Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e45e851a-90fb-30eb-8ae8-8d87a88e6562.roa
File:                     e45e851a-90fb-30eb-8ae8-8d87a88e6562.roa (raw, json)
Hash identifier:          yAwo17gxi6/g+AP9mPvd6qnWKO/AxMy1RFyafsQOP0w=
Subject key identifier:   C8:23:64:B4:4D:A1:31:80:AA:71:8C:2D:78:AE:E2:AD:00:C5:2F:C0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6CBF9B52E1166CC3381E89E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e45e851a-90fb-30eb-8ae8-8d87a88e6562.roa
Signing time:             Wed 07 Oct 2026 16:28:49 +0000
ROA not before:           Wed 07 Oct 2026 16:28:49 +0000
ROA not after:            Tue 05 Jan 2027 17:28:49 +0000
asID:                     62904
IP address blocks:        104.140.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:bf:9b:52:e1:16:6c:c3:38:1e:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  7 16:28:49 2026 GMT
            Not After : Jan  5 17:28:49 2027 GMT
        Subject: CN=98775f13-f726-4edf-843c-cd8879dfd338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:04:9a:20:f9:8f:54:55:01:94:94:41:e2:
                    c8:c8:b2:2f:2e:f3:5c:c4:d7:51:cf:d1:98:2c:80:
                    e3:b5:06:df:66:82:81:65:a0:43:6c:f5:43:a5:0c:
                    f0:01:ba:5b:6c:d6:f2:0a:93:22:d8:ae:6c:18:fb:
                    af:36:c8:ec:f2:0c:4e:a1:05:83:fe:13:71:56:0d:
                    4e:9c:82:c1:2f:65:44:d3:88:60:70:8c:48:af:10:
                    50:16:03:0d:42:3c:72:cd:92:5a:ed:82:f8:34:81:
                    9f:47:ca:bd:b3:98:0f:3e:0e:48:cf:22:96:02:67:
                    e1:2d:9b:ae:b5:20:fd:ec:e8:85:33:ce:65:e3:9e:
                    3f:a4:d5:d7:3c:43:e7:68:ee:9c:6a:da:60:16:e2:
                    26:da:51:13:a9:cc:36:cb:9e:40:06:f1:4e:06:df:
                    04:c2:c8:db:ad:88:67:fb:e4:ee:05:a2:8c:7a:82:
                    4f:3c:e1:e0:ab:8a:45:30:c2:e4:c4:5a:ac:66:ca:
                    c6:3f:7a:70:d1:56:72:d4:6e:6f:38:ee:06:81:ab:
                    9c:d3:79:55:71:96:f0:92:05:42:a5:cf:9a:60:e0:
                    2f:70:b2:e5:d3:10:f3:71:c6:7f:18:d9:f7:08:96:
                    24:0d:3d:23:53:a1:f5:93:5a:34:a6:23:6e:31:6e:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:64:B4:4D:A1:31:80:AA:71:8C:2D:78:AE:E2:AD:00:C5:2F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e45e851a-90fb-30eb-8ae8-8d87a88e6562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:e2:41:4b:d2:97:fc:d2:7c:67:52:d1:e2:1d:1b:4d:59:
         93:00:1f:ad:19:c3:6c:97:5f:30:e6:62:82:16:53:6f:9a:c5:
         73:26:06:d7:cd:4e:09:cf:66:cb:8c:78:b9:bd:fe:c2:88:64:
         c0:da:9f:dc:a9:31:23:e1:2e:d5:bb:58:f4:5d:ff:95:c7:9e:
         7f:19:7e:a7:c5:99:86:ba:02:45:96:99:e6:d2:3d:73:60:66:
         58:b2:61:89:75:8c:a1:44:8f:cf:a3:e3:8f:ee:90:22:ec:96:
         60:39:35:31:24:3e:5a:6d:54:0d:39:74:8d:02:0d:ac:5f:65:
         7f:06:33:72:c3:5a:e5:ee:bd:ef:27:0c:18:5a:8b:7a:07:5b:
         9f:48:a1:e8:59:67:88:47:bc:8f:5a:b4:6f:ac:e9:1e:eb:99:
         5a:89:c9:c1:2e:c2:4c:34:6c:95:0b:cf:4f:65:8b:ea:4b:01:
         6e:9d:a7:44:91:48:ff:1c:86:2f:b8:53:2b:88:16:10:b2:62:
         ce:85:9d:ec:5b:9e:3e:a7:de:76:b4:c1:4e:f2:7e:76:06:e3:
         a8:c0:54:71:b3:81:b1:8e:00:3c:a7:72:2e:a3:49:31:70:8e:
         c0:6d:17:77:5b:89:5e:a2:d0:88:34:cb:09:1e:63:95:dd:5f:
         4e:f3:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:22:02 2026 by rpki-client