Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/afd4a3ca-ad44-31ce-aa5c-a10b6c97f573.roa
File:                     afd4a3ca-ad44-31ce-aa5c-a10b6c97f573.roa (raw, json)
Hash identifier:          1EdRzq/epoGGm2EL4pd+5Poz4uK6fPy/sI3wUbwfD9M=
Subject key identifier:   5C:4B:A3:45:3A:8D:71:20:E6:CF:C5:4B:19:F8:BC:A7:B0:0B:C6:5E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5976869CAD781BE050B12000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/afd4a3ca-ad44-31ce-aa5c-a10b6c97f573.roa
Signing time:             Wed 30 Sep 2026 18:41:12 +0000
ROA not before:           Wed 30 Sep 2026 18:41:12 +0000
ROA not after:            Tue 29 Dec 2026 19:41:12 +0000
asID:                     62904
IP address blocks:        104.206.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:76:86:9c:ad:78:1b:e0:50:b1:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 18:41:12 2026 GMT
            Not After : Dec 29 19:41:12 2026 GMT
        Subject: CN=7a49400b-9222-4cef-9a68-fca1e3347779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:2b:6e:94:09:19:15:2f:a2:af:63:19:50:
                    cb:51:bf:51:9b:28:7f:4e:d8:41:9b:96:01:98:45:
                    8c:51:8b:be:e0:8b:17:7c:85:e4:85:c2:e0:bb:5a:
                    98:94:4e:61:08:ee:12:02:eb:92:50:2e:e8:ab:0a:
                    b4:07:29:9d:6a:9c:f5:24:7d:7e:90:ed:88:45:33:
                    c3:da:aa:3d:b9:61:a8:d2:e3:76:70:e0:ab:2d:c4:
                    ae:5b:be:d2:fc:ba:04:88:d2:7c:1a:d1:0e:2f:fa:
                    af:de:92:5a:b9:41:71:ef:4d:8c:ec:26:8f:f0:76:
                    30:0f:ad:07:8b:4e:33:c6:a0:e0:3c:37:7e:0c:be:
                    c1:b9:53:6c:81:d7:c3:86:09:a8:7d:0f:3c:56:56:
                    0d:9a:b8:1e:0f:75:ff:11:2e:72:17:f5:4c:16:38:
                    93:7e:32:eb:d5:90:16:c6:33:5b:9f:0d:f5:50:d9:
                    bb:f9:2e:0f:c1:c4:1c:b8:bd:28:49:16:b0:82:1d:
                    57:1c:e6:25:72:99:43:d5:38:14:61:19:b8:0a:ac:
                    f7:89:1b:1a:07:81:fc:19:61:b6:4c:cc:b5:76:4f:
                    d3:b4:c6:c3:6c:aa:5d:d9:79:7d:e8:a0:92:1b:1e:
                    78:9b:7b:a0:07:10:00:3d:b0:a9:84:25:e9:12:7c:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:A3:45:3A:8D:71:20:E6:CF:C5:4B:19:F8:BC:A7:B0:0B:C6:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/afd4a3ca-ad44-31ce-aa5c-a10b6c97f573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:7f:5f:6a:e4:30:2e:c8:17:7a:06:c3:4d:62:d6:81:52:
         ba:9f:66:71:47:c2:56:ea:b8:d6:75:88:02:54:9d:1a:88:1b:
         69:a8:a8:6a:9c:c0:38:c3:aa:8d:9e:ae:44:a2:b8:3f:f0:35:
         09:e9:05:f9:29:b6:38:44:bf:fe:98:62:2d:51:e6:57:ad:81:
         e1:66:6d:f7:3c:c9:b8:2d:9a:d4:74:55:6a:6a:0b:1d:d6:36:
         46:01:80:5a:98:96:e6:b7:78:0a:67:1a:0a:e4:6a:1d:3d:8e:
         35:96:f6:69:35:eb:34:57:ef:aa:0f:97:16:fb:a4:77:12:c9:
         79:e6:f5:24:76:a2:79:82:32:84:27:ad:8b:12:e2:ff:1c:25:
         36:f4:69:e3:23:c1:03:99:26:1d:c3:d7:4c:e7:c7:2f:2c:93:
         40:ea:76:0b:52:55:15:95:fd:9a:fe:d8:18:95:b8:4e:3c:48:
         fb:da:58:8d:fd:da:54:73:20:df:8c:a2:2d:ed:0d:be:cf:f4:
         cb:6f:30:5c:34:d7:f5:4b:78:1a:23:7d:64:b8:4c:1f:db:73:
         35:f3:fa:eb:a6:18:53:4e:1a:14:be:fe:30:22:29:8d:db:6e:
         15:ae:c2:46:02:e6:f7:6c:92:ee:c4:4f:a1:8c:7f:80:fc:e7:
         c9:26:0c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZdoacrXgb4FCxIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkzMDE4NDExMloXDTI2MTIyOTE5NDExMlowLzEtMCsGA1UEAxMk
N2E0OTQwMGItOTIyMi00Y2VmLTlhNjgtZmNhMWUzMzQ3Nzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodArbpQJGRUvoq9jGVDLUb9Rmyh/TthBm5YB
mEWMUYu+4IsXfIXkhcLgu1qYlE5hCO4SAuuSUC7oqwq0Bymdapz1JH1+kO2IRTPD
2qo9uWGo0uN2cOCrLcSuW77S/LoEiNJ8GtEOL/qv3pJauUFx702M7CaP8HYwD60H
i04zxqDgPDd+DL7BuVNsgdfDhgmofQ88VlYNmrgeD3X/ES5yF/VMFjiTfjLr1ZAW
xjNbnw31UNm7+S4PwcQcuL0oSRawgh1XHOYlcplD1TgUYRm4Cqz3iRsaB4H8GWG2
TMy1dk/TtMbDbKpd2Xl96KCSGx54m3ugBxAAPbCphCXpEnwBlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxLo0U6jXEg5s/FSxn4vKewC8ZeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWZkNGEzY2EtYWQ0NC0z
MWNlLWFhNWMtYTEwYjZjOTdmNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaM7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9Mf19q5DAuyBd6BsNNYtaBUrqfZnFHwlbquNZ1iAJUnRqIG2moqGqc
wDjDqo2erkSiuD/wNQnpBfkptjhEv/6YYi1R5letgeFmbfc8ybgtmtR0VWpqCx3W
NkYBgFqYlua3eApnGgrkah09jjWW9mk16zRX76oPlxb7pHcSyXnm9SR2onmCMoQn
rYsS4v8cJTb0aeMjwQOZJh3D10znxy8sk0DqdgtSVRWV/Zr+2BiVuE48SPvaWI39
2lRzIN+Moi3tDb7P9MtvMFw01/VLeBojfWS4TB/bczXz+uumGFNOGhS+/jAiKY3b
bhWuwkYC5vdsku7ET6GMf4D858kmDLQ=
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:22:10 2026 by rpki-client