Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/89c6fd97-20f2-3a73-bb39-e5af5cfa78b7.roa
File:                     89c6fd97-20f2-3a73-bb39-e5af5cfa78b7.roa (raw, json)
Hash identifier:          ZQQ7mm20q/fEDDCW/LDyFzhsn9LPTqpvlr4Ze7yaHRg=
Subject key identifier:   8D:52:D7:B0:07:1F:A6:EC:2D:A5:6D:C5:48:E4:CA:32:16:0D:1D:C8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DB075914B0AA9C63843193080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/89c6fd97-20f2-3a73-bb39-e5af5cfa78b7.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        104.206.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:91:4b:0a:a9:c6:38:43:19:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=8bf6860e-7a38-4463-aafa-6995772db1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:48:ec:a3:9e:b8:2c:b6:49:32:87:e3:5f:
                    39:92:53:61:20:df:a3:89:2e:68:7c:6d:6c:1f:a7:
                    bb:40:99:0c:9a:e9:a7:b8:92:9b:82:d7:94:98:c6:
                    be:df:f0:9d:ea:41:e0:11:11:8a:0f:8e:1c:0f:5d:
                    43:79:35:79:62:70:f4:37:eb:0c:4b:cd:a9:22:c2:
                    a0:9f:48:9d:8a:2f:75:5a:f9:96:6d:b9:58:f0:06:
                    a1:cc:47:9d:47:fe:a0:f1:b7:9f:0a:1a:ec:b5:dc:
                    ac:69:fa:71:2c:c9:4d:67:b3:16:04:6a:4d:62:cd:
                    bf:fb:84:1a:cf:73:c5:b7:d7:2f:31:53:44:30:ab:
                    63:24:7c:ce:c7:8a:40:8f:78:48:77:57:8b:92:e5:
                    42:1c:63:c3:8a:e8:42:79:9d:b3:79:aa:b4:a4:22:
                    ad:2e:5f:5f:87:96:f3:a9:2a:dc:49:79:86:94:e8:
                    b3:db:23:d7:5c:5a:1d:c6:5c:87:85:4b:02:b6:e6:
                    9c:08:e5:6c:fe:f3:69:f1:07:c0:eb:81:02:01:60:
                    5a:a0:c3:43:43:2a:d8:4b:ff:1a:7d:03:9a:57:c7:
                    8f:6b:d5:84:46:7f:de:39:33:f0:76:30:68:a5:04:
                    2c:1e:b5:d8:5a:a0:88:b0:95:68:2e:0d:bc:f0:23:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:D7:B0:07:1F:A6:EC:2D:A5:6D:C5:48:E4:CA:32:16:0D:1D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/89c6fd97-20f2-3a73-bb39-e5af5cfa78b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:a4:23:f1:34:6e:61:6f:2c:37:8b:03:52:26:ff:5f:a3:
         11:ff:f9:19:e8:ce:4c:bf:b1:5b:de:9c:36:0c:15:16:c5:07:
         0c:5a:35:c5:01:d7:e8:e2:13:22:aa:88:ea:39:e8:56:0f:f9:
         4d:9c:7b:1a:0f:18:1d:27:5e:c1:10:ff:e1:51:fb:e9:50:53:
         a0:59:44:dc:7a:7a:26:14:e0:1e:40:da:85:5b:14:76:4d:e0:
         04:27:46:82:7f:d6:aa:ce:9c:b1:73:25:7c:5c:56:a0:53:24:
         5e:c8:82:30:46:e2:6b:6c:3b:5b:81:b6:15:f8:18:a9:29:8b:
         f4:8e:b3:e9:88:8d:98:45:df:33:e2:ed:55:79:5e:7e:84:11:
         2d:44:9f:2d:e9:0f:53:a2:da:66:3f:e3:bf:7a:84:fb:fc:fa:
         bd:d4:23:58:67:7d:49:fd:11:48:de:d0:92:30:30:17:23:49:
         c3:b9:d3:19:96:ab:01:e0:0a:93:7a:68:e9:22:9c:5b:20:cf:
         f8:01:09:a8:e2:7a:07:6c:6a:ec:75:0e:49:b7:35:35:c7:bb:
         ad:5b:c2:6c:b2:51:18:97:c2:93:43:6b:a3:a0:af:72:fa:11:
         00:ce:ab:77:06:01:2d:84:03:2d:dd:56:e0:ff:8c:11:dd:57:
         26:ee:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:00 2026 by rpki-client