Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a96b3ce8-de48-3045-80d2-dd3fe88d21ed.roa
File:                     a96b3ce8-de48-3045-80d2-dd3fe88d21ed.roa (raw, json)
Hash identifier:          7Iojf5UMUTQKw/5SfvvNUnmi2PMGdkx6/4AmZl5yDdk=
Subject key identifier:   4A:62:FA:54:12:E5:41:4A:57:9B:01:26:50:5B:B6:71:C6:13:41:96
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5961D3B9F22B680DBD7744C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a96b3ce8-de48-3045-80d2-dd3fe88d21ed.roa
Signing time:             Wed 30 Sep 2026 17:59:30 +0000
ROA not before:           Wed 30 Sep 2026 17:59:30 +0000
ROA not after:            Tue 29 Dec 2026 18:59:30 +0000
asID:                     62904
IP address blocks:        104.206.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:61:d3:b9:f2:2b:68:0d:bd:77:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 17:59:30 2026 GMT
            Not After : Dec 29 18:59:30 2026 GMT
        Subject: CN=b23f6cae-ce18-462e-af7c-e3926d37b552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:61:21:f9:3f:94:e0:ac:d5:ee:59:a4:89:
                    42:11:b9:a8:18:d6:26:bf:95:83:c5:fd:0a:10:67:
                    55:21:f4:87:bc:cf:c1:f1:c1:cf:32:d7:2d:a9:f6:
                    ab:1f:b2:72:0f:58:23:b7:a8:9a:95:52:64:b8:07:
                    86:8a:d2:68:54:14:70:6a:ba:3d:5d:2c:ff:2f:c2:
                    95:94:55:68:09:40:24:13:ea:c5:08:38:9c:33:f2:
                    c0:ff:56:a3:66:73:c1:35:bc:81:74:01:0b:b6:43:
                    0c:a7:1b:a4:0d:5b:46:fc:ce:30:c9:89:8d:95:5b:
                    8f:76:9d:17:90:ad:ee:d9:00:14:84:10:aa:4f:39:
                    46:e3:3c:d8:30:66:bb:56:9c:59:24:6b:57:41:41:
                    a1:b1:46:f9:13:70:36:cf:a0:07:cb:39:6e:34:bc:
                    3f:23:d8:d6:9a:f5:9a:c1:65:93:35:18:b3:9a:ed:
                    97:ee:a8:c2:8a:a6:64:a4:35:e7:db:b0:55:c1:43:
                    79:33:f8:57:12:24:e4:6b:02:f6:8e:6e:f3:4e:8c:
                    86:ea:e8:06:59:6f:c2:c2:71:17:e8:e2:fa:52:1a:
                    7d:72:67:06:37:83:b2:87:3e:e9:dc:ec:12:ce:ee:
                    af:17:4a:75:cd:49:4d:d1:d4:b0:aa:46:d5:24:1a:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:FA:54:12:E5:41:4A:57:9B:01:26:50:5B:B6:71:C6:13:41:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a96b3ce8-de48-3045-80d2-dd3fe88d21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:85:d0:96:5b:c4:4b:5e:30:0e:7c:f9:92:07:4d:6d:7b:
         4f:1a:f2:c6:9f:68:2d:33:d1:c9:c1:86:65:d6:8f:b1:43:48:
         b6:1f:f0:4e:fa:68:07:ac:77:88:09:4d:f9:a7:a6:bd:b0:6c:
         c8:4d:ab:7b:01:d8:c2:07:27:42:9a:8a:df:6a:87:6b:8e:ba:
         bb:af:4f:0b:67:2f:79:d5:ec:d7:0d:a2:96:fa:f3:1c:b9:fe:
         4b:27:74:44:ac:4a:5a:4c:d4:23:fc:76:6e:4f:c8:21:9c:75:
         8b:a9:5c:e8:7b:b2:0a:64:15:a7:db:d6:2d:e1:6d:39:68:82:
         f4:c0:9a:3f:23:db:22:0b:2c:55:30:31:8c:1c:fe:f4:b9:7a:
         8b:89:67:89:9e:5c:cf:92:02:04:15:a0:99:61:27:04:64:47:
         ea:2d:ba:2d:17:39:bb:c6:14:d6:cb:db:ed:8b:f5:42:08:0c:
         8f:a8:e5:0d:f4:19:a4:31:b2:6b:68:fc:03:ab:52:8d:91:91:
         70:ec:55:2c:cf:ab:2d:26:0c:b4:72:b6:ee:01:c0:8d:66:bf:
         31:09:fe:60:71:d0:10:25:60:46:21:8a:ce:40:3f:2d:12:d7:
         d1:d8:fa:74:70:18:3c:8e:c5:24:98:ae:88:3d:fc:19:1b:b0:
         59:c0:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:41 2026 by rpki-client