Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3228ed43-618f-38a6-88b2-b993ef96cb65.roa
File:                     3228ed43-618f-38a6-88b2-b993ef96cb65.roa (raw, json)
Hash identifier:          JGVXqT2DGPseciNr71u3YsjnndtRL3beBGQmvQ7YAXg=
Subject key identifier:   B0:C2:DE:F6:6F:CE:7A:79:A8:81:BB:7F:95:84:E3:D2:95:7A:0B:B4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6CB6B212D16861F8E209EC00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3228ed43-618f-38a6-88b2-b993ef96cb65.roa
Signing time:             Wed 07 Oct 2026 16:10:52 +0000
ROA not before:           Wed 07 Oct 2026 16:10:52 +0000
ROA not after:            Tue 05 Jan 2027 17:10:52 +0000
asID:                     62904
IP address blocks:        104.140.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:b6:b2:12:d1:68:61:f8:e2:09:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  7 16:10:52 2026 GMT
            Not After : Jan  5 17:10:52 2027 GMT
        Subject: CN=19b68ab2-4fec-4f7f-a211-bd14b0e64533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0b:93:6c:ec:0c:b8:68:84:e6:31:e8:f1:b7:
                    90:45:2f:ab:59:31:0b:46:16:78:e0:24:6b:35:2f:
                    f6:b2:30:bb:6f:05:f8:c4:32:1d:a7:f7:03:48:80:
                    4a:88:97:6c:3e:bd:32:e1:84:08:8d:50:a8:42:a3:
                    85:f6:c9:d1:21:cc:30:7f:ad:93:cb:7a:0d:c8:ef:
                    e0:8e:f7:b4:1f:93:d3:bf:af:db:bc:d3:65:8c:53:
                    f3:ce:1c:a8:7d:e2:cc:c0:1f:95:0e:e8:2a:0c:38:
                    78:78:dc:6d:9c:0c:00:ba:c5:00:4b:3c:d8:c8:fa:
                    1b:00:f1:1c:c1:4c:d4:3f:7c:bc:77:dc:e9:81:38:
                    a3:cc:21:f7:ba:9e:30:cd:f2:3e:51:87:4c:b4:a0:
                    af:02:56:f7:2c:90:55:a7:fe:2d:0f:57:2b:ba:ef:
                    83:91:f9:7b:61:38:4b:47:0a:62:94:a8:75:19:63:
                    eb:36:a1:5d:9c:b9:42:b3:e5:21:39:f3:1f:e7:a0:
                    e0:16:2b:a9:ad:e2:e2:62:e2:89:11:c8:ff:9e:83:
                    ec:20:78:40:f5:f1:b1:7e:43:d0:13:27:57:9b:2f:
                    cc:a4:5b:59:2a:e4:8d:1d:2b:e5:7a:87:c9:df:65:
                    e8:a1:e8:55:91:77:30:52:3c:b4:bf:71:99:0d:94:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C2:DE:F6:6F:CE:7A:79:A8:81:BB:7F:95:84:E3:D2:95:7A:0B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3228ed43-618f-38a6-88b2-b993ef96cb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:11:7f:90:da:e2:1c:5c:2e:f4:06:83:dd:fc:83:0c:98:
         fc:a2:69:ae:e8:17:64:54:50:75:b0:31:67:39:cb:2d:26:50:
         13:f5:c4:32:f5:27:2f:13:6b:26:0f:e1:8a:aa:d8:79:51:fb:
         13:52:f3:d4:fd:4f:ac:61:07:71:c2:88:5f:2e:fa:66:23:b3:
         9e:e8:e9:f6:1b:16:0c:ec:5a:92:80:b6:a2:f9:b2:9c:5e:5b:
         0a:d5:4c:c3:dc:81:ee:a9:5c:6e:af:fa:d7:40:4f:bc:2c:3e:
         d0:32:03:f8:bc:51:c7:bf:d7:80:57:d3:46:25:80:dc:41:7a:
         61:b3:08:f4:09:9c:1a:e9:8a:4f:55:c7:bb:0d:b1:40:54:1f:
         a2:15:05:b5:51:ec:d1:f5:4e:d3:97:83:30:df:8e:dc:67:ce:
         ca:9b:60:80:ed:69:ea:88:20:72:b6:b6:06:6f:49:ce:d3:3a:
         89:90:5e:4c:31:e9:0f:9c:25:93:42:75:21:20:a1:01:ae:c3:
         9b:8e:19:1d:80:64:f6:98:81:9a:bc:a7:b5:46:e5:31:62:28:
         68:e4:cf:0b:d1:9a:a2:ac:a9:03:45:bf:6b:41:13:05:8f:29:
         15:68:11:25:ef:aa:0a:fb:9f:7e:ee:db:1c:0b:44:3e:8b:2d:
         d9:7f:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:33:31 2026 by rpki-client