Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/473cd1aa-8b5d-3ebb-be94-c16d55b34274.roa
File:                     473cd1aa-8b5d-3ebb-be94-c16d55b34274.roa (raw, json)
Hash identifier:          VQqmZry1o1ANzq9FYXa6wxXzDBLkjokeCFO/01GwgGI=
Subject key identifier:   9E:DB:28:5B:F5:3B:CF:51:D8:30:B0:F6:1B:2B:BB:1C:E7:AD:64:66
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F342C227409A675D0F0B11C18
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/473cd1aa-8b5d-3ebb-be94-c16d55b34274.roa
Signing time:             Thu 17 Sep 2026 10:06:25 +0000
ROA not before:           Thu 17 Sep 2026 10:06:25 +0000
ROA not after:            Wed 16 Dec 2026 11:06:25 +0000
asID:                     3257
IP address blocks:        104.206.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:2c:22:74:09:a6:75:d0:f0:b1:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 17 10:06:25 2026 GMT
            Not After : Dec 16 11:06:25 2026 GMT
        Subject: CN=b20df196-6036-4573-b884-c53db3a90461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:5b:d5:6d:79:c2:ee:28:9c:76:c3:31:88:
                    ae:60:23:38:03:17:f7:2c:a4:9e:65:c2:c1:a5:4f:
                    43:d1:d2:57:71:46:4c:b4:8c:35:1d:69:28:e6:ce:
                    39:8d:27:c5:43:af:81:ed:a3:a5:5e:6b:37:82:57:
                    58:3e:0d:a1:b5:10:5e:27:ee:89:58:f0:97:7a:31:
                    a5:0f:95:99:dc:e6:b5:18:65:2c:8a:53:5f:21:65:
                    68:07:4f:4e:77:c8:47:91:d5:db:66:cc:c5:f4:eb:
                    b6:b5:0f:45:55:f9:ed:86:4a:f0:41:e1:7c:d9:4f:
                    bc:57:64:86:a7:96:21:c2:95:41:12:e4:70:ac:44:
                    83:8d:4d:0a:58:4d:4f:ad:e9:fe:b2:57:fa:f2:1d:
                    e1:73:0d:a6:ce:aa:ad:e1:70:d9:7e:ab:4a:68:5c:
                    af:bc:19:0f:ee:83:68:e6:5f:a8:cc:1c:f2:dc:8c:
                    10:b5:18:de:68:1e:ae:dd:30:8b:dc:05:3e:dc:6d:
                    cc:a7:d6:f0:93:f6:8f:e6:b7:6c:e8:0d:e3:23:93:
                    49:17:ed:66:bd:18:ef:4c:ac:12:77:10:04:e4:f7:
                    20:59:b6:8f:9f:35:1a:53:29:7b:87:34:8e:ee:87:
                    28:ce:16:d9:5e:f9:4f:f6:ca:b9:97:f2:bf:cf:3c:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:28:5B:F5:3B:CF:51:D8:30:B0:F6:1B:2B:BB:1C:E7:AD:64:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/473cd1aa-8b5d-3ebb-be94-c16d55b34274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:1b:25:88:2c:a8:3d:e7:36:da:5c:f5:0a:14:c0:fa:6d:
         9e:0f:67:ca:53:1b:e8:5e:db:2c:75:47:aa:f4:8c:0e:54:52:
         9b:04:7d:54:70:a3:f1:f7:11:c6:26:b3:41:bd:cc:14:a7:32:
         23:3c:f3:a5:37:be:48:43:3f:eb:d7:50:ad:c8:26:29:c9:64:
         dd:0e:a0:70:62:05:56:20:e5:5f:28:06:3c:2a:b7:52:d6:7c:
         d7:98:74:3b:62:38:5e:02:4c:8c:62:9e:21:cc:88:a4:c0:78:
         79:35:4e:d6:d6:71:e8:bb:da:68:ec:84:da:f0:e1:a4:f0:8d:
         b6:b3:d9:19:06:73:cd:1e:f0:3b:9b:5d:2c:6b:a6:00:14:7a:
         6c:0f:39:16:b6:8b:68:1c:0a:00:c5:d4:1c:38:8d:83:95:91:
         e0:cb:31:b0:ae:d4:b9:2b:d8:fa:db:04:3d:86:92:77:95:6b:
         d2:91:47:8d:f8:30:b6:2a:d2:7a:19:aa:c8:da:fa:52:fa:e2:
         41:63:25:a1:8c:31:51:bf:8b:14:30:9d:ac:18:5c:92:f1:b1:
         06:88:08:b2:0c:f6:15:bb:16:bd:10:07:5e:42:3b:a9:58:53:
         5b:56:a7:67:e9:a0:8f:27:a2:0d:ad:2c:19:9b:95:17:f3:8d:
         65:ea:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:27:08 2026 by rpki-client