Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa
File:                     ab376764-b694-3baa-a49e-bd5c96338fd9.roa (raw, json)
Hash identifier:          qXrmW4xsqJNJK5xlk9zM3FrZVOX+bwzv51x4qU4xKCs=
Subject key identifier:   6F:D9:87:96:81:08:C1:90:1E:A2:20:DF:AA:AC:9C:B5:15:35:9C:EB
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F4328584E15E46D2D18920DCF892E6680
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     36001
IP address blocks:        97.107.32.0/20 maxlen: 24
                          104.192.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6d:2d:18:92:0d:cf:89:2e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=33a0d315-a5d8-4ba4-95e5-9c5288933be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:46:a5:c2:7e:db:85:9b:56:65:f1:07:10:
                    fc:72:f5:27:c4:57:82:91:1c:74:ed:84:78:98:cd:
                    35:f2:32:e6:31:56:e4:08:a8:23:c0:41:7a:c9:0a:
                    59:2d:46:ce:13:0e:65:45:1a:b7:12:6e:22:32:c0:
                    71:21:6e:75:28:44:2c:85:2e:52:72:b3:ac:92:75:
                    72:02:3a:0e:8d:cb:9a:93:42:48:0c:11:38:5d:35:
                    34:5b:8d:99:07:ba:a2:49:19:03:c6:96:31:05:67:
                    34:dd:09:82:39:23:d8:3e:21:6a:c7:de:22:90:e0:
                    8f:75:1f:a5:98:43:72:fb:6b:9c:71:2b:a0:65:2f:
                    b7:71:3f:09:80:94:cd:7e:d7:b2:4e:a8:cc:58:d5:
                    fb:bd:43:53:1a:81:2e:be:c2:3c:30:1e:9f:9b:80:
                    f8:eb:07:85:d3:41:14:39:09:6c:37:39:95:cd:40:
                    67:00:d9:67:b3:71:e4:6c:b9:54:76:b1:a5:cf:ff:
                    0e:4e:dc:1c:4b:4a:49:01:c9:d4:7d:37:2b:3b:be:
                    17:ea:79:46:bf:53:2f:d7:95:f4:84:25:bc:8c:db:
                    37:29:0b:11:4f:6e:42:43:15:92:b5:45:1c:28:54:
                    4c:32:e6:a7:72:94:07:c2:53:4b:c7:24:76:10:0d:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:87:96:81:08:C1:90:1E:A2:20:DF:AA:AC:9C:B5:15:35:9C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.32.0/20
                  104.192.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:f5:a3:75:7a:f5:6e:c5:03:6a:f7:c5:2a:b8:4e:a3:5b:
         ed:bd:88:81:a2:12:c2:fe:bd:3c:f2:aa:62:7e:b2:57:06:89:
         6e:bd:e0:32:37:e3:2f:c0:55:d4:23:39:7d:3a:66:2e:2a:b7:
         b0:e6:a4:9d:1f:b8:35:c3:3c:fc:eb:6b:66:cb:96:e6:b2:60:
         d2:ff:00:43:de:11:93:0c:48:6f:68:83:9d:e9:d4:a6:e5:b0:
         fb:4c:68:42:3d:6e:f3:21:21:98:d0:78:12:60:11:93:45:cb:
         22:29:81:f1:c8:46:dc:b1:56:50:91:76:0d:d4:6d:54:eb:0e:
         05:75:d5:69:0a:e6:81:ba:80:fd:fc:91:00:26:8b:1b:62:fe:
         15:e8:75:9f:db:71:4b:b6:9e:c9:be:ce:73:2a:69:96:f0:fe:
         7a:1a:92:90:06:2b:e4:1c:37:53:91:16:c5:36:86:9b:a9:65:
         0c:df:a4:77:f5:43:a7:20:3a:44:e4:67:c9:f3:11:28:cb:c7:
         ec:4a:55:68:99:81:1f:89:27:cd:a1:e7:7e:7f:86:de:f2:c6:
         c5:f8:b7:8e:d6:30:cb:37:ef:34:c7:95:83:19:e4:32:b7:da:
         c0:e0:82:2f:31:d1:d4:af:00:c6:77:36:4e:1e:b2:3b:b6:36:
         d2:59:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:17 2026 by rpki-client