Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8ad97bf8-8acb-370a-a143-a2b8ffa7be4d.roa
File:                     8ad97bf8-8acb-370a-a143-a2b8ffa7be4d.roa (raw, json)
Hash identifier:          Z1OekzcsDtpvGSY+3Ic0Z22buARYVLu8dpUDM+WHoHA=
Subject key identifier:   0E:66:95:E4:32:CE:A4:3F:60:73:87:97:CD:1F:64:B8:E2:9D:2A:E6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5958B425345623C11EFF2300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8ad97bf8-8acb-370a-a143-a2b8ffa7be4d.roa
Signing time:             Wed 30 Sep 2026 17:41:07 +0000
ROA not before:           Wed 30 Sep 2026 17:41:07 +0000
ROA not after:            Tue 29 Dec 2026 18:41:07 +0000
asID:                     62904
IP address blocks:        104.206.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:58:b4:25:34:56:23:c1:1e:ff:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 17:41:07 2026 GMT
            Not After : Dec 29 18:41:07 2026 GMT
        Subject: CN=e3d16b23-47a1-422c-80df-5ac1c94e2d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:79:50:bd:88:e1:13:83:28:75:41:84:59:
                    0c:43:de:78:76:f5:85:9f:20:85:66:ed:13:53:28:
                    7e:4f:bc:02:0a:93:80:5f:71:a0:82:a8:52:9f:cb:
                    61:62:90:4c:e3:e3:d5:f1:1d:f8:ca:18:ea:49:e9:
                    8b:22:02:78:36:44:1b:8f:8c:8a:8a:68:4b:d7:c1:
                    05:31:e2:ad:73:63:00:4e:86:d5:04:ca:01:fe:e7:
                    d9:dd:f4:22:dd:e5:cd:36:78:6f:00:97:f7:c4:39:
                    d5:df:54:09:8e:85:95:15:95:be:35:ca:f9:06:70:
                    52:4e:2a:4a:b2:58:57:3a:af:53:84:b6:78:91:35:
                    d5:30:fc:a8:67:c9:16:33:0f:9d:6d:25:c6:81:09:
                    0d:c5:92:62:9a:dd:c2:d4:52:05:fc:03:a7:45:dc:
                    61:37:ab:46:c8:a7:ce:0c:79:8e:c5:ec:81:34:1d:
                    67:a9:88:d6:48:11:bf:58:e5:65:b9:c1:8e:34:b4:
                    68:cd:f5:71:64:ba:1e:f8:43:29:2c:f2:21:97:20:
                    f0:14:77:e5:86:7f:05:5b:0f:d9:2d:af:d2:c2:5b:
                    17:d5:22:91:19:4d:7e:40:01:24:64:91:cf:d7:76:
                    b6:1a:e8:48:a8:ad:47:8c:3e:e7:88:84:6a:db:d0:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:66:95:E4:32:CE:A4:3F:60:73:87:97:CD:1F:64:B8:E2:9D:2A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8ad97bf8-8acb-370a-a143-a2b8ffa7be4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:c0:50:9b:ae:a6:98:bb:2f:10:2b:1d:15:e7:4f:6c:9f:
         89:04:28:68:a1:d2:23:12:59:f4:96:77:4e:b1:dc:b4:5f:9c:
         80:99:28:9c:74:1b:0d:88:be:c2:de:b1:97:55:35:14:8d:14:
         e0:52:d4:eb:31:0a:9b:37:80:4e:b6:c2:85:57:3e:1f:f1:3f:
         8a:a7:01:28:e1:a4:90:2e:69:bf:6f:96:e6:ac:10:79:1b:41:
         23:98:2f:8f:22:78:6d:cf:d0:12:87:a9:f0:8d:bd:32:13:99:
         3e:f2:c4:a6:d7:e4:b8:10:76:41:4b:6d:80:27:16:db:52:3b:
         76:81:0f:d4:23:e6:25:bf:b9:74:73:79:d9:80:ea:3b:bf:5e:
         14:27:e8:f1:8f:b1:a4:a0:36:c9:b4:b3:9d:d7:33:b0:84:18:
         d5:75:3e:97:b6:3e:85:b6:1b:d8:8c:19:a5:14:a2:c4:0a:6e:
         e0:f2:48:2c:1c:13:ff:cb:75:4a:90:08:fc:be:84:8a:ad:d3:
         d5:e3:7b:c7:3f:f4:4a:06:d9:fb:d7:6a:07:79:c0:1a:b7:db:
         9e:c7:a7:54:af:4b:2f:ae:2f:7b:f1:d3:4f:31:07:7e:ab:e7:
         f2:1f:f0:91:15:70:65:e3:f8:c5:19:45:0b:ce:de:7c:12:45:
         1e:41:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:44 2026 by rpki-client