Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbb82986-b1ee-3875-a7b9-368b90107a94.roa
File:                     fbb82986-b1ee-3875-a7b9-368b90107a94.roa (raw, json)
Hash identifier:          rbfwMS5aKvS92YDZVeML8N3azTY7L/ClFg4BJW+MWRA=
Subject key identifier:   97:3B:03:3B:54:EB:B1:FB:18:5A:5A:AD:6A:F7:04:AD:A1:04:33:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8AC54F62028B14CA6F88B500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbb82986-b1ee-3875-a7b9-368b90107a94.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        104.68.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:4f:62:02:8b:14:ca:6f:88:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=17d71fcf-4144-4e06-9301-091b872ef60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:ab:ec:16:4a:06:05:88:92:99:15:7f:7e:
                    8f:ca:92:92:33:80:c1:59:d6:16:6b:25:4f:03:2c:
                    65:b0:f9:3a:4c:27:c4:92:97:b7:e9:4d:20:cf:31:
                    ab:bb:59:d5:c2:ca:de:40:ce:d8:3b:05:29:93:d5:
                    72:91:30:b6:ad:25:2b:16:db:88:4e:2d:b6:71:fc:
                    5c:3c:28:09:56:ea:f3:c8:f7:90:ab:f3:9a:de:9b:
                    c9:20:7d:0d:33:e8:21:ea:5a:71:8c:46:6d:64:82:
                    90:3d:24:1f:4e:eb:db:fb:13:7c:d6:a5:da:80:2d:
                    0c:bd:e4:86:96:d9:b2:3e:91:4f:10:de:8c:ee:b9:
                    5d:c8:af:f2:e1:6c:e3:da:53:2e:75:e7:f7:1c:0a:
                    c9:64:8c:b2:4a:cc:21:30:4b:05:fa:be:7b:f5:2d:
                    c9:b3:52:ba:4d:69:9f:83:cd:50:52:a0:ea:68:9a:
                    e3:45:0b:76:67:eb:1f:ef:c3:b2:8c:7b:6c:94:24:
                    df:ac:1f:d0:b2:23:29:0a:55:d3:3f:5b:cd:8f:84:
                    69:21:ba:54:09:f7:fc:3d:10:1e:0b:ba:1c:d3:49:
                    36:14:13:dd:fa:c9:0c:c8:3d:a0:26:28:b9:01:dd:
                    8e:62:04:b7:47:4e:f6:43:15:a4:4b:d9:e5:c7:52:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:03:3B:54:EB:B1:FB:18:5A:5A:AD:6A:F7:04:AD:A1:04:33:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fbb82986-b1ee-3875-a7b9-368b90107a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.68.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:57:fe:8a:d4:ac:4e:3b:66:c0:5a:6a:e4:49:14:73:b2:
         ab:7f:07:0a:1b:29:b2:23:fb:a3:f6:e9:35:c6:2e:92:b0:56:
         f9:cf:21:89:dd:34:fe:bf:e1:5e:ec:62:2e:f5:d5:97:03:26:
         7b:c2:83:f3:e9:83:ff:d9:a6:37:52:a2:71:bd:ca:61:ae:17:
         99:df:b9:19:c5:a1:83:2e:63:f0:64:22:d9:30:28:25:81:e5:
         a0:05:2a:2f:b8:f7:4e:71:89:87:b5:d0:b9:32:49:45:78:32:
         86:7f:21:03:f3:e9:ec:1b:1a:b6:51:9a:31:1c:38:3f:89:71:
         4e:10:74:ae:fd:16:f3:8f:bc:28:55:b2:e2:d5:02:11:f5:c9:
         08:66:45:6f:7e:4a:31:32:5b:fd:cd:99:d1:e1:80:89:69:57:
         ba:a1:c2:ef:ad:9c:4d:f5:59:b9:fe:b3:9f:3e:92:f9:b4:7e:
         bb:43:38:55:b7:ca:b4:12:43:63:98:0f:97:39:1b:28:18:30:
         41:f0:da:5d:db:55:7d:7e:a9:a3:3f:a5:80:b6:5f:36:69:65:
         30:bf:35:44:13:23:b6:e5:67:ee:79:84:06:39:89:17:95:b2:
         62:bc:02:d5:f2:72:51:71:c2:7b:98:88:3f:87:0a:c5:43:48:
         e6:c6:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:19 2026 by rpki-client