Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac2b6210-cfea-3670-af7a-29a9a5a06ee9.roa
File:                     ac2b6210-cfea-3670-af7a-29a9a5a06ee9.roa (raw, json)
Hash identifier:          RSTNXMRqerJxKUfkl8S3IhxEzb/rIVU3CJ+Bd6vema4=
Subject key identifier:   78:5E:26:FD:40:95:A0:AF:FC:E0:C9:68:58:28:E2:98:D9:6D:4A:A7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D2F349A26F0F3C798CC8DCE80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac2b6210-cfea-3670-af7a-29a9a5a06ee9.roa
Signing time:             Mon 16 Mar 2026 05:50:33 +0000
ROA not before:           Mon 16 Mar 2026 05:50:33 +0000
ROA not after:            Sun 14 Jun 2026 05:50:33 +0000
asID:                     834
IP address blocks:        104.140.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2f:34:9a:26:f0:f3:c7:98:cc:8d:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 16 05:50:33 2026 GMT
            Not After : Jun 14 05:50:33 2026 GMT
        Subject: CN=799d5b90-41d8-4b4b-ad97-e6aad78133bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:6e:39:df:6e:22:c1:fd:ec:ab:52:7b:9d:
                    2a:20:96:90:8e:d2:50:f7:cc:1b:e9:4f:a7:05:0f:
                    3d:b7:58:5d:5a:37:72:a0:a0:e8:dd:0b:c0:82:38:
                    61:c4:58:c5:35:21:5a:d5:ff:32:6c:0b:b7:33:d8:
                    be:72:be:a6:6a:cb:e5:90:30:9b:fd:b7:17:b6:c3:
                    7c:72:0b:2d:c7:72:fc:e3:32:c3:a9:e4:14:eb:16:
                    69:4e:4a:15:78:30:51:4f:0f:c0:e0:0b:55:64:c6:
                    c6:93:28:7d:2d:7c:e8:d5:9d:5d:f3:46:56:e9:7d:
                    e8:2b:f2:99:8a:db:b0:b4:55:28:ef:3b:53:71:8e:
                    29:5c:64:da:f2:1e:e9:7a:4a:f6:aa:98:fc:4d:58:
                    cc:81:32:c6:66:55:13:d3:cb:36:6c:6a:c3:8b:68:
                    f1:e3:e6:a4:26:0e:2d:6a:68:f3:2a:87:ab:be:7b:
                    fd:96:09:e7:7a:23:fd:92:fc:3b:c2:b9:59:b9:b0:
                    b1:53:3c:6d:7b:06:39:40:3a:6f:58:c1:57:16:02:
                    5e:b0:75:eb:12:69:cb:99:3b:c2:a7:fc:2a:72:f8:
                    af:13:49:2c:db:d3:ae:d5:f6:4b:f4:4b:6a:d7:95:
                    ef:7f:72:c3:b4:0c:97:2f:5a:ec:d2:7a:d9:04:80:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:26:FD:40:95:A0:AF:FC:E0:C9:68:58:28:E2:98:D9:6D:4A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac2b6210-cfea-3670-af7a-29a9a5a06ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a7:d4:b9:f2:cd:05:b9:18:ed:3d:15:0d:81:f1:3c:b6:6d:
         00:f8:df:25:3c:74:16:9f:09:c5:1d:d9:0b:be:34:c0:24:34:
         44:6d:79:c6:5b:b3:7d:2e:71:e1:bd:57:d9:9a:a0:a2:23:74:
         8e:c6:49:3c:3e:b4:6d:b8:74:6c:34:92:8f:62:9d:a8:88:65:
         ed:85:c7:2a:95:c4:3b:31:70:b7:1d:80:f2:e2:26:83:19:bd:
         1b:e5:cd:15:ba:60:2f:72:b8:be:5b:25:77:30:51:71:d5:42:
         4c:4a:8a:74:bd:38:13:78:47:6c:31:54:28:3b:4f:73:ff:e0:
         27:93:d7:89:ed:30:a8:00:2f:3a:80:3d:bb:2f:c1:0d:65:18:
         d9:01:5b:05:e9:c6:d4:af:d8:77:4d:44:86:11:a7:61:60:4e:
         cd:e8:70:30:5c:70:55:60:84:47:61:a0:eb:0b:c1:90:7b:f7:
         5b:28:12:2f:01:03:0b:98:a8:f8:92:52:98:ea:8b:92:a3:d9:
         e0:09:f1:19:ff:41:30:c8:a0:c7:79:a4:b6:f6:22:70:28:9e:
         f7:6f:1a:ee:5a:4f:77:1d:8d:b5:db:5f:89:4e:89:02:92:94:
         b0:99:8b:a5:0b:23:f2:b4:47:5b:60:eb:32:29:ef:f9:6e:99:
         32:ff:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:26 2026 by rpki-client