Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa
File:                     c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa (raw, json)
Hash identifier:          PSE4fD/cyJ4BEJuzevUMR95Po+laWx3Wl9k1RotrmD8=
Subject key identifier:   C8:42:C1:03:2B:A3:3C:4E:27:B2:6D:A6:79:18:F3:D7:25:EF:0B:42
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E94EA57175F99EB82291DBA00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     62651
IP address blocks:        104.36.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:57:17:5f:99:eb:82:29:1d:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=1a6e0856-6b04-4297-a372-c4784a3524f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:cb:e3:1b:bf:47:0a:dc:fe:a0:24:a8:1c:
                    d8:be:82:61:52:70:f8:13:80:9f:fa:67:be:b5:cd:
                    d9:2f:1d:22:1f:5d:8e:2f:1e:88:6b:d3:46:ff:04:
                    44:0e:89:77:e8:d2:bf:3e:40:44:c2:2f:71:af:c9:
                    8d:0f:75:40:fb:a8:a0:23:7a:12:d5:10:60:20:38:
                    36:ce:59:d5:fa:30:e7:96:e0:ea:ff:65:d7:d2:00:
                    7a:7e:bf:f9:04:6d:26:4b:a2:c7:fb:88:61:6a:10:
                    5b:29:a5:01:34:b6:27:ac:58:fc:dd:94:b8:0b:05:
                    21:2e:43:3a:4b:75:3a:93:d9:86:97:7f:06:be:67:
                    e1:4a:16:6e:bb:78:2e:a3:b2:aa:69:9b:f4:c0:c8:
                    0a:fa:48:20:e5:ef:06:4d:f0:b8:87:e3:9c:e2:59:
                    88:20:71:99:1c:e2:43:c3:bd:42:23:3f:9e:1e:8e:
                    a6:3e:3e:3c:c0:79:66:68:00:35:d0:dd:72:11:d4:
                    e2:78:c5:aa:a1:5e:76:23:b0:95:de:7e:d3:78:16:
                    a5:eb:3e:43:8d:f5:07:fb:9d:c6:05:bb:be:65:dc:
                    30:8d:e1:57:73:5b:bc:77:ea:6e:2f:48:fe:c2:44:
                    dd:e0:40:cb:5e:e8:be:c8:16:b0:54:fd:c2:a2:5d:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:42:C1:03:2B:A3:3C:4E:27:B2:6D:A6:79:18:F3:D7:25:EF:0B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c2d9c047-3e7e-35e4-addf-2616c2e71b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:35:14:e7:ec:d4:c3:66:61:23:87:36:1c:8e:55:94:16:
         8d:7f:a2:96:bc:96:74:58:cc:86:1a:00:bf:70:84:6e:06:83:
         9b:3d:bc:7b:f5:67:db:01:f7:16:7b:3b:6d:cc:8c:70:30:76:
         f6:c4:0a:5f:06:62:2d:97:39:cb:f7:43:6a:9a:02:58:26:c1:
         2b:6e:2e:1b:79:ef:92:df:ae:e2:f3:7b:4b:66:1a:0e:66:3a:
         02:53:64:ef:9f:59:b8:14:56:64:33:c1:eb:71:ad:82:39:73:
         a7:af:fc:3e:f2:83:0e:28:b2:37:a6:8e:2c:af:9c:29:eb:ed:
         73:bc:4e:dc:d9:71:1b:07:c1:c7:d0:f1:17:fc:1b:e3:73:f8:
         d0:00:96:24:02:d6:8f:aa:55:85:0e:32:fa:06:d6:56:77:af:
         4e:59:12:67:15:b8:a2:73:a7:e6:0c:ae:f0:56:5b:99:a8:f9:
         ee:d2:38:8b:f6:25:5f:69:23:8a:0c:89:5c:69:78:8e:36:8e:
         56:33:c4:45:ad:8b:a2:df:80:de:07:be:68:2a:72:0b:3c:56:
         13:9e:83:fa:85:7c:cf:64:90:d8:cf:71:ce:11:8a:57:e4:34:
         eb:b3:5e:7c:71:63:1d:08:b0:e8:b0:ab:8e:e5:bc:be:1e:ca:
         e7:c4:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:32 2026 by rpki-client