Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/47e5fa1d-8da9-36ff-a602-3fb5cff69615.roa
File:                     47e5fa1d-8da9-36ff-a602-3fb5cff69615.roa (raw, json)
Hash identifier:          23tm8pah3PrDZBTKZgUu3KYdoi7HasO8Usf0ESKln64=
Subject key identifier:   C1:0D:F3:0D:5E:AC:60:BD:B3:65:DB:F2:03:27:D7:D3:98:A5:8D:AE
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4C3D5F741B4CCEA6BF0E4B80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/47e5fa1d-8da9-36ff-a602-3fb5cff69615.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     20473
IP address blocks:        104.140.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:5f:74:1b:4c:ce:a6:bf:0e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=9c86b6c9-6574-4861-a2c6-6941eee750ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:c3:6f:e1:1e:1d:24:64:04:55:59:a5:21:
                    46:e8:b3:77:a2:d5:36:ab:b5:95:b9:d5:e7:23:5d:
                    1e:ab:ab:ea:8c:ac:09:52:35:16:e6:32:bd:e2:a3:
                    80:cf:85:9a:57:b6:fa:b2:e3:ea:69:6d:88:80:f9:
                    ce:18:92:ca:c8:54:93:8b:62:18:61:92:e8:f6:65:
                    a1:ab:c3:c8:32:eb:e6:93:8a:92:00:9f:4d:d2:39:
                    8b:83:02:0f:d3:b8:22:86:d4:4c:ef:27:ab:69:13:
                    5d:17:e1:52:53:29:03:b2:57:37:ed:3a:19:16:35:
                    cf:ce:36:15:f5:fc:42:aa:2a:2d:56:31:b7:c5:61:
                    c9:bb:5f:61:6f:80:f5:36:5a:28:8c:5a:20:0f:cd:
                    39:34:9c:f9:88:36:7a:b1:1b:2d:7d:79:f4:25:58:
                    19:88:2f:67:0f:4a:87:22:ee:0f:37:53:57:63:ae:
                    fa:a9:ba:00:0d:40:db:5a:c1:94:97:f4:33:77:6c:
                    4f:ce:c6:30:6e:9c:e4:6a:42:66:9f:23:eb:6a:cb:
                    42:ba:a0:25:71:35:13:00:bb:96:a6:d1:b4:45:71:
                    e6:8e:42:82:d7:c6:10:5e:95:16:31:18:4a:bb:bc:
                    d4:3b:8a:be:4e:58:aa:d4:96:b5:24:ee:ef:16:4d:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:F3:0D:5E:AC:60:BD:B3:65:DB:F2:03:27:D7:D3:98:A5:8D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/47e5fa1d-8da9-36ff-a602-3fb5cff69615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:2b:0e:28:9b:e0:5d:03:91:7d:dd:4c:ee:18:87:64:84:
         ad:a5:b6:06:49:83:56:47:85:f0:ae:8b:42:98:a7:d6:7f:b6:
         28:9d:31:87:2e:5b:21:84:b8:5d:80:be:8f:de:20:57:0c:43:
         3d:ad:02:11:e6:8c:78:2b:6b:04:ec:ac:a8:47:c2:10:12:09:
         f8:b0:10:a4:c8:a9:6a:18:58:7a:2b:37:eb:38:d2:45:56:8b:
         0c:ee:7d:11:f3:6b:ff:96:23:f9:cf:cc:ec:95:b7:f1:2f:5b:
         47:1d:c1:2c:a9:09:b8:a0:1b:52:8e:5d:3b:aa:08:f9:15:cc:
         c7:aa:89:06:e6:f6:b3:d1:3d:d8:51:c3:1e:ec:d2:b6:11:66:
         5c:5f:4b:6b:4f:25:82:cd:2f:f0:90:1e:94:c4:bd:be:fb:fe:
         ba:ed:0d:a4:ad:6f:66:2d:58:d8:e7:bc:67:ec:6d:9e:22:6a:
         85:0e:44:f6:fd:14:dc:be:59:dc:66:4e:c4:e9:73:3a:7f:16:
         d9:10:9a:26:9a:4e:ad:0c:fb:7a:4f:16:92:e1:8b:6c:6a:d1:
         d2:b5:83:30:9c:dc:32:ee:3b:56:40:10:33:56:8b:f3:38:0b:
         75:a4:dc:b4:b3:1f:99:85:85:49:22:7b:80:ad:e1:5b:7a:f6:
         ae:8d:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:52:25 2026 by rpki-client