Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
File:                     89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa (raw, json)
Hash identifier:          O5aYCZddwyl51CBWJXgQu+sVOAo/GjASZ/a24rbHL1Q=
Subject key identifier:   75:90:0B:BE:BF:3E:5A:C3:98:C2:2E:8E:5D:A6:A4:BF:4A:55:AD:E5
Certificate issuer:       /CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
Certificate serial:       010D0C9F4328584EA787F3E4DCED84EBDBF96500
Authority key identifier: 6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395945
IP address blocks:        104.36.72.0/22 maxlen: 23
                          2604:7840::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f3:e4:dc:ed:84:eb:db:f9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=68403ca1-f972-4db5-b2e6-71eb664a7c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:69:4d:35:22:a5:68:f6:5b:29:6d:ad:7a:
                    35:66:94:32:1c:76:cc:8f:5d:4e:3d:a0:eb:aa:df:
                    f5:a1:19:d4:6d:72:6e:0f:a2:80:20:46:e7:85:92:
                    59:fc:65:61:71:9e:04:f3:99:de:5f:33:ab:06:71:
                    21:2c:ba:c7:d2:82:65:47:7e:b1:96:23:81:42:30:
                    b4:b8:05:b3:85:e9:ef:fd:28:c1:5d:2d:ef:2e:32:
                    16:b4:07:f8:0d:dd:f5:e9:24:cc:94:f9:13:a6:9c:
                    39:ab:24:61:9e:72:10:2e:33:c9:57:a5:15:d7:19:
                    8b:f4:d5:fe:1a:0b:ef:53:74:fd:69:1f:6c:5d:7a:
                    a6:c2:ed:90:89:df:37:79:26:de:54:ef:1c:ee:a9:
                    4d:d8:56:55:be:63:6c:ad:d5:48:d4:3c:45:a4:a2:
                    e8:29:5c:1f:98:8d:2f:cc:0b:76:51:66:41:26:53:
                    49:6f:1a:4e:75:79:db:a5:e1:9c:f6:17:4e:dd:2c:
                    1e:ed:0c:ec:37:20:65:05:d6:eb:d0:49:97:8e:d1:
                    85:74:e9:da:ab:20:96:10:7b:78:54:20:38:31:f8:
                    63:65:b5:af:a5:05:78:39:0d:bd:17:06:03:e7:f6:
                    bc:21:54:d8:81:c9:54:a7:24:f6:b7:2f:a9:89:d3:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:0B:BE:BF:3E:5A:C3:98:C2:2E:8E:5D:A6:A4:BF:4A:55:AD:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl

            X509v3 Authority Key Identifier:
                keyid:6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.72.0/22
                IPv6:
                  2604:7840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:64:1f:91:09:8f:91:2c:5a:01:24:20:ee:ba:b9:a7:ce:
         ab:d8:53:a3:22:53:ab:41:e8:f0:1e:4f:62:5f:aa:6f:46:db:
         43:1d:ee:0d:b0:7e:14:4a:eb:96:a8:08:a2:af:22:5d:bd:52:
         5a:52:a1:20:3a:00:77:e3:69:02:21:a0:5b:15:e7:a9:34:dd:
         9b:d2:80:2c:6e:d7:a7:da:79:f8:21:ed:18:98:20:2a:db:8d:
         07:b4:31:b4:91:a0:b8:ad:54:8b:49:ce:01:6c:2c:da:47:ac:
         fc:86:a0:54:a5:e1:a4:40:3d:8f:1f:14:a5:85:9a:e8:32:f3:
         f3:98:49:21:8b:5f:f2:3f:38:36:e5:bc:d7:59:3d:5e:1a:e1:
         2d:eb:54:0b:d2:22:c8:9d:e3:8a:9b:08:4c:21:40:58:b5:ec:
         65:f7:d4:68:90:2a:11:0c:aa:e6:f9:ef:70:08:73:84:18:a3:
         64:da:72:ba:9e:f6:a7:0f:1c:5f:a3:3f:e9:fe:a4:c3:d4:71:
         15:5a:43:aa:08:29:da:0f:a9:ba:74:15:e1:03:68:a7:05:f9:
         00:dc:91:bd:4e:b4:c3:be:9f:c5:f1:ae:92:83:cc:5d:7f:12:
         da:11:c2:62:f8:6c:7f:99:b5:48:d9:68:4f:fc:75:01:36:9b:
         08:25:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 04:16:01 2026 by rpki-client