Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/24cdf3b1-1ef5-3149-bf36-261681721fe8.roa
File:                     24cdf3b1-1ef5-3149-bf36-261681721fe8.roa (raw, json)
Hash identifier:          M3dTY5B2XRUDSnPg/WsxMYJpFS4/l+WG3HEJnFIDePQ=
Subject key identifier:   A4:6D:DE:F8:84:B0:54:E6:0E:D7:22:DB:98:0F:67:24:AA:FE:1C:C8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F597909A4BB02F2489FDCDA80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/24cdf3b1-1ef5-3149-bf36-261681721fe8.roa
Signing time:             Wed 30 Sep 2026 18:46:16 +0000
ROA not before:           Wed 30 Sep 2026 18:46:16 +0000
ROA not after:            Tue 29 Dec 2026 19:46:16 +0000
asID:                     62904
IP address blocks:        104.206.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:79:09:a4:bb:02:f2:48:9f:dc:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 18:46:16 2026 GMT
            Not After : Dec 29 19:46:16 2026 GMT
        Subject: CN=605c0010-556c-429b-afd2-ede77664231d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:2d:29:51:30:eb:65:80:2f:68:c9:44:88:
                    e1:6a:20:b3:c0:bf:87:12:47:53:4f:29:9d:82:a8:
                    c9:97:a8:c5:1f:4a:ed:65:cf:67:44:79:c4:7e:30:
                    a8:6c:86:77:0c:a5:01:31:ed:5e:88:05:7f:0d:81:
                    83:62:42:95:dd:fe:3e:67:2d:01:80:95:cc:98:47:
                    78:d8:72:da:d4:e4:93:75:a4:c1:ab:e9:74:1f:d9:
                    fb:14:3b:56:f6:f7:36:26:d2:59:74:fc:e4:4c:f7:
                    d4:53:88:e4:97:e0:f7:49:c7:65:84:32:05:56:c9:
                    69:08:36:f4:be:21:f9:6d:27:de:eb:84:a6:60:7c:
                    1e:a2:23:de:15:dc:24:cd:c0:1d:7e:7e:92:0d:77:
                    14:18:ca:0e:ba:55:9c:8d:a4:34:21:bb:16:1e:39:
                    9d:c6:11:64:46:45:e8:8f:af:65:82:6e:82:48:c9:
                    1a:6e:bf:b4:95:bd:f3:06:49:bf:45:0b:c3:9d:23:
                    00:42:c1:49:19:7f:6b:f2:6d:7e:c9:11:9d:9c:07:
                    5c:ba:80:88:73:c3:e7:49:85:b3:55:ab:07:1c:b3:
                    dd:63:45:a9:75:37:45:28:5a:5a:f0:3f:65:2d:e6:
                    31:e2:7c:95:e7:13:e6:37:e6:dd:da:28:cd:23:48:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:DE:F8:84:B0:54:E6:0E:D7:22:DB:98:0F:67:24:AA:FE:1C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/24cdf3b1-1ef5-3149-bf36-261681721fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:d4:70:0d:8a:ac:9c:52:b5:50:12:2d:3d:07:a3:f2:dc:
         46:f7:52:9a:26:6e:11:7b:9a:6c:60:d2:e0:3b:57:7e:b9:a4:
         b6:d8:65:b3:bc:0b:c0:1b:3c:52:e0:25:b3:53:82:49:23:82:
         00:59:cf:5c:a3:63:e7:3b:67:c3:9d:97:e0:9b:9c:b0:8b:8d:
         6e:18:67:75:fb:5c:f1:51:6e:52:2a:55:a6:9d:2f:e3:38:2d:
         d9:13:35:f1:e1:7b:87:a0:97:78:ab:01:9b:53:a7:cb:b0:3a:
         2e:e8:5c:1b:44:91:cb:04:65:f3:a2:78:4d:57:ec:bf:a4:f0:
         8e:0d:a4:73:07:f4:a2:3b:47:2d:6f:4b:7d:af:56:78:27:e9:
         67:e6:00:88:f9:b6:e7:19:ca:45:42:57:49:ab:71:37:d4:8c:
         4f:4a:87:03:23:25:98:c4:03:7a:f8:ff:84:87:08:25:9e:66:
         bb:19:26:81:d2:0f:cc:dd:f3:f6:82:09:f8:58:f8:d6:71:81:
         92:a8:98:4d:2f:7c:a0:c2:f4:5d:5b:8c:e9:d4:36:46:1b:24:
         d5:82:ff:3e:09:71:22:c3:da:dc:08:10:33:a0:d4:f2:2d:cb:
         46:f8:6f:cf:16:7c:84:c4:bb:c0:cb:86:54:0d:16:fc:c4:ae:
         92:eb:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:05 2026 by rpki-client