Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/1146d890-9b4c-398a-8538-39135c34014f.roa
File:                     1146d890-9b4c-398a-8538-39135c34014f.roa (raw, json)
Hash identifier:          xKbVuX4RylTqJwIpbHK+T/ULfG6/LPr3/DWPwByDyzg=
Subject key identifier:   8E:CE:BF:10:CA:65:D6:0B:4F:B5:E4:79:91:2C:BD:34:FF:47:AA:8D
Certificate issuer:       /CN=5958a607-1863-4fc4-9351-0c53fa9e7641
Certificate serial:       010D0C9F4328584EF650F8AD2905617F13BB8280
Authority key identifier: 02:1C:6F:A0:9B:97:96:41:D9:1C:F8:87:B8:DE:80:9D:19:DA:ED:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/1146d890-9b4c-398a-8538-39135c34014f.roa
Signing time:             Wed 26 Aug 2026 06:20:31 +0000
ROA not before:           Wed 26 Aug 2026 06:20:31 +0000
ROA not after:            Tue 24 Nov 2026 07:20:31 +0000
asID:                     395540
IP address blocks:        104.36.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/5958a607-1863-4fc4-9351-0c53fa9e7641.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/5958a607-1863-4fc4-9351-0c53fa9e7641.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f6:50:f8:ad:29:05:61:7f:13:bb:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5958a607-1863-4fc4-9351-0c53fa9e7641
        Validity
            Not Before: Aug 26 06:20:31 2026 GMT
            Not After : Nov 24 07:20:31 2026 GMT
        Subject: CN=95692153-dfb1-405b-a1b5-dd9a49003943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:6c:0f:92:7d:9b:61:95:dd:85:40:b3:ee:
                    95:1f:9f:90:ba:40:0d:bf:7c:fa:b1:07:73:ab:75:
                    28:bf:f7:3e:1c:63:da:5f:91:7f:00:28:3f:3e:c7:
                    a0:d3:77:43:08:6b:3d:80:1c:a9:73:92:24:ae:89:
                    0e:a9:b7:0a:23:23:6f:1b:30:12:7b:1d:d1:49:7e:
                    a7:d4:c2:67:0c:9e:03:29:c5:dd:0e:b1:ea:68:51:
                    6b:23:c3:53:19:b7:11:82:0d:1b:b9:d9:52:8e:56:
                    7a:db:93:3a:f4:67:e7:41:ce:ee:e3:ac:c5:0b:1b:
                    d3:00:b5:36:f7:0c:a9:ad:83:da:be:6a:54:b2:d7:
                    48:1d:51:5a:fa:8a:de:86:6c:94:74:db:82:9f:02:
                    2a:7d:24:19:77:eb:1a:8b:ca:fb:bb:11:35:1c:28:
                    2d:56:c7:ec:08:de:19:d2:b4:82:f3:5f:f4:9a:57:
                    9f:2a:cb:7e:06:2b:8b:bd:ae:10:ab:1f:61:ce:82:
                    27:00:75:99:13:28:11:76:f8:78:9d:2c:4d:8f:da:
                    8b:8b:ec:cd:18:06:c4:ac:74:63:63:49:fa:b9:9d:
                    9f:07:44:15:02:d7:db:7a:b8:1a:cb:67:e3:e5:58:
                    f6:ed:80:78:44:c0:84:07:3f:2f:53:15:74:82:4f:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:BF:10:CA:65:D6:0B:4F:B5:E4:79:91:2C:BD:34:FF:47:AA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/1146d890-9b4c-398a-8538-39135c34014f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641/5958a607-1863-4fc4-9351-0c53fa9e7641.crl

            X509v3 Authority Key Identifier:
                keyid:02:1C:6F:A0:9B:97:96:41:D9:1C:F8:87:B8:DE:80:9D:19:DA:ED:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5958a607-1863-4fc4-9351-0c53fa9e7641.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:82:dd:4d:37:ec:b0:a2:78:3a:13:97:57:63:ec:49:e2:
         0f:11:28:61:bc:f7:bb:71:cd:db:d5:e8:83:4a:b2:25:85:ad:
         9b:ee:72:6c:97:39:4a:92:e9:2d:61:0d:3d:7e:e2:36:23:94:
         eb:25:3c:0b:eb:32:ae:76:fe:d6:16:a2:d0:f8:bd:8a:c6:4b:
         89:7e:89:a9:cd:eb:f5:71:33:05:47:23:2b:3c:2d:69:a9:e0:
         d1:5f:95:b5:6f:a0:fb:d7:14:87:fb:00:ef:10:14:c8:23:5b:
         7f:a7:0b:03:11:91:22:1a:81:95:2c:04:f3:7f:c5:c6:1c:af:
         5a:df:3e:5f:14:c8:11:02:de:74:5c:d8:a5:a0:29:92:c5:19:
         9d:96:36:5e:3d:d3:29:0a:be:17:0b:5d:47:f5:73:d4:2d:1d:
         cb:09:a1:8c:28:78:6c:d5:9b:e8:bf:60:cf:59:9d:0b:fb:b2:
         65:14:64:a8:6a:c1:9e:66:93:b2:a2:fc:48:81:2e:2a:a7:4b:
         6f:c8:29:fa:de:06:61:49:9a:b0:e7:29:ad:bb:41:bd:17:b8:
         32:69:24:12:55:02:a1:fa:a9:10:93:ca:ca:e2:ff:84:3d:bd:
         a3:a8:e5:47:2c:1b:89:14:9c:1d:ab:d1:8a:88:d0:a7:6d:1d:
         c6:ee:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:13:53 2026 by rpki-client