Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
File:                     26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa (raw, json)
Hash identifier:          alVrXH0h4+qV8Z8lhYZ3SqBZ0QYplD2MWVPYDiRObrU=
Subject key identifier:   AF:4E:B6:50:BC:6C:5C:CD:52:9C:EB:D7:DC:D8:CF:49:D9:72:33:94
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584DEF4602C30697931FE5269A80
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     210630
IP address blocks:        104.36.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:02:c3:06:97:93:1f:e5:26:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=150daf94-1a1c-4dce-8dfd-e288866418d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:0f:45:1a:e3:4f:9d:f6:bd:09:ce:73:24:
                    7a:7e:e0:09:39:ab:02:72:5c:51:84:76:90:f2:99:
                    1d:1e:48:a8:22:d7:2b:74:53:ee:e4:89:5b:10:a7:
                    2c:fd:c0:9a:8c:cd:f9:70:e8:1d:44:00:32:c2:f3:
                    09:41:b1:fd:65:ff:02:db:8f:5d:7d:d7:29:0c:5b:
                    d7:b5:36:b0:75:5f:37:60:c5:96:33:47:86:a8:16:
                    5e:43:56:01:ce:30:80:fa:7e:e7:af:98:75:68:39:
                    2d:4a:dc:44:bd:b3:b0:ae:b8:1f:10:42:c6:a6:ff:
                    a0:0f:88:e1:6a:c9:ec:16:48:29:6d:1c:41:39:d0:
                    f3:bd:80:bb:b1:a2:d9:71:d0:21:3d:ba:6d:34:14:
                    61:7c:d1:f2:9a:fc:4d:b5:9f:87:aa:32:76:43:50:
                    b0:5a:74:fe:5e:0a:65:ea:64:83:38:f4:7c:34:16:
                    64:cd:bb:b3:21:d6:89:2a:e5:f0:64:f6:16:70:ae:
                    30:59:52:5b:e2:35:8a:6c:a9:dc:79:f6:8e:18:9f:
                    d0:73:a1:38:2d:46:2d:d8:c4:63:ee:3c:4d:7b:95:
                    4e:37:6e:16:d0:b5:58:e8:77:98:25:bd:33:4a:00:
                    9b:72:f9:6b:d0:02:cf:39:d3:b2:4b:6f:83:42:d2:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:B6:50:BC:6C:5C:CD:52:9C:EB:D7:DC:D8:CF:49:D9:72:33:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:3d:42:5d:83:86:2d:82:d9:f6:bf:05:d0:1a:85:9f:c3:
         ac:cf:8b:a6:92:e0:63:3d:b7:e5:f5:17:d7:45:39:8e:09:4f:
         29:62:fb:0c:af:7b:84:0a:57:8b:0d:e4:3b:8b:80:ff:a1:bb:
         34:d6:e4:93:a8:de:2b:19:33:1e:c9:a9:bc:68:3a:eb:00:7d:
         85:db:fe:3b:b4:f0:c6:6d:1e:a6:9e:b7:3c:b8:49:9c:cb:0d:
         81:90:4a:22:d5:ba:5b:35:1c:c8:d6:23:39:d6:6a:3a:56:fa:
         ca:56:cb:ac:82:c9:3d:54:ba:67:53:38:fc:27:07:b2:cf:0a:
         97:f1:d5:6b:70:1e:3f:1e:9a:f6:3b:a6:3a:36:a8:42:59:85:
         6b:14:3c:31:3d:b5:60:64:dd:17:23:7c:4e:3f:42:7e:73:34:
         2b:f5:81:79:b9:ee:bc:e4:d4:68:bd:fc:ef:6a:c1:9c:d4:c8:
         a5:6e:22:63:53:33:b8:5f:93:7f:f1:f6:3a:0e:e2:85:b2:02:
         e1:e7:57:41:7b:92:09:98:5c:74:7e:ab:82:49:e5:39:d9:ed:
         d4:5e:91:1d:7f:ef:b7:41:80:90:6d:60:e1:89:44:a3:03:66:
         d5:58:e2:af:e3:ed:f8:d7:3a:f5:b2:10:68:2c:4a:74:6a:0e:
         10:3f:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:57 2026 by rpki-client