Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/260b956a-f076-3386-9647-694190370870.roa
File:                     260b956a-f076-3386-9647-694190370870.roa (raw, json)
Hash identifier:          IvpnwEiGIKYctwefHu484WEAsyNP7P2Ueuag/bPySZY=
Subject key identifier:   CD:D4:9B:EA:46:5C:5E:54:B8:A6:0E:32:99:D3:7A:53:85:DE:14:C3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4D64E07858A8226047499B00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/260b956a-f076-3386-9647-694190370870.roa
Signing time:             Sat 26 Sep 2026 10:55:57 +0000
ROA not before:           Sat 26 Sep 2026 10:55:57 +0000
ROA not after:            Fri 25 Dec 2026 11:55:57 +0000
asID:                     2914
IP address blocks:        104.206.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:64:e0:78:58:a8:22:60:47:49:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 26 10:55:57 2026 GMT
            Not After : Dec 25 11:55:57 2026 GMT
        Subject: CN=11d6cfef-0b55-437d-8795-ffc1cbfd9475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:38:3d:db:9b:19:14:20:7c:94:b5:01:85:0e:
                    6d:7f:65:3d:6e:6e:0d:ae:23:78:22:75:ad:4c:e6:
                    b6:63:c0:3b:ef:c4:a1:52:8a:38:e1:62:b4:1c:91:
                    41:e7:db:37:a7:22:ab:6e:ad:02:06:0d:85:e2:dd:
                    71:57:98:26:e2:eb:c9:b7:b7:84:c6:0e:ae:34:62:
                    33:8a:10:31:d5:0b:e5:de:b4:87:a9:71:a5:18:df:
                    50:1f:66:fc:43:27:c9:f1:2f:6a:fd:f5:60:44:76:
                    11:a0:e7:8a:33:d1:45:c6:e8:95:94:f7:17:da:c6:
                    dd:d6:4e:c8:b9:31:de:2b:f1:92:58:bf:8c:bc:f3:
                    f5:52:f5:00:b8:9e:8b:39:0f:dd:dd:87:ca:19:93:
                    40:d7:48:b8:3a:32:bd:8f:e6:1f:72:df:2e:0b:0d:
                    84:d4:12:0d:b0:59:a4:e3:c7:1b:c1:63:25:b1:03:
                    ce:f3:f9:35:c5:e2:a8:3d:20:cc:4c:3f:49:4b:21:
                    a6:61:7c:b6:e6:5b:1c:c3:83:ba:44:8e:79:56:c8:
                    2d:14:d4:ed:e9:31:1c:71:8e:7f:c7:9b:c5:50:17:
                    31:da:c9:94:2e:7c:6e:83:2d:f9:f1:fd:97:ef:58:
                    36:69:7a:7f:bb:67:2f:71:62:8b:2f:93:e8:05:ae:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D4:9B:EA:46:5C:5E:54:B8:A6:0E:32:99:D3:7A:53:85:DE:14:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/260b956a-f076-3386-9647-694190370870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:da:05:df:fd:f1:35:f1:84:9e:12:cb:4e:26:fd:80:b2:63:
         d6:6b:d3:67:3b:c3:52:e7:c0:a3:80:78:ab:fe:81:74:e8:9e:
         00:5c:e7:52:8c:d7:c0:18:51:ee:fc:cd:2f:8a:ac:60:4b:13:
         19:00:5c:e2:4b:fc:6c:b4:99:e8:86:03:1a:d3:18:fe:96:f1:
         35:9d:46:86:ac:b8:75:13:12:6b:08:0a:2d:e3:53:6d:bd:57:
         90:38:1e:dc:e3:f6:b7:53:cb:33:f9:87:59:11:9e:ad:9e:08:
         1c:f5:a3:90:03:2e:c0:67:8f:79:b7:46:25:2b:3b:87:6f:52:
         e9:8f:83:18:cf:1a:a2:3a:ef:d6:10:ed:c2:d7:dc:47:c7:1e:
         be:2e:73:63:c9:f4:6e:41:a6:8f:fe:a1:b9:c0:47:47:31:30:
         09:9b:68:33:62:b2:b3:d7:7c:c6:7f:f5:94:cc:ff:4a:6d:fc:
         7c:8e:94:da:73:0b:f4:c9:cc:7c:c3:96:3c:6d:3e:70:eb:a9:
         1e:d1:b7:4f:09:bb:1a:eb:d7:90:21:ee:20:4c:d2:48:05:2b:
         7a:1f:7c:25:6e:6e:c7:22:8b:ba:76:41:71:08:de:ac:0a:10:
         dc:29:73:38:9e:71:73:be:8e:5e:7f:8b:63:83:fb:42:13:8a:
         e6:5c:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:36:50 2026 by rpki-client