Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
File:                     7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa (raw, json)
Hash identifier:          kai9007Nzui3H6fPfrnRxQ/A833AJMCaJNw2u9N27Eo=
Subject key identifier:   C5:01:C1:E5:6A:AC:4D:54:EC:AB:71:D9:0E:54:B5:D8:B4:0E:9A:66
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584E4559DDD28EF3D59EF4AC2F00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     11260
IP address blocks:        104.37.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:dd:d2:8e:f3:d5:9e:f4:ac:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=dbc40fc8-ef0e-4160-a713-17e12673e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:23:7c:13:c4:6f:b4:a0:18:f4:b1:9b:a5:
                    5c:f3:29:05:1f:2f:6f:cd:fd:88:60:13:b6:71:bf:
                    01:62:80:d1:97:1a:6e:ec:a1:a9:87:98:cb:dc:42:
                    67:be:cf:5b:83:16:81:6c:f3:81:87:52:eb:36:98:
                    75:e2:f1:82:07:ff:b5:5c:d6:08:6c:f9:3f:f2:06:
                    41:5a:4f:3f:1e:54:8b:df:32:d8:07:61:2b:31:0d:
                    14:8d:d6:88:00:49:98:68:17:43:9d:ff:9c:f2:5b:
                    8c:f9:fb:5d:5b:eb:98:06:42:f2:05:3e:02:fa:82:
                    0c:a9:83:dc:27:ef:35:fc:7a:9b:93:50:c3:ec:db:
                    af:f0:5f:b4:73:14:33:c5:69:88:42:14:3b:a5:4d:
                    95:f2:66:96:b1:26:a1:55:14:b0:0d:51:47:94:c2:
                    d1:9b:e6:9e:2e:f3:9d:34:b6:b9:0e:ba:2f:28:aa:
                    ad:9d:48:bb:c1:7e:02:5f:7a:fa:49:52:8b:4e:d6:
                    91:7a:e8:3f:ad:1f:d1:80:08:ff:f7:c9:82:d0:40:
                    63:d8:0c:20:88:49:11:cc:00:af:9d:ed:6f:aa:85:
                    d4:11:dc:e7:f9:ca:10:0a:8a:34:26:69:78:82:a7:
                    27:5f:80:5a:29:da:48:f9:a3:e8:80:92:d3:ef:2a:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:C1:E5:6A:AC:4D:54:EC:AB:71:D9:0E:54:B5:D8:B4:0E:9A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:30:32:ed:76:9e:78:da:55:e6:ea:19:a3:1c:12:3d:0a:
         50:28:29:7b:93:a5:fb:ad:d0:2e:65:04:68:21:84:24:91:b6:
         eb:60:b7:86:2f:23:31:eb:f4:ad:41:96:f2:b8:37:ce:b7:39:
         3d:07:95:27:c9:11:41:f3:ec:ec:43:5c:0b:8e:61:86:57:08:
         1e:e6:af:73:59:fd:82:76:c1:f8:31:48:bf:c6:b1:1f:21:3a:
         3c:31:e0:d7:ec:5e:8a:86:81:1f:02:90:72:88:f8:98:36:56:
         b0:9d:59:a7:70:84:78:f1:0d:31:ed:84:1b:02:19:a4:17:6a:
         4d:8c:65:76:5e:36:3f:d6:4b:3c:2a:96:f8:54:33:ad:cd:9c:
         6b:5e:21:75:e4:f1:d8:87:ef:98:9b:a3:64:fe:c8:09:1c:25:
         22:38:89:0b:70:89:27:db:f8:84:a3:25:71:c1:e6:33:0b:80:
         6c:6b:1d:b9:7e:9b:bf:77:30:87:2a:ae:30:f3:02:e6:10:80:
         43:50:26:e0:17:c3:9d:92:f4:fd:5c:de:ce:03:de:15:14:25:
         24:70:32:79:63:47:9d:55:c4:1a:61:39:c1:56:6c:30:2d:73:
         55:93:aa:08:3b:ee:f2:50:53:a6:f7:17:f0:e2:c5:a9:18:bd:
         08:55:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:06:03 2026 by rpki-client