Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa
File:                     904cd764-8a25-3dbf-811e-47b34115b923.roa (raw, json)
Hash identifier:          SjjLnd1X7ljS269hHauy21tm3AqalaIq1GKqv0B/KWs=
Subject key identifier:   80:DF:0D:51:34:9C:88:E5:68:FB:51:3F:82:B5:BB:3F:C2:64:EF:4D
Certificate issuer:       /CN=87a7a98d-6ed8-48cc-953b-32292e94edde
Certificate serial:       010D0C9F4328584DF4DB50FE9F92F6B76B3ECD80
Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     393499
IP address blocks:        104.37.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:50:fe:9f:92:f6:b7:6b:3e:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=72a8076b-cb2d-4991-b7f2-4df4d9f5adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:9a:eb:e0:d1:1f:b7:4e:45:ff:3f:1e:06:
                    fd:b2:6a:e0:e7:50:a2:1f:d4:08:82:40:16:b0:bd:
                    e0:77:6c:5c:f0:a9:cd:a1:e9:1b:43:d2:8b:4e:c7:
                    6e:4a:5a:a1:f5:2a:a5:16:07:b0:f9:af:f7:95:ac:
                    72:11:3b:11:26:cc:cb:f9:cf:f1:85:34:77:ab:4e:
                    02:a9:9a:77:4d:17:18:48:48:ba:1a:8a:7c:7a:7e:
                    cc:6f:56:5c:aa:b0:1c:83:fd:52:60:4d:cc:21:31:
                    cf:93:99:68:a9:a0:c1:80:76:cd:12:37:24:43:9c:
                    b4:bd:59:e2:c2:af:c0:82:c7:09:67:53:08:bc:4c:
                    4a:ba:61:d5:a8:94:75:c7:6a:47:cd:9b:d7:23:9e:
                    94:5b:b4:0b:11:a6:98:23:9c:4d:45:11:ab:5c:cd:
                    e3:4e:4e:01:d9:4a:90:09:d6:33:8e:41:55:61:53:
                    3c:bd:09:e4:64:59:69:00:a1:e5:41:cb:c4:27:b6:
                    38:18:02:3d:af:6b:0a:7e:5c:aa:ab:ee:bc:b1:8d:
                    70:81:a7:f2:63:4a:1c:d5:d9:ca:cc:71:37:01:ac:
                    ad:ef:aa:c6:c4:9f:ee:39:ca:b7:eb:8d:76:53:0b:
                    9b:92:56:51:ee:c6:73:1a:e1:ee:85:33:6b:e9:e5:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:0D:51:34:9C:88:E5:68:FB:51:3F:82:B5:BB:3F:C2:64:EF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl

            X509v3 Authority Key Identifier:
                keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1b:b9:be:a0:f0:f7:fd:56:cc:67:27:e6:c0:b3:ec:04:59:
         a9:ce:b2:b4:a6:9c:f8:f1:e8:a9:36:8e:b0:7c:dd:d7:2a:a8:
         e7:bc:a4:11:bc:68:e4:44:8b:94:aa:73:8a:f8:d9:63:e6:90:
         68:c4:99:b5:e5:fe:8b:6f:07:16:d5:a9:40:f7:36:6c:38:17:
         9e:02:eb:32:7b:79:fd:1b:78:a0:a3:ee:8a:d2:de:59:2e:b2:
         29:45:ac:6b:23:3f:ed:f4:23:d2:4d:3b:d0:ec:4c:8d:50:44:
         17:b8:2e:a5:a5:dd:1b:e5:45:7f:72:39:72:bf:3b:cd:88:26:
         51:5f:e8:71:af:5a:70:54:bb:bc:71:d2:83:00:24:a0:0a:4d:
         c7:b0:66:bf:f0:33:3d:4f:b0:dc:33:14:35:86:45:bc:82:18:
         3e:5e:3c:0d:e2:88:71:d8:07:54:da:be:b8:e6:76:56:fe:b5:
         79:f0:4d:ba:fe:95:fb:7c:c8:fa:98:3b:c2:51:91:d1:af:e2:
         85:21:41:6a:68:be:8e:00:38:f2:cc:fa:7b:f0:c7:4a:30:ae:
         4b:6d:e0:84:b9:66:b3:f2:13:37:d9:e3:2c:ca:bc:77:25:76:
         f3:4d:b0:4e:aa:61:06:0d:95:7b:0a:17:93:b0:0d:50:e2:f7:
         3a:a7:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:49 2026 by rpki-client