
                    c0:26:97:d5:ee:33:c5:a7:44:59:5a:47:23:fb:05:
                    47:21:d3:8d:39:e0:72:56:e6:db:89:16:d7:af:ca:
                    6b:f1:11:0f:20:a9:08:d7:bf:b6:70:bf:b7:5e:81:
                    0e:93:25:48:61:17:b0:39:4f:25:78:6b:33:de:a6:
                    36:b4:3d:85:6d:75:15:46:87:43:18:9a:d7:b2:41:
                    cf:4d:c5:4e:8b:83:08:68:97:73:8f:5e:0d:11:36:
                    88:9d:9e:e6:2c:7a:aa:63:d0:63:f8:a7:cd:d6:50:
                    12:8f:b0:fd:18:00:cd:aa:c0:83:35:8d:03:09:c3:
                    98:9a:d5:d3:76:bd:0c:39:1a:13:ca:45:4c:cc:7e:
                    b3:bb:00:db:a0:c2:b2:1c:3b:fc:47:5d:78:fc:06:
                    e9:7c:d7:df:1e:4a:54:6b:bc:02:93:2f:d1:44:5f:
                    b4:48:91:1c:31:fb:98:b8:b1:9a:6d:e7:e1:79:d0:
                    ba:91:9a:ab:92:24:30:71:03:d4:9e:61:a2:61:e3:
                    5b:77:6c:e8:6a:ae:72:50:a9:85:1f:dd:a4:c6:d2:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9F:C9:B4:B2:F8:77:10:81:18:A9:91:54:3B:87:B7:7D:2A:80:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa62e93a-1d48-3022-991f-480e3ac58711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.82.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:a1:ce:5a:de:c2:b5:60:76:cb:8f:19:24:dd:a9:7a:89:
         81:14:14:b7:c8:d7:b9:bc:0b:f8:98:97:4c:e9:85:59:90:e4:
         12:58:40:76:dd:77:4b:9c:76:02:1d:06:43:f5:6c:cc:2c:e8:
         84:b6:dc:07:b4:b0:14:db:17:78:d5:a3:95:b9:e2:92:f8:94:
         42:aa:ea:18:db:7b:53:c7:c1:30:bb:00:63:70:56:3f:ee:91:
         62:42:59:b1:ee:3c:27:50:28:ed:81:d3:d2:e5:1f:f1:16:b5:
         07:2c:32:b0:f1:b0:8a:6a:e2:b0:be:f4:d2:a9:ee:26:56:40:
         d8:a6:b7:f4:33:65:ce:ce:5e:33:68:6e:89:07:0f:c8:26:ca:
         70:3c:81:ce:0b:70:a4:39:5e:c4:2a:e5:7d:2c:35:7d:53:ef:
         36:46:cd:f9:cd:7d:65:79:e3:a9:31:f5:53:97:fe:84:f3:a9:
         35:88:17:01:bb:64:61:fe:5f:cc:b2:b4:59:70:fb:1f:2e:44:
         a0:d6:1d:88:a1:b1:a1:3b:dd:f4:83:f2:4c:e7:f7:d5:ba:18:
         13:02:33:4a:65:47:5f:ee:ce:ea:04:1e:4e:07:7d:65:96:34:
         ba:f5:bc:64:82:fa:df:f2:2c:4a:85:06:b1:63:88:66:b4:2a:
         14:51:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:49 2026 by rpki-client