Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa
File:                     a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa (raw, json)
Hash identifier:          fUAgSObzFmVQwv1Zp54tS1V6fkN0p2+d/iy5srt7/kY=
Subject key identifier:   6D:1A:91:05:EF:BA:F8:8D:75:31:6E:C5:DE:4F:23:81:4A:5E:14:E7
Certificate issuer:       /CN=900920d7-dc26-412d-b92a-7af35af2cc24
Certificate serial:       010D0C9F4328584EC0A7240799F068AE44FBD100
Authority key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     36694
IP address blocks:        104.219.228.0/22 maxlen: 24
                          2620:11d:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:24:07:99:f0:68:ae:44:fb:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900920d7-dc26-412d-b92a-7af35af2cc24
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=a9d196d1-f13d-40d3-bb9a-c06309a5ddca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:a5:d9:ae:be:0d:e7:15:37:ef:87:c8:38:
                    44:1d:e2:d4:04:15:fc:12:a1:40:c8:19:56:51:3d:
                    54:55:29:22:f6:a3:75:20:2e:7c:33:bd:14:74:98:
                    5a:85:11:62:3b:fe:fa:d1:6a:4b:08:62:64:ca:2e:
                    50:9b:97:3c:05:87:8a:97:cd:30:73:04:84:62:a7:
                    2c:41:10:58:7b:ae:60:a8:e9:b2:b6:bb:01:38:f6:
                    56:12:24:d2:fd:73:ad:77:fa:4e:ee:1e:ca:0c:45:
                    e8:34:56:bd:1c:a0:79:b5:e6:c3:b9:07:71:ef:0c:
                    40:d1:3a:77:f2:e3:1a:6d:d0:0c:54:36:38:9d:a7:
                    89:28:05:cb:cd:15:9b:71:fe:cc:62:0c:21:c5:72:
                    48:b1:51:2d:90:0c:13:1e:2a:e2:52:75:13:d5:d9:
                    1a:f1:6b:41:22:4c:5a:62:40:e5:ae:d5:82:dc:c6:
                    06:8c:f7:ef:06:bc:b1:41:1c:fb:fb:79:a0:b3:c4:
                    49:45:0d:d3:1f:22:fc:55:79:aa:cf:34:4b:2d:5b:
                    f4:b4:38:f4:b6:a2:d3:5c:b8:86:91:1a:c8:cf:e3:
                    e8:c6:14:04:9f:02:1c:02:79:81:78:91:b9:6a:70:
                    28:7d:8d:91:d4:3e:26:d6:f8:9f:74:e3:d4:d6:fe:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:91:05:EF:BA:F8:8D:75:31:6E:C5:DE:4F:23:81:4A:5E:14:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/a86dea4f-5f6f-32ae-8a25-ead4a4dba2ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.crl

            X509v3 Authority Key Identifier:
                keyid:D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.228.0/22
                IPv6:
                  2620:11d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:fe:27:6c:15:9c:9b:c5:7b:96:a8:59:b1:79:99:6a:8f:
         32:9e:c9:92:b7:b5:0b:90:f9:06:90:32:78:ba:61:48:e8:9c:
         2e:ef:8a:78:e7:2c:7d:b0:bf:78:66:fc:61:65:2b:ab:b9:f5:
         16:7b:bb:86:aa:b4:76:eb:bd:73:fa:bf:de:b3:f3:0c:43:6b:
         13:ac:08:6b:69:6d:fd:1f:43:33:d0:bb:1a:fe:c5:0c:e4:aa:
         3b:51:e0:65:8f:28:56:a5:df:03:a6:91:22:f7:fc:84:64:75:
         9f:e8:92:bf:2a:71:2d:39:c6:e7:37:5b:b7:3c:2d:16:d7:45:
         f4:fe:f6:7f:1f:1f:58:c8:fe:62:ad:ef:52:1e:34:9e:8e:09:
         9d:05:f4:37:d4:bc:91:8d:76:20:6c:18:df:f3:6f:63:b6:d4:
         b8:41:97:6a:dc:d1:5f:9c:1b:07:32:3c:2c:90:b0:62:f2:7c:
         35:6e:ab:c4:53:9b:07:80:eb:53:3b:7c:b3:09:fb:62:3d:f2:
         36:5b:de:40:8e:9c:58:ef:9d:02:8d:d2:6a:0f:31:d2:6d:e1:
         03:f9:0c:1f:7b:f6:04:d2:e5:8c:e9:6c:89:f0:35:2c:fd:71:
         34:62:28:28:9b:fd:e4:16:9e:03:12:dc:52:3b:8d:e2:08:30:
         28:fd:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:07:55 2026 by rpki-client