Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d844392-24b8-3621-bc53-b025a77ad557.roa
File:                     3d844392-24b8-3621-bc53-b025a77ad557.roa (raw, json)
Hash identifier:          dZNH4bbVXpA5X85XufaAUEyG8HMmruTvS96GP00hhgI=
Subject key identifier:   5B:5F:4B:8F:4B:A9:37:6D:FF:6D:F2:A1:4C:2D:65:E5:A4:4D:B0:97
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F595F020B335FEE2DC258A180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d844392-24b8-3621-bc53-b025a77ad557.roa
Signing time:             Wed 30 Sep 2026 17:53:49 +0000
ROA not before:           Wed 30 Sep 2026 17:53:49 +0000
ROA not after:            Tue 29 Dec 2026 18:53:49 +0000
asID:                     62904
IP address blocks:        104.206.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:5f:02:0b:33:5f:ee:2d:c2:58:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 17:53:49 2026 GMT
            Not After : Dec 29 18:53:49 2026 GMT
        Subject: CN=b17536f9-c38a-45e3-96ae-359231a6a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:d6:72:98:c0:cb:83:90:ff:3c:e6:f2:b6:
                    b7:f3:29:cd:d5:3b:e8:4f:19:39:5c:64:92:9c:1a:
                    3b:27:a9:9b:99:00:60:fd:86:75:2d:19:ba:54:4f:
                    40:0b:a1:17:25:53:7b:79:7f:c4:e3:ac:cd:08:4b:
                    23:46:f7:3e:b4:9a:29:c4:51:26:00:42:d8:59:99:
                    20:3b:5d:ac:ee:5d:ea:3d:21:04:de:9b:59:18:58:
                    e8:3f:03:79:8a:f7:30:6f:11:37:b4:d1:58:01:16:
                    9a:b8:61:80:f1:f6:44:cc:28:cb:f4:8c:c8:64:e2:
                    7d:26:9d:14:fb:1d:92:8f:aa:79:98:33:51:47:96:
                    a8:ff:53:91:12:bc:d4:cb:d9:c3:31:e3:ce:f3:59:
                    de:94:40:17:69:56:9b:b1:5a:7e:40:10:95:66:c6:
                    0c:47:a8:c6:52:88:bf:21:26:ec:7a:22:1d:0f:25:
                    4e:65:05:da:04:02:4d:ed:c5:b5:3c:41:c8:f1:ad:
                    01:c9:62:4c:06:af:41:ee:d5:37:cf:9a:0a:e6:77:
                    05:d9:fc:c4:25:f9:9c:bf:a8:51:f1:b1:9a:96:5e:
                    6b:f8:30:34:0d:39:4c:e0:88:48:83:4a:31:1e:af:
                    aa:e0:b3:1b:dc:b3:46:3f:74:a5:79:cf:52:bb:e9:
                    79:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:4B:8F:4B:A9:37:6D:FF:6D:F2:A1:4C:2D:65:E5:A4:4D:B0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d844392-24b8-3621-bc53-b025a77ad557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:a7:71:3a:0a:22:fd:48:92:a8:c1:be:30:4a:16:ad:26:
         2c:95:97:0b:19:99:00:79:69:03:3b:e8:82:c3:6c:b3:65:2b:
         1e:56:4b:8e:c0:b6:29:8c:a9:0b:db:2e:f2:47:9e:e9:d3:42:
         55:66:d5:b3:60:ac:ea:db:d2:00:c0:a1:95:24:6b:88:8e:38:
         2d:ca:67:79:11:c8:1d:eb:62:0f:e2:b5:78:ef:b3:75:bf:57:
         98:8d:a3:35:ed:c1:aa:c5:bf:e1:f6:b1:40:08:20:09:16:5a:
         c3:4e:d7:73:19:7b:9c:65:36:f5:b7:6f:b2:d5:7d:16:86:44:
         12:38:d1:3e:52:bc:e1:cf:fb:43:d1:28:63:a5:b4:78:63:3f:
         b7:e3:7e:4a:f9:88:5d:26:f2:13:b2:e7:6d:25:fa:42:3a:ec:
         54:8b:88:5b:7d:a7:00:7c:a0:37:87:a5:fd:7b:8c:f4:3a:37:
         20:d0:2c:85:2c:2c:15:30:ec:87:2a:6d:80:d7:1d:bd:8d:56:
         05:ae:bc:bc:f8:04:65:ca:a1:90:36:96:74:ac:54:bc:81:82:
         d9:ea:c6:ff:30:17:ae:bc:d2:8e:d5:c6:11:38:00:c2:6a:ae:
         96:b0:c6:48:10:06:13:9a:c4:95:9b:0c:41:36:79:5a:39:70:
         89:78:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:31:00 2026 by rpki-client