Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
File:                     0420671e-3982-3344-9b47-51bea31f38a2.roa (raw, json)
Hash identifier:          imPCDzHDY/iURhQLc7vre0F0iVU6PpeCGrs/4huCUXk=
Subject key identifier:   D1:33:71:49:D9:08:6B:D8:3D:80:47:AF:3E:20:50:D4:E3:0C:AE:EE
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584EA790ACB6889AF6D1CB9605C0
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33548
IP address blocks:        104.200.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:ac:b6:88:9a:f6:d1:cb:96:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=55ee04c9-1637-4854-b2b2-8826d73848fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:79:aa:bc:74:70:15:34:20:27:b6:b4:d0:
                    3e:41:44:04:a7:f0:d0:dc:dc:35:6d:9c:62:7d:c5:
                    13:ca:16:ca:05:e7:df:66:c5:ca:ea:35:45:ef:73:
                    a4:e3:26:6b:82:ea:e2:3e:3c:65:5c:f0:97:d8:6e:
                    93:c9:a6:c0:6f:77:d7:45:64:8c:d9:8c:0b:37:65:
                    0c:8b:5b:91:a3:d3:35:f4:a7:fa:5f:de:e9:5b:f8:
                    6c:f7:ed:e0:25:6a:8d:6b:b9:c5:d1:d8:57:8f:8c:
                    92:c5:f8:cf:da:41:83:d4:fc:ce:ec:ab:6e:1d:38:
                    74:6f:43:a2:83:0a:82:aa:3b:86:a4:ae:e8:89:3f:
                    04:4e:4c:ce:22:c2:b4:00:aa:e5:23:ec:e2:2c:3f:
                    2b:90:63:04:7c:d8:ef:b5:5c:e0:4f:fc:7d:96:a2:
                    93:c2:8c:bd:21:03:f2:f6:f9:fd:71:03:cc:d2:d4:
                    3c:48:fc:2c:54:58:45:40:3a:f5:bc:50:76:6e:7a:
                    77:b7:0f:c8:03:33:97:95:c1:53:b7:55:d0:30:5c:
                    52:2d:90:ac:73:45:70:e8:e5:5d:d5:95:7f:fe:cf:
                    33:98:4d:e3:83:6d:ab:8c:2b:ee:69:39:f2:f5:e7:
                    41:7b:65:ac:d4:7f:5b:2b:c3:fb:cc:99:fe:53:38:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:33:71:49:D9:08:6B:D8:3D:80:47:AF:3E:20:50:D4:E3:0C:AE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:42:fd:f9:94:cd:fe:52:5a:88:7e:2d:5f:85:5d:85:d2:41:
         29:de:93:49:ac:14:ee:00:7e:92:ae:3f:f1:28:3f:f7:41:25:
         a4:a5:90:fb:0e:1f:5a:6d:a6:12:34:61:c2:49:c0:4f:e6:f2:
         08:01:b5:2b:ef:3a:f8:64:16:20:18:0e:54:85:15:be:5e:fe:
         12:15:13:f9:f2:d0:0f:f7:7d:37:ff:52:f6:ab:28:91:af:f3:
         42:45:28:20:6b:81:a3:22:89:93:d4:b5:ed:00:56:34:96:ed:
         0b:04:4f:ec:1a:93:43:f4:0a:a7:7d:ae:7e:b3:04:97:07:0d:
         7d:7f:6c:62:77:6b:92:7a:4d:8f:2a:06:d7:1d:92:47:3f:c3:
         b8:78:03:14:9d:ed:9b:8d:ec:a5:97:ba:0e:00:0c:60:19:53:
         c3:d2:96:f9:a3:06:d4:29:c4:59:2c:b4:7e:ed:38:28:f4:86:
         03:de:de:ca:7b:cc:af:3e:22:50:bd:75:0a:1c:4d:59:35:a4:
         ad:db:0d:76:c4:66:49:e5:b9:fa:16:cf:e9:89:76:d0:66:2c:
         9b:2e:b6:fe:46:a0:99:74:b8:45:83:55:3c:d7:5e:be:ca:27:
         4d:43:36:86:8a:c5:c3:7c:82:36:af:b8:e4:3e:2e:f1:67:ce:
         bc:da:0a:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKy2iJr20cuWBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTVlZTA0YzktMTYzNy00ODU0LWIyYjItODgyNmQ3Mzg0OGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfp5qrx0cBU0ICe2tNA+QUQEp/DQ3Nw1bZxi
fcUTyhbKBeffZsXK6jVF73Ok4yZrguriPjxlXPCX2G6TyabAb3fXRWSM2YwLN2UM
i1uRo9M19Kf6X97pW/hs9+3gJWqNa7nF0dhXj4ySxfjP2kGD1PzO7KtuHTh0b0Oi
gwqCqjuGpK7oiT8ETkzOIsK0AKrlI+ziLD8rkGMEfNjvtVzgT/x9lqKTwoy9IQPy
9vn9cQPM0tQ8SPwsVFhFQDr1vFB2bnp3tw/IAzOXlcFTt1XQMFxSLZCsc0Vw6OVd
1ZV//s8zmE3jg22rjCvuaTny9edBe2Ws1H9bK8P7zJn+Uzjm8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEzcUnZCGvYPYBHrz4gUNTjDK7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMDQyMDY3MWUtMzk4Mi0z
MzQ0LTliNDctNTFiZWEzMWYzOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhC/fmUzf5SWoh+LV+FXYXSQSnek0msFO4AfpKuP/EoP/dBJaSlkPsO
H1ptphI0YcJJwE/m8ggBtSvvOvhkFiAYDlSFFb5e/hIVE/ny0A/3fTf/UvarKJGv
80JFKCBrgaMiiZPUte0AVjSW7QsET+wak0P0Cqd9rn6zBJcHDX1/bGJ3a5J6TY8q
Btcdkkc/w7h4AxSd7ZuN7KWXug4ADGAZU8PSlvmjBtQpxFkstH7tOCj0hgPe3sp7
zK8+IlC9dQocTVk1pK3bDXbEZknlufoWz+mJdtBmLJsutv5GoJl0uEWDVTzXXr7K
J01DNoaKxcN8gjavuOQ+LvFnzrzaCkc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:38 2026 by rpki-client