Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
File:                     7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa (raw, json)
Hash identifier:          HOZLweSPwAN2HgC38acrGePu8FJLBUHG5kI92mg6Ip8=
Subject key identifier:   2F:14:7F:A4:E9:D1:CA:8D:8E:41:05:16:4E:BB:63:21:E0:9A:45:A4
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A865711BC9A4FE9ADB9000
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        104.37.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:65:71:1b:c9:a4:fe:9a:db:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=b813bd0a-dd94-4122-8b30-72aa2cfcbf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:c5:97:de:f3:86:50:15:fa:52:c5:a6:70:
                    94:7c:72:46:26:7d:ed:b9:78:bb:a6:d4:a4:f7:70:
                    0d:c9:78:a9:c2:d7:81:d2:73:72:ca:ce:53:45:31:
                    0a:cc:9f:7a:01:d4:4e:bf:a6:b6:7e:76:61:3c:35:
                    8b:1b:ee:29:55:b3:f8:3d:50:d0:56:5c:7d:95:1b:
                    0e:da:4f:4f:67:2e:a5:db:56:1d:a6:e9:7d:64:40:
                    9f:55:63:44:8f:f3:c9:66:90:3c:6e:81:93:2c:0a:
                    75:47:ff:77:2d:6a:67:1d:a7:d5:e3:a1:fb:54:fb:
                    30:d4:3c:1b:93:db:9e:c5:5e:65:cb:7a:cc:f0:49:
                    dc:36:d9:20:0f:a6:36:64:6c:83:79:70:35:1a:e1:
                    7b:71:a4:dc:37:e4:a1:3c:76:40:e2:ea:ef:f9:0d:
                    15:fc:c5:b4:6f:4f:a7:5d:e3:d8:1c:cb:18:e5:f9:
                    88:f3:12:8c:a3:26:8b:dc:1b:81:83:9c:5c:db:0d:
                    e7:28:0d:1f:76:a1:e2:84:5d:63:5d:1c:7d:73:ae:
                    45:80:2d:3a:96:dc:57:a9:9e:0b:5e:2b:bd:e8:5a:
                    c0:64:2c:a0:69:18:99:29:3f:5b:b9:ea:e8:5a:bb:
                    7c:83:7c:ff:51:6d:e0:98:2b:70:33:08:de:a8:9d:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:7F:A4:E9:D1:CA:8D:8E:41:05:16:4E:BB:63:21:E0:9A:45:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:29:9f:67:7e:ba:2a:9b:3a:79:4f:67:de:92:c3:59:4a:32:
         38:29:94:2b:74:be:0c:7e:b1:2d:87:0f:fc:c7:e2:ef:8d:1e:
         8b:e8:5e:77:dc:dd:0f:3c:0b:7d:74:17:7b:49:2c:1e:67:53:
         5c:c8:39:c2:9f:7b:e7:3f:7b:b6:12:31:36:a7:9c:39:2f:c9:
         db:b4:23:a6:18:4d:fb:4d:e2:d0:76:c1:38:b0:8a:df:49:6f:
         cd:fa:7c:57:2f:61:f3:1e:b6:6c:68:3c:28:0a:ff:71:25:28:
         e1:8b:0e:94:19:18:31:b2:1c:f9:d0:a4:6a:5a:34:f3:1e:a5:
         09:a3:58:3b:f8:0a:9a:90:c0:31:28:c5:16:e1:11:ac:8b:8e:
         e9:13:e6:af:d5:19:8b:1d:fa:63:cd:06:8d:fa:c0:6f:cb:18:
         df:a8:fd:45:b9:4c:07:18:d6:bc:8a:fe:0a:bf:45:76:eb:8a:
         22:52:9e:06:ee:5e:d4:c7:02:a4:7a:b6:46:34:1e:dc:69:99:
         c5:c6:7e:2d:9f:ac:b9:52:09:10:8a:70:d8:46:c9:cc:51:ce:
         27:85:8a:9c:bc:56:5b:38:cd:2f:2d:e1:63:e6:27:e3:b1:72:
         7a:c8:c9:de:f0:83:a1:54:15:ae:00:9e:4a:fa:a4:9e:dd:66:
         36:13:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:38 2026 by rpki-client