Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dba8a0c9-a8ea-32e9-a9b0-c0729cc5d40d.roa
File:                     dba8a0c9-a8ea-32e9-a9b0-c0729cc5d40d.roa (raw, json)
Hash identifier:          ZX8CgbXYf1a8NRhr7fadbvXXAwpIcgQHzdPutI/qXd8=
Subject key identifier:   5E:3E:04:AD:EB:BA:34:60:77:AC:CC:C0:FD:7B:47:BD:70:12:1D:2D
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584EEEB75CA68BD732DD030BA8C0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dba8a0c9-a8ea-32e9-a9b0-c0729cc5d40d.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13920
IP address blocks:        45.58.59.0/24 maxlen: 24
                          104.128.231.0/24 maxlen: 24
                          104.128.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5c:a6:8b:d7:32:dd:03:0b:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=475a7ebd-cf7a-476e-8a43-99ce14679d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:6b:50:f2:c6:1c:f1:70:a4:8a:f4:2a:f5:
                    01:95:f5:38:88:12:95:c3:c3:45:a4:9d:90:6f:6f:
                    14:15:f8:51:38:4d:62:ee:41:77:cd:46:6f:17:39:
                    6d:64:42:09:ac:01:4c:9a:ca:11:5c:6e:fc:f9:37:
                    57:d9:48:22:aa:3c:3e:f7:8d:2f:19:c3:b0:a3:f5:
                    64:e5:52:22:c6:b2:b7:5d:bf:93:89:84:2c:40:9f:
                    da:58:8f:01:41:d5:93:1b:c1:ad:96:6a:01:9d:b6:
                    28:fd:b8:44:32:9c:b0:55:c1:67:3d:5e:3d:3f:cd:
                    8e:bb:81:8a:61:b2:f3:5c:c1:85:8a:7f:5c:4d:b0:
                    76:29:db:bd:32:cf:cb:ba:56:d3:ec:d1:59:16:ab:
                    72:c6:5c:cd:4b:b2:57:b2:11:3e:ec:e2:ea:ea:38:
                    cb:d7:9b:b7:fc:ba:40:ea:d1:53:e5:8a:1b:cc:05:
                    43:ca:60:0b:c0:52:83:24:c9:61:cd:f9:9e:ba:df:
                    64:0e:d2:d7:0f:e1:39:2c:73:76:62:1b:d4:d4:5c:
                    88:64:a4:5d:20:1b:cf:d1:3e:66:9e:d9:cc:b7:f6:
                    67:bd:96:73:1d:ae:09:32:1d:65:b4:8f:ff:87:5e:
                    5e:20:79:e4:b4:a8:12:eb:93:8b:19:ab:01:ba:ba:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3E:04:AD:EB:BA:34:60:77:AC:CC:C0:FD:7B:47:BD:70:12:1D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/dba8a0c9-a8ea-32e9-a9b0-c0729cc5d40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.59.0/24
                  104.128.231.0-104.128.232.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:75:a4:6b:5b:b5:ae:7b:65:a9:02:f3:f1:36:2d:79:ab:c2:
         c5:d4:40:84:d1:8c:77:b6:15:e5:08:21:1d:0d:e6:28:6a:db:
         13:3c:cf:c9:34:5e:3d:50:d9:14:c8:81:f6:7d:43:d6:69:f0:
         ef:a4:b9:5f:0a:bd:60:8f:83:6d:89:71:40:d9:a9:c5:d3:64:
         9c:0f:e3:b5:a4:53:1d:78:cf:98:de:9c:84:56:73:8c:fa:6c:
         56:0b:f9:ad:a6:01:5c:18:85:80:fa:1e:40:8f:10:6b:a2:32:
         48:db:c7:a4:29:58:5e:a8:7d:2e:bc:08:f2:72:96:86:d1:a6:
         b9:a8:41:9f:21:5d:b5:be:25:e2:85:cf:5a:b4:7a:59:ba:04:
         a2:7e:80:50:73:76:1e:3f:f9:57:8f:74:bc:34:d3:ac:3a:06:
         16:e9:ee:b1:c4:c1:c1:38:98:8a:ad:68:d4:71:64:ee:6a:07:
         1a:a9:03:67:7f:37:e1:80:3d:22:09:75:44:a1:64:50:00:91:
         40:2c:73:1f:f3:0c:21:dc:f1:36:68:e7:93:41:02:9a:c0:56:
         e5:79:6a:00:a4:70:39:60:8d:7a:ac:d9:55:73:1f:50:d1:fa:
         a6:04:1f:3a:44:af:43:ab:cd:9b:36:fe:6e:a1:c9:f5:57:db:
         20:50:ae:66
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE7ut1ymi9cy3QMLqMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
NDc1YTdlYmQtY2Y3YS00NzZlLThhNDMtOTljZTE0Njc5ZDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIdrUPLGHPFwpIr0KvUBlfU4iBKVw8NFpJ2Q
b28UFfhROE1i7kF3zUZvFzltZEIJrAFMmsoRXG78+TdX2Ugiqjw+940vGcOwo/Vk
5VIixrK3Xb+TiYQsQJ/aWI8BQdWTG8GtlmoBnbYo/bhEMpywVcFnPV49P82Ou4GK
YbLzXMGFin9cTbB2Kdu9Ms/LulbT7NFZFqtyxlzNS7JXshE+7OLq6jjL15u3/LpA
6tFT5YobzAVDymALwFKDJMlhzfmeut9kDtLXD+E5LHN2YhvU1FyIZKRdIBvP0T5m
ntnMt/ZnvZZzHa4JMh1ltI//h15eIHnktKgS65OLGasBurriLQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFF4+BK3rujRgd6zMwP17R71wEh0tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZGJhOGEwYzktYThlYS0z
MmU5LWE5YjAtYzA3MjljYzVkNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALTo7MAwD
BABogOcDBABogOgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAUHWka1u1rntlqQLz8TYteavCxdRAhNGMd7YV
5QghHQ3mKGrbEzzPyTRePVDZFMiB9n1D1mnw76S5Xwq9YI+DbYlxQNmpxdNknA/j
taRTHXjPmN6chFZzjPpsVgv5raYBXBiFgPoeQI8Qa6IySNvHpClYXqh9LrwI8nKW
htGmuahBnyFdtb4l4oXPWrR6WboEon6AUHN2Hj/5V490vDTTrDoGFunuscTBwTiY
iq1o1HFk7moHGqkDZ3834YA9Igl1RKFkUACRQCxzH/MMIdzxNmjnk0ECmsBW5Xlq
AKRwOWCNeqzZVXMfUNH6pgQfOkSvQ6vNmzb+bqHJ9VfbIFCuZg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 19:11:26 2026 by rpki-client