Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa
File:                     36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa (raw, json)
Hash identifier:          A/7iYPWxTsYLTUT8+Y1BX4uwHyQDCf31hgRieclLYog=
Subject key identifier:   EB:78:22:4C:20:63:37:D7:77:D0:D7:C5:E0:2F:24:02:7B:4A:1D:B1
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584F03A77F649D9B695027B94960
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     13414
IP address blocks:        104.244.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7f:64:9d:9b:69:50:27:b9:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=8c79a5fa-fc10-422b-bba4-6bc760dac81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:9b:3a:7a:f7:bb:97:8c:2e:03:69:18:38:
                    6f:81:eb:09:b7:91:eb:8e:29:83:54:fa:e0:07:60:
                    a1:90:ce:25:28:6c:8b:80:d6:3f:11:7d:da:3f:86:
                    77:25:2d:ff:c3:56:0c:9f:2d:9f:4c:c9:80:93:b2:
                    28:d5:d4:72:82:7b:5a:10:60:4a:40:ae:b6:71:59:
                    e2:3b:c4:0b:1d:91:fa:63:f2:e5:91:58:95:91:f8:
                    97:56:1a:3f:00:64:eb:a0:c9:b0:a0:db:98:fc:c4:
                    f6:84:77:62:6a:5b:64:bc:a8:67:c3:04:15:49:05:
                    57:24:3c:a9:9b:50:83:6b:96:c6:b4:41:6d:40:c3:
                    79:8d:b2:9f:f2:f0:de:87:a8:14:7d:aa:d9:2b:16:
                    2c:2e:38:c2:3d:53:f7:a5:f4:44:ba:e4:34:7f:75:
                    22:e5:17:71:ef:f7:2f:87:6a:03:41:90:71:93:bc:
                    8e:18:b2:bb:08:22:ed:da:8f:af:76:30:7f:3f:6b:
                    32:da:37:ae:49:74:ba:df:ed:e4:c8:b2:a3:32:b4:
                    ff:2e:61:06:b8:25:ef:88:b7:d8:bd:7e:0c:e5:10:
                    db:94:f1:56:0d:03:73:e8:f9:f6:6d:67:29:58:c3:
                    e7:73:fc:e4:d0:2d:46:c9:12:d5:f3:95:a1:c3:ec:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:78:22:4C:20:63:37:D7:77:D0:D7:C5:E0:2F:24:02:7B:4A:1D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/36dd5070-b711-3751-b1e2-9dd1191cbfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:10:b1:3e:7d:5e:94:4d:a7:ce:37:ca:8f:22:9e:61:9e:
         f9:34:33:b7:7c:83:03:a0:62:6a:43:32:76:ae:9d:84:36:44:
         56:4e:14:c3:b4:26:88:f3:4e:81:2c:ac:54:71:ad:4b:e4:61:
         5a:23:02:af:80:47:64:0a:b7:61:43:29:c5:22:c2:0d:5e:04:
         53:59:1b:56:ce:34:93:90:36:0f:ab:15:20:08:47:e9:fe:6e:
         25:56:7b:31:7a:e9:7c:76:ae:79:b9:4e:cb:84:87:1c:9e:28:
         4b:4e:3c:cc:ab:28:31:39:e0:37:a0:9a:9c:3e:5b:38:8d:c6:
         42:4f:c2:0f:d7:cb:76:f1:bf:11:e4:66:96:5c:ad:29:14:41:
         42:39:01:72:a4:5e:ee:1d:a0:54:32:04:41:bc:19:db:c3:b8:
         a5:68:d7:45:a3:11:1d:69:24:84:8a:05:6e:9d:cc:0d:dc:e4:
         29:e2:89:37:80:3a:34:b7:b8:34:85:7e:07:e4:05:80:ae:ec:
         4f:1f:fd:8b:6c:5d:1d:ea:6a:0b:29:c6:eb:6d:f2:6e:c7:30:
         70:dc:09:96:44:63:ec:d0:19:64:ad:68:74:8f:90:c1:15:b5:
         2e:97:ed:93:e6:e7:be:a8:9d:6d:d1:fd:bb:0c:55:3c:96:14:
         ee:88:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:50:41 2026 by rpki-client