Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/12da28d2-a952-35df-a556-843572b4f54c.roa
File:                     12da28d2-a952-35df-a556-843572b4f54c.roa (raw, json)
Hash identifier:          LV8jKG51kRG0oFlhA1OQsPeE/mehFN803C1+p2BFt7Q=
Subject key identifier:   9D:6B:5E:C1:66:63:D9:88:03:71:57:C2:CB:2D:D8:A0:97:4B:63:9C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ADA64D13A1C04F15107362D40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/12da28d2-a952-35df-a556-843572b4f54c.roa
Signing time:             Thu 14 Aug 2025 11:10:07 +0000
ROA not before:           Thu 14 Aug 2025 11:10:07 +0000
ROA not after:            Wed 12 Nov 2025 12:10:07 +0000
asID:                     395793
IP address blocks:        104.206.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:64:d1:3a:1c:04:f1:51:07:36:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 14 11:10:07 2025 GMT
            Not After : Nov 12 12:10:07 2025 GMT
        Subject: CN=6ee3a01e-7543-434c-aba0-24fb8d977da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:62:d4:24:82:ed:36:5e:e6:4c:d2:79:77:
                    d6:a5:45:4f:19:9e:ec:66:4a:8a:b3:e1:32:91:ab:
                    0a:82:2a:df:8b:3c:c3:19:55:c7:b6:6e:c8:e4:f7:
                    9a:19:00:a5:44:4f:23:55:23:11:5b:c7:44:75:71:
                    21:28:8b:23:74:ca:95:ec:a8:c0:b2:a4:37:1e:5b:
                    b2:2c:87:ff:9d:1f:8f:75:77:cf:a1:90:3b:c1:e4:
                    24:45:d2:c6:63:be:41:5a:02:cf:09:3c:2d:3c:e2:
                    92:5c:43:1d:d7:9f:38:93:c2:cf:2c:14:a2:ac:37:
                    42:07:86:b2:f5:32:54:84:15:0b:57:8d:ed:7b:18:
                    3a:7e:65:ea:f2:90:15:3d:8b:b1:08:5b:08:65:3d:
                    d0:6b:ae:1a:79:ea:3d:c4:c3:b8:3d:82:ae:f9:2b:
                    e1:77:2e:83:af:b7:34:46:9c:aa:ff:93:b8:98:12:
                    50:62:0d:aa:f1:6c:c4:91:3d:da:0e:f7:6c:8e:1b:
                    3a:cb:5f:e6:d9:d3:bd:d4:02:ce:9b:3f:07:cf:d4:
                    e9:e1:e8:76:40:68:50:b3:48:52:c8:68:d7:fb:bb:
                    d9:97:b6:f2:01:c9:96:47:6f:c2:1f:14:bf:74:8b:
                    8b:90:cf:df:ec:50:92:2e:d5:f3:f2:1e:73:dd:e6:
                    c9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6B:5E:C1:66:63:D9:88:03:71:57:C2:CB:2D:D8:A0:97:4B:63:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/12da28d2-a952-35df-a556-843572b4f54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:97:23:4c:0b:3d:5d:07:b0:09:c5:73:51:d0:28:07:45:
         d3:32:3a:0e:e4:18:83:3c:5a:cb:e5:78:e2:dd:46:9e:59:e6:
         e4:2f:57:52:18:d7:95:18:4d:ed:3a:40:7e:ea:79:7b:3f:a7:
         b4:3a:9e:2c:b4:93:a3:24:93:92:cc:07:67:5f:88:75:97:a8:
         e2:b0:b0:fc:49:88:8f:ae:f7:f3:66:94:5e:77:72:8e:80:ea:
         2b:5b:38:3d:f8:71:0c:e1:77:b1:35:c5:aa:51:34:07:77:7b:
         f8:72:6d:fb:d7:66:94:c3:c9:f6:cf:24:b1:c6:d3:a0:0a:6c:
         94:66:9e:9d:8f:3f:67:4c:82:06:74:1a:06:5e:26:94:28:59:
         5f:2a:ca:46:f0:2d:31:f6:ac:3d:9f:aa:ca:1e:0b:d7:50:36:
         a5:36:51:80:cd:71:e7:90:63:f0:83:a9:b2:73:78:1d:9b:4d:
         18:3e:06:90:29:5c:87:56:cd:f9:f5:8c:db:a9:0a:76:7e:b4:
         5a:a5:4f:da:a7:78:8f:50:32:d2:48:58:00:a2:d3:38:95:bd:
         10:c6:1e:62:82:28:7d:36:f8:ff:92:a7:8b:8e:ee:3e:ae:ea:
         c3:37:c3:e1:ca:20:ad:ce:f9:7d:71:78:b4:1e:ab:a2:93:aa:
         00:98:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:15:57 2025 by rpki-client