Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File:                     6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier:          gTAzrpK74qXeVkL6W8HXOgKdktOJW8qnD0SFlX9b2cI=
Subject key identifier:   D4:B9:18:35:01:01:DA:CE:ED:87:C0:DF:34:86:62:13:27:BD:F4:DA
Certificate issuer:       /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial:       010D0C9F4328584E296F0E082FB8FED8D5148880
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     46886
IP address blocks:        104.36.252.0/22 maxlen: 32
                          104.193.128.0/22 maxlen: 32
                          158.51.192.0/22 maxlen: 32
                          165.140.16.0/22 maxlen: 32
                          170.178.140.0/22 maxlen: 32
                          2602:ffa4::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0e:08:2f:b8:fe:d8:d5:14:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=4baf7c4a-a86c-4f3a-8864-661270828ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:e0:53:11:53:be:d9:09:76:3c:bb:cc:1e:
                    54:58:64:60:86:cb:10:c6:a1:a0:42:8f:6d:49:51:
                    ad:c9:10:0e:83:80:33:60:4f:0b:cb:20:58:68:3e:
                    a5:d1:d9:e6:3d:50:2b:2a:f5:18:34:9f:87:fe:02:
                    84:43:35:72:b4:e4:c4:eb:3c:79:54:ff:92:f8:1b:
                    0c:cb:94:b6:50:39:9c:dc:df:67:d0:ea:77:51:2e:
                    43:2f:3a:6a:8c:37:51:ef:02:5c:b5:8e:dc:22:43:
                    a5:2a:d2:fc:09:9c:c1:ea:66:dd:62:d1:7f:ba:10:
                    8c:6c:ef:5c:7e:56:32:4a:68:56:02:e6:2a:14:69:
                    56:1b:99:e3:20:9b:90:ed:49:76:3b:0a:19:01:54:
                    93:a1:aa:83:70:17:21:58:5b:f9:35:a7:e4:b8:c8:
                    ac:1d:d7:84:3a:ab:9a:d5:19:81:05:c8:10:fa:a5:
                    1c:b1:2c:4f:25:54:4b:4b:be:0c:46:78:d8:65:44:
                    31:f8:11:6d:6f:8f:18:12:4c:eb:5e:87:c7:34:1e:
                    c2:53:4e:12:08:e1:38:e5:bd:ee:33:ae:05:20:29:
                    c5:a0:60:4d:e1:05:92:56:71:29:ec:5f:ed:a7:46:
                    fa:df:cf:34:6c:6a:02:72:b8:30:18:83:d8:3a:d8:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B9:18:35:01:01:DA:CE:ED:87:C0:DF:34:86:62:13:27:BD:F4:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl

            X509v3 Authority Key Identifier:
                keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:6e:37:fb:d5:bd:01:2d:55:1f:45:c4:31:f2:83:70:de:
         01:d5:74:49:d8:b5:83:ca:d6:27:d5:6b:0d:a2:a1:17:93:11:
         ed:e8:65:8d:b7:69:f5:e0:8d:bd:86:b5:2b:b2:e5:31:68:60:
         4a:3f:be:f2:7c:e9:96:c0:ab:e3:23:3b:b3:af:f9:54:d7:df:
         5c:7b:9e:23:de:6f:a2:99:97:c9:2d:41:13:78:6a:3b:8a:9f:
         0c:2b:3b:bf:01:10:3f:59:0c:bf:37:e8:c1:89:e0:49:8b:1c:
         88:bd:6b:d1:e8:5a:87:f6:ee:3c:83:aa:8b:d4:db:61:b5:a8:
         bb:1a:28:91:21:c6:1f:a8:ef:ae:9f:65:c6:0e:8f:9e:1d:33:
         72:14:b6:e9:3a:68:77:68:c2:d8:31:00:cd:c4:b5:1b:da:49:
         fd:9f:84:bf:37:36:96:8c:78:a4:97:35:01:7a:57:26:d4:bc:
         48:d2:de:af:35:9a:49:bb:c7:e4:20:85:45:62:0f:33:bc:dd:
         88:65:23:06:de:20:eb:56:6b:3c:1c:76:d3:f7:3d:da:ea:97:
         53:09:38:23:0a:a4:49:2f:32:30:c7:3e:89:0d:2e:75:0c:1d:
         3a:b3:81:16:70:4b:42:62:8a:66:b9:d8:3d:2e:2f:0c:04:c3:
         34:cb:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:57:15 2026 by rpki-client