Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa
File:                     df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa (raw, json)
Hash identifier:          HwqKQiJ4PkX2BSDPMUqzgrOvFV8rm0immUjmAmda4Yk=
Subject key identifier:   B2:E5:87:01:AB:F1:FE:CE:F0:61:96:B6:8C:47:A9:3C:4B:D6:10:01
Certificate issuer:       /CN=37d983de-280d-4374-a056-b21eb13451dd
Certificate serial:       010D0C9F4328584E640F63ABCB136578A3408380
Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     33604
IP address blocks:        204.13.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:63:ab:cb:13:65:78:a3:40:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=30af411e-93e8-4600-993e-10c36b9d2580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:4c:48:43:f0:6a:a7:5d:2b:0f:6a:84:49:
                    66:24:c7:af:20:08:ff:08:f8:17:c0:13:29:e6:6e:
                    85:43:f2:9b:c7:a4:45:97:a7:d2:78:d2:27:34:47:
                    b4:41:d6:7a:e4:95:2e:79:0e:5e:7a:2d:9a:c6:36:
                    50:28:4e:85:e7:93:89:b9:15:37:4c:c5:2e:b7:1b:
                    5a:28:9e:7e:b6:33:d1:9c:28:88:2c:fb:67:26:e3:
                    c1:90:6f:8e:a5:d1:81:0c:00:2a:0e:b8:e8:be:22:
                    12:0c:4e:e3:ee:95:b9:c3:a2:a9:5c:36:9c:18:34:
                    a1:50:67:9a:5e:23:19:8c:a1:47:d7:32:fd:61:d0:
                    f3:6b:70:1d:f3:8d:71:1e:82:be:44:61:ef:d1:33:
                    72:fa:b7:fc:c9:8c:93:03:62:0f:63:fa:5e:bf:93:
                    58:3d:73:75:93:c5:45:8c:47:60:3f:58:12:10:32:
                    42:e2:f4:8d:ca:dc:04:4f:b9:1c:5c:92:cb:f9:e4:
                    59:5b:84:a3:23:95:d1:0e:d5:64:1b:13:cc:3b:98:
                    3e:34:ea:e4:05:1b:1e:c9:de:16:bd:ec:94:04:f0:
                    7f:ad:11:e4:10:55:73:bf:a5:9c:53:c6:90:87:94:
                    68:e6:7b:4e:b8:df:78:ae:69:76:fe:b8:19:e2:fc:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:87:01:AB:F1:FE:CE:F0:61:96:B6:8C:47:A9:3C:4B:D6:10:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:f3:67:2b:da:b1:25:44:9e:3b:ce:66:f9:fd:29:f9:ed:
         a0:8e:31:62:60:97:94:16:b9:56:89:cb:18:25:c2:51:3a:1a:
         74:da:b6:b0:e0:2b:cc:6c:64:35:76:14:65:b1:60:5b:fb:6c:
         e7:13:57:77:9a:9c:0f:d6:91:b9:0c:52:a3:db:eb:7a:6b:3a:
         ac:66:74:87:ec:5f:ef:34:f7:db:27:7b:0e:38:1d:a5:8c:68:
         a8:07:0f:74:ba:60:15:1c:04:0a:0e:54:a1:3e:7e:5f:f6:88:
         5d:f1:ae:25:e8:f9:74:ef:c5:fc:2e:43:9a:54:b3:d4:b4:43:
         19:0b:0b:d5:30:7e:98:5b:f6:20:a4:e1:2e:83:0c:f7:3a:77:
         e4:d9:1f:ba:52:cb:6a:e7:7e:2e:3b:a6:05:7c:b6:35:f8:76:
         63:f8:3f:fd:34:5f:df:5e:0f:12:c4:2d:5a:b7:97:2f:a4:4c:
         da:99:9d:df:4b:1f:6b:f2:40:65:8d:e3:7b:77:5f:28:74:95:
         9b:1c:1a:56:e7:cb:25:f2:30:49:06:cb:cf:1a:76:a8:9a:7b:
         45:15:0f:0a:76:61:1d:6e:a8:83:29:3d:e1:3b:b0:2b:37:e8:
         d7:67:3f:b1:74:36:62:15:d2:76:34:03:de:eb:8c:4d:0a:30:
         d7:7c:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:07:32 2026 by rpki-client