Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
File:                     af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json)
Hash identifier:          AWnKwqpc/OanSvMDoTtWynHeQ4I9ZDPlOXQoRzGBuA0=
Subject key identifier:   11:D3:13:01:D7:CA:5C:FF:33:05:AB:0B:06:75:4C:5C:B0:36:2B:AF
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584E921FA193492B2DE0697A7A20
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     395092
IP address blocks:        104.36.228.0/22 maxlen: 24
                          2607:a680:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a1:93:49:2b:2d:e0:69:7a:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=026864f1-117c-42e0-9a86-d2e44b925e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:c4:1c:99:bc:d0:94:2d:e5:36:8c:0f:6f:
                    f0:95:61:32:2f:ae:a3:ea:ca:df:1d:3b:7a:ff:91:
                    8a:e1:02:2a:db:4d:7a:95:c0:5f:e1:12:a6:93:8a:
                    f1:93:52:78:ca:1c:b6:9e:dd:32:1d:7d:67:ce:c2:
                    2c:00:51:d9:68:e1:8c:da:61:78:f5:cf:9c:90:0e:
                    a6:33:1d:51:83:d5:41:bb:02:68:85:31:61:ee:8c:
                    a8:0f:e6:d0:ee:d9:9e:e2:a5:1e:da:7a:38:8b:27:
                    7e:bb:db:18:b2:13:39:17:99:98:b3:ec:ba:97:1e:
                    dd:f6:6c:95:0c:04:09:e2:59:87:43:7c:ca:05:eb:
                    7f:41:ac:35:bc:5f:06:67:bc:28:0d:42:a8:23:8d:
                    00:83:ab:e9:84:b2:6a:7c:67:43:f3:a5:62:e3:19:
                    b7:6f:85:8d:1a:c3:6e:a7:10:2d:d1:46:26:84:8b:
                    50:93:38:25:96:4d:f7:0d:bc:b3:77:23:69:5b:1a:
                    64:d4:24:d4:2f:03:d3:21:64:ed:3a:1d:69:ca:2d:
                    45:5b:fc:29:ba:2c:93:30:2c:3f:d4:0f:87:16:7a:
                    13:cd:c1:b7:63:1c:fa:32:f1:de:ad:3c:bf:e0:f2:
                    5a:57:ec:a7:74:4d:8b:8c:1a:15:f9:24:fe:0a:eb:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:13:01:D7:CA:5C:FF:33:05:AB:0B:06:75:4C:5C:B0:36:2B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.228.0/22
                IPv6:
                  2607:a680:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:b2:06:f1:2a:4a:1d:58:37:a5:f4:ad:e1:e3:0e:1e:52:
         3a:88:b7:4f:55:09:44:d6:e1:d2:55:3f:40:c7:49:85:4d:72:
         c3:85:29:2b:cb:e5:7e:b4:f2:63:cf:d8:f3:84:ff:3a:95:34:
         84:2f:ec:0d:3f:ee:02:1e:ea:6a:5e:6c:c6:1f:3d:d6:e5:26:
         e4:7b:48:df:05:0f:fd:3c:8b:93:7d:be:5b:78:d7:c9:f5:92:
         44:58:d4:74:62:3d:cf:75:b4:96:f1:2c:09:0e:f6:45:76:95:
         fa:0a:a7:47:d2:41:0d:d3:e2:fa:19:be:21:73:15:3c:cd:60:
         e5:3e:ed:c9:fe:9e:33:a0:7c:d2:83:e1:c2:6c:6e:11:5a:de:
         bc:52:dd:76:f3:b0:14:e5:9b:eb:60:db:e5:8f:c1:f3:b0:8e:
         26:9a:68:1b:89:29:96:d6:36:c7:9e:2c:73:f0:84:a5:a8:24:
         11:f0:16:87:9a:2a:30:d9:82:7c:97:64:c4:b3:74:53:d2:1e:
         67:ab:33:14:c5:3f:af:8c:a2:ed:1f:cd:31:af:07:0b:0f:61:
         a7:4d:3d:16:4c:e5:1f:bd:12:08:6d:9b:cf:7a:48:13:a5:88:
         a0:c0:d0:2d:ba:59:5c:a5:f5:05:54:43:80:00:2b:17:7d:1b:
         d1:8b:b9:c1
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6SH6GTSSst4Gl6eiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDI2ODY0ZjEtMTE3Yy00MmUwLTlhODYtZDJlNDRiOTI1ZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS7EHJm80JQt5TaMD2/wlWEyL66j6srfHTt6
/5GK4QIq2016lcBf4RKmk4rxk1J4yhy2nt0yHX1nzsIsAFHZaOGM2mF49c+ckA6m
Mx1Rg9VBuwJohTFh7oyoD+bQ7tme4qUe2no4iyd+u9sYshM5F5mYs+y6lx7d9myV
DAQJ4lmHQ3zKBet/Qaw1vF8GZ7woDUKoI40Ag6vphLJqfGdD86Vi4xm3b4WNGsNu
pxAt0UYmhItQkzgllk33DbyzdyNpWxpk1CTULwPTIWTtOh1pyi1FW/wpuiyTMCw/
1A+HFnoTzcG3Yxz6MvHerTy/4PJaV+yndE2LjBoV+ST+Cus3RQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFBHTEwHXylz/MwWrCwZ1TFywNiuvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYWY3M2E3YTgtM2MwYi0z
MWQ3LTg5ZGItNGM4ZWI5YjdjN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaCTkMA8E
AgACMAkDBwAmB6aAAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI72yBvEqSh1YN6X0reHjDh5SOoi3T1UJ
RNbh0lU/QMdJhU1yw4UpK8vlfrTyY8/Y84T/OpU0hC/sDT/uAh7qal5sxh891uUm
5HtI3wUP/TyLk32+W3jXyfWSRFjUdGI9z3W0lvEsCQ72RXaV+gqnR9JBDdPi+hm+
IXMVPM1g5T7tyf6eM6B80oPhwmxuEVrevFLddvOwFOWb62Db5Y/B87COJppoG4kp
ltY2x54sc/CEpagkEfAWh5oqMNmCfJdkxLN0U9IeZ6szFMU/r4yi7R/NMa8HCw9h
p009FkzlH70SCG2bz3pIE6WIoMDQLbpZXKX1BVRDgAArF30b0Yu5wQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:01 2026 by rpki-client