Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/6003862d-d0da-33c6-9732-f7eb77bdde76.roa
File:                     6003862d-d0da-33c6-9732-f7eb77bdde76.roa (raw, json)
Hash identifier:          cfIeUGkRjYbvAt6p/KxO33pacO61SCTyPRGBn79V9eE=
Subject key identifier:   C8:8C:17:9C:EA:CE:FF:FB:2C:8C:67:AE:05:2F:4B:1E:DE:AF:22:4E
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2C46A2756854467F335C2980
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/6003862d-d0da-33c6-9732-f7eb77bdde76.roa
Signing time:             Mon 14 Sep 2026 14:13:20 +0000
ROA not before:           Mon 14 Sep 2026 14:13:20 +0000
ROA not after:            Sun 13 Dec 2026 15:13:20 +0000
asID:                     53610
IP address blocks:        104.219.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:46:a2:75:68:54:46:7f:33:5c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 14 14:13:20 2026 GMT
            Not After : Dec 13 15:13:20 2026 GMT
        Subject: CN=28645ff5-df7a-4a7f-86ff-210433a3fdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:b1:d7:ae:2e:e3:85:45:6c:ac:70:67:cd:
                    88:7c:9e:01:36:e4:08:3f:8d:48:f4:02:85:45:39:
                    2e:63:12:38:f3:af:78:46:16:80:36:dc:ed:41:44:
                    73:b1:d3:5c:47:69:de:66:24:ac:f3:19:4f:df:d6:
                    6a:db:81:35:98:e6:45:31:31:99:d9:da:f7:37:8d:
                    c2:49:aa:ed:f8:f4:2a:da:8b:bb:31:13:bc:b7:d9:
                    cf:04:2f:d6:5f:a0:7d:df:c7:c4:28:71:df:86:cf:
                    95:ca:74:f0:2c:40:a9:18:a1:e2:55:4d:a7:f6:3b:
                    de:d9:23:b2:1c:81:f3:3f:4c:64:16:e8:df:bf:a8:
                    10:3f:17:e0:5a:c0:76:b9:af:62:49:6b:1d:fa:7f:
                    97:fb:27:2e:2b:6c:73:59:b5:9d:8f:8c:02:86:d3:
                    3c:b1:16:ad:3f:5b:24:64:30:ea:42:a4:f0:ce:42:
                    6d:73:c7:17:f8:1d:d4:94:91:bc:a7:9b:a8:32:34:
                    fe:fc:03:54:c0:e1:f0:18:59:4f:58:61:b0:0f:e2:
                    2e:dd:bb:17:8b:98:96:28:be:1d:a2:44:54:cd:8f:
                    c4:32:d7:2d:e8:ec:b0:5d:6f:4f:bc:5f:ff:b1:24:
                    9e:6a:b4:82:2d:b8:0e:66:42:d0:00:c9:46:65:de:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:17:9C:EA:CE:FF:FB:2C:8C:67:AE:05:2F:4B:1E:DE:AF:22:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/6003862d-d0da-33c6-9732-f7eb77bdde76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:91:17:60:41:16:ce:e1:6d:29:71:36:73:a6:5d:ba:54:
         9e:f2:5a:aa:21:08:5d:23:32:40:0c:f6:21:60:23:ae:4b:f0:
         e1:03:2f:d1:02:25:ce:65:1b:2d:bf:34:84:a0:b4:4b:2d:1b:
         a7:5e:e0:d1:36:c1:57:42:6e:ab:47:e4:d2:af:da:58:87:b5:
         7b:9a:a4:26:fa:2b:90:24:db:61:c3:78:5c:2b:c8:b7:32:86:
         00:21:77:f8:e9:de:7b:5c:cb:0e:60:20:7b:3e:be:b1:0f:5a:
         60:c7:77:e9:d7:34:f0:fd:b3:41:3c:9e:29:8c:8f:67:2e:c9:
         ff:af:b9:d0:92:79:d0:5a:fc:bb:df:6b:53:cb:c7:4e:88:7c:
         a0:39:9b:54:6e:27:40:1f:fe:83:3d:75:f1:35:2c:3b:1e:6f:
         71:8a:17:01:18:79:99:74:0f:63:83:ca:83:08:bf:6c:70:aa:
         c3:9f:13:fc:3e:c6:2e:49:d7:16:33:b5:71:65:9d:7b:b1:94:
         ab:81:5f:83:43:90:ed:22:f5:50:8a:5f:35:89:0a:b0:6c:94:
         08:3f:61:34:ea:57:dd:e7:c2:56:2b:ee:65:ea:7b:96:cb:62:
         f2:8c:7d:c2:fd:31:52:9a:7b:f1:1b:eb:ea:f6:c6:42:a0:77:
         9e:b7:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:26:33 2026 by rpki-client