Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
File:                     af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json)
Hash identifier:          36yHPCw/Bxozg/z+UZBUS3NMmranypMkl4EQ8MxjJL8=
Subject key identifier:   59:9D:BC:CF:37:07:E6:8A:46:31:A5:A7:87:0D:DF:BD:13:C1:8F:A7
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584B110C006C55C0F4A121F81BC0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     395092
IP address blocks:        104.36.228.0/22 maxlen: 24
                          2607:a680:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:00:6c:55:c0:f4:a1:21:f8:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=404e17ec-f3e6-407d-841c-46e02fec443b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:c3:cb:a2:31:f2:06:af:21:0a:09:ea:a3:
                    c1:69:f6:5a:6c:75:f5:d9:98:cd:08:f6:31:b5:07:
                    8e:a3:e4:ec:e0:7e:ad:68:56:4f:b2:af:b7:75:13:
                    65:d0:1d:ad:1c:a5:41:e7:fb:fc:97:e0:39:a0:50:
                    a4:b0:3c:1f:3f:a3:a6:58:8e:f0:fb:e1:86:2e:45:
                    3f:5d:e7:e8:7c:54:a6:3c:91:ba:1e:b3:2b:58:32:
                    7f:c7:b0:2f:4a:52:1f:88:3f:dc:e2:89:b6:69:cb:
                    ac:38:b1:3b:56:f8:21:a5:b2:a9:3c:93:6b:47:56:
                    21:e4:9b:a8:c7:bd:9c:d5:50:c1:6d:81:22:54:48:
                    07:6c:12:03:c8:ba:76:b1:3e:ec:eb:37:fa:88:c1:
                    6d:08:62:48:94:19:6b:88:dc:2d:00:10:d5:da:5a:
                    91:b4:ae:81:d5:03:91:c2:41:2e:d0:f7:d0:93:f5:
                    5b:1d:54:b2:6d:22:3c:e0:ba:da:40:e7:f5:92:31:
                    14:89:56:53:80:ad:c5:62:df:ea:71:7e:69:ce:a4:
                    54:6a:16:01:6c:dc:0d:94:08:4f:96:fa:b3:08:2a:
                    b4:36:09:76:60:d4:4d:9c:0a:ad:06:eb:cd:f8:38:
                    4d:37:97:7c:50:ad:2c:6c:33:f6:36:85:7e:dc:10:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9D:BC:CF:37:07:E6:8A:46:31:A5:A7:87:0D:DF:BD:13:C1:8F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.228.0/22
                IPv6:
                  2607:a680:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:02:82:15:cd:b2:b0:6a:cb:8f:1d:ef:f6:d6:ec:f1:db:
         63:3f:4c:23:07:42:3d:dd:b0:c3:88:b6:b7:a3:74:2e:ba:34:
         43:33:29:08:0c:15:9f:c1:3c:36:04:76:3e:06:8f:9d:ad:94:
         22:9f:a9:cb:eb:79:40:68:3c:f0:96:a8:42:8d:8e:85:b9:1a:
         67:9b:9f:b3:03:30:37:d5:28:5e:88:df:b3:7c:02:5d:5b:a2:
         79:23:c8:37:06:33:21:65:6f:80:62:5a:17:87:ec:c1:09:fc:
         32:64:db:92:d1:f2:5a:0c:2b:40:c4:ad:2f:ac:5f:34:84:2f:
         9c:0e:69:6e:64:c3:2c:01:72:cd:03:06:3f:f0:c6:38:ef:14:
         09:22:e7:c0:77:92:a3:58:2f:d4:46:0c:31:28:82:ce:6f:dc:
         05:79:c6:61:6c:b5:02:a5:eb:de:0b:0f:58:ce:c0:4d:ec:e2:
         c5:ba:23:b9:5b:51:d3:0f:c7:17:f7:aa:3d:6b:14:8f:a3:e5:
         b1:ef:bb:3b:8f:e9:85:9e:ba:18:62:2f:c5:21:06:36:30:ea:
         f6:84:e4:9a:3c:13:35:78:e0:a4:b9:09:46:7d:20:25:84:22:
         82:3d:89:c2:e5:6c:f4:2d:95:23:31:5b:9e:b1:80:8a:63:db:
         30:75:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:59 2025 by rpki-client