Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
File:                     372b639d-5c46-306f-9666-b8d03b1e82dc.roa (raw, json)
Hash identifier:          2HWJtEWj8Upiauc1EPJ/XCXHPbOSJUK2oyNeTImhzow=
Subject key identifier:   9F:DE:E7:38:18:2E:0D:16:90:68:B8:D5:1B:64:A0:7A:13:6A:EB:AC
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E94EA5CF584382A307C8918C8
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11290
IP address blocks:        104.244.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5c:f5:84:38:2a:30:7c:89:18:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=dced0541-9e90-4801-9f93-1fe5d2522dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:e9:ac:1d:e4:ab:9d:08:5f:d3:22:41:c3:
                    92:8b:0c:4f:79:3d:e6:43:14:48:71:01:99:49:01:
                    69:4b:12:0b:59:c4:94:ae:fc:fa:77:bb:09:e2:be:
                    d4:92:a5:94:02:08:34:dd:22:dc:46:0c:30:cd:d0:
                    b8:08:a5:1f:93:97:ad:8f:b9:45:10:18:99:f6:b3:
                    20:d5:bc:6b:38:d6:04:61:7f:bb:d0:67:98:22:d9:
                    f2:ba:8c:e0:e6:eb:b4:00:97:29:72:06:fe:b6:1e:
                    b4:98:58:19:47:01:86:75:29:df:d6:a8:0f:43:6c:
                    78:57:6c:1b:9b:4b:c8:0d:f0:50:35:fb:ce:af:55:
                    2a:cc:f2:60:cc:59:0f:db:a7:71:5c:cf:cf:13:aa:
                    20:d2:7a:76:b3:d0:8c:34:0c:9c:38:f6:ad:a0:10:
                    b4:6d:09:78:36:f8:1b:90:30:13:24:61:65:94:ef:
                    84:17:ff:f3:80:21:87:e6:12:fd:07:74:b2:2b:57:
                    13:d4:0e:97:5c:fc:a3:27:b9:fa:e5:da:9e:93:f5:
                    3d:6e:aa:de:16:b0:eb:97:ae:36:17:0a:cc:6e:5d:
                    f3:ac:88:b7:0c:f3:c2:c6:8f:00:14:91:f5:89:57:
                    9d:02:72:46:7a:9f:59:c9:f2:22:4a:c8:f8:31:91:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:E7:38:18:2E:0D:16:90:68:B8:D5:1B:64:A0:7A:13:6A:EB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:e1:88:07:17:24:43:e2:cf:01:32:bb:49:b9:f4:7d:10:
         5b:62:65:60:31:0d:64:bd:57:8b:35:34:84:06:96:e1:80:c6:
         6e:d5:4c:34:fe:0d:ef:e5:e2:56:65:af:ea:b9:d2:37:03:29:
         2c:c6:ba:a0:2e:60:af:81:bb:d4:34:fc:9e:2d:41:68:58:15:
         65:7e:28:7a:98:64:ff:eb:58:97:e5:81:5d:9d:25:a0:0c:a8:
         77:fc:ea:2c:1e:a5:8e:f2:31:cd:98:37:73:1e:5d:50:25:00:
         d1:6d:5b:c7:9b:dd:a0:9e:5e:65:4b:c4:bd:52:95:66:50:c0:
         94:75:88:dd:af:81:25:39:e5:e6:1f:48:0f:73:20:45:fe:9b:
         c1:3c:fc:87:03:77:98:76:41:74:69:41:a3:58:e7:27:04:7c:
         e4:6f:8d:4d:77:54:b7:fc:ce:ca:99:ba:bc:19:62:73:86:ca:
         d1:26:38:f8:06:98:49:81:6f:70:dc:96:0a:0e:b7:bb:d5:c1:
         64:f7:45:83:7a:9e:cc:5c:44:bd:35:06:23:ab:ec:bd:11:c3:
         09:05:a4:1e:d8:5e:49:8f:3a:b9:0b:94:8f:ab:fb:00:9d:d5:
         8d:43:88:70:4c:d7:59:9b:cf:18:d6:46:f9:5b:c4:76:b2:07:
         c6:55:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:07 2026 by rpki-client