Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
File:                     26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa (raw, json)
Hash identifier:          iuNKJ3zQfyKTwVCWP9yMmNsC/xb6LbPLQSKxGh0dfwA=
Subject key identifier:   01:82:D2:7D:6B:2F:A3:DB:55:37:FB:B7:9A:A3:74:99:B4:BA:70:E1
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584B4E774712E211E9AE1BE754A0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     210630
IP address blocks:        104.36.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:47:12:e2:11:e9:ae:1b:e7:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=35ad0c9b-7d53-4637-a680-b8dca7ecacb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:54:ef:59:5e:18:9d:04:c3:c4:4e:67:66:
                    94:9e:5e:72:32:84:a6:d5:db:c0:65:1d:76:2b:1e:
                    b1:ef:1b:0f:b7:3a:b2:bf:76:cb:e1:62:70:3d:41:
                    f4:97:1d:62:8d:9c:c5:62:78:2a:06:82:4b:55:d3:
                    11:78:fc:73:ec:e0:c7:db:37:a1:b9:19:8f:31:3a:
                    cc:3d:90:6a:41:6f:73:b8:0c:ff:d2:1b:4c:03:7e:
                    17:c3:a3:d5:ce:fc:1c:2d:8f:9d:42:49:5d:e6:8a:
                    f4:16:7d:da:e9:d3:70:45:9d:f0:a2:53:59:40:ff:
                    37:02:bc:b2:86:79:3e:21:04:92:0a:de:56:38:36:
                    e7:1f:45:69:6c:fb:b8:20:7c:3e:9f:07:2d:e7:0a:
                    70:18:c9:dd:a2:dc:e9:23:aa:2c:7d:e8:0a:fb:15:
                    16:d6:b4:89:1f:65:b4:28:17:32:dd:f7:3b:e6:08:
                    f7:23:5a:23:0b:d4:69:04:7a:1f:49:e0:3e:74:ae:
                    e4:02:93:f8:f6:50:91:a9:e3:4f:cb:fd:ef:a7:d3:
                    95:54:40:c2:ed:7c:4c:5e:3b:1c:80:a6:19:52:8e:
                    7f:c5:af:b5:bb:d2:c6:33:8c:9e:af:63:b0:dd:96:
                    1a:06:ba:c3:74:16:27:e5:00:2c:e8:f7:35:3d:5c:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:D2:7D:6B:2F:A3:DB:55:37:FB:B7:9A:A3:74:99:B4:BA:70:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:46:bf:21:9d:00:14:1d:27:36:de:fa:06:04:0e:42:d6:73:
         ec:53:fe:c7:60:6c:4b:bd:4f:14:d5:2d:e7:6c:e9:e7:66:c7:
         12:9a:35:03:20:62:32:e0:bd:3c:6f:b1:54:b4:7f:7e:f6:92:
         92:3e:8a:6d:cd:c6:1c:20:63:fe:b9:a6:72:e7:c8:33:61:86:
         4b:3b:82:d4:cc:2e:65:aa:6c:12:7d:86:ee:43:53:d5:9f:52:
         b3:e2:77:16:81:1f:52:a0:1b:59:63:9e:9f:48:49:20:77:14:
         3a:4a:27:3d:ed:a5:35:5a:cf:9c:09:aa:86:cd:25:4e:77:17:
         76:74:12:80:bb:1c:f2:51:d8:75:2f:56:9a:0c:5d:81:14:24:
         7b:21:e5:8b:3c:c9:b3:a6:e9:b9:80:3b:db:33:fe:4e:0d:5d:
         2d:89:4a:f6:f0:54:8b:76:02:91:00:92:1d:59:fe:1d:f5:e1:
         9e:c6:7a:64:4f:04:1f:09:88:fb:ef:15:b4:af:8f:27:71:22:
         5b:ef:d0:e8:7e:3a:60:0d:3f:3d:f5:9c:ac:d7:ff:e0:57:eb:
         89:fd:9a:fd:02:fb:42:17:52:44:29:e2:5e:9d:b8:da:29:67:
         6a:cf:e7:3d:e4:2b:56:f4:cb:dd:e9:d9:f2:e8:bd:f5:ed:1c:
         20:a1:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:26:20 2025 by rpki-client