Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f198d85f-389a-3e71-8d26-f43a11f5ada2.roa
File:                     f198d85f-389a-3e71-8d26-f43a11f5ada2.roa (raw, json)
Hash identifier:          xWZnh7TgKoLDZX86LZwcxAWr1qRoUIHYTImyK4+VvNc=
Subject key identifier:   36:A5:27:C4:ED:0F:08:1D:38:F0:F6:34:82:A9:6C:5A:74:7F:CF:10
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6CC13D962FAFB490BA1D3280
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f198d85f-389a-3e71-8d26-f43a11f5ada2.roa
Signing time:             Wed 07 Oct 2026 16:32:06 +0000
ROA not before:           Wed 07 Oct 2026 16:32:06 +0000
ROA not after:            Tue 05 Jan 2027 17:32:06 +0000
asID:                     62904
IP address blocks:        104.140.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:c1:3d:96:2f:af:b4:90:ba:1d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  7 16:32:06 2026 GMT
            Not After : Jan  5 17:32:06 2027 GMT
        Subject: CN=9a6cbfc4-c34c-44c7-b511-943e6c0c34dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:a0:91:04:d3:80:63:ab:07:c6:60:d0:3f:
                    e1:75:15:78:a5:eb:27:19:a7:32:9a:41:7a:4d:de:
                    7f:f3:45:e7:62:a8:94:a2:c7:b6:4c:c0:94:63:4f:
                    dd:0a:10:b8:ce:ee:ee:ef:b5:d1:f9:08:4a:90:a7:
                    17:70:3a:0c:94:d9:98:fe:bc:2e:5f:08:40:36:2c:
                    38:58:41:a9:1a:5d:48:fe:77:2a:09:29:3f:8b:83:
                    9a:5a:39:ba:f6:c8:3a:28:12:4c:d8:62:f4:8b:59:
                    f4:2d:01:f4:6f:10:64:cd:45:32:5c:81:f7:12:5a:
                    b9:c0:94:ac:81:ab:ac:46:33:2b:d8:ca:9e:52:9c:
                    44:df:28:a9:b7:55:34:bb:a9:fb:ab:68:7d:ef:24:
                    35:3e:74:7e:07:20:3d:ec:d1:3f:2f:12:c8:25:35:
                    78:d6:a0:b8:48:93:b9:a6:80:e0:9a:30:7b:73:84:
                    f3:80:21:1e:28:20:f0:68:de:4f:02:12:1d:02:a1:
                    96:b5:1b:23:b3:38:9b:7b:3e:ed:43:14:76:8b:95:
                    20:0d:8e:d7:71:ed:77:cb:3a:9f:33:bb:cf:90:8d:
                    8f:65:8b:7b:df:61:73:b8:ac:c6:41:3e:e5:0a:d5:
                    5c:a9:16:e5:c8:58:7d:bb:f4:f2:d3:d0:8f:06:b2:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A5:27:C4:ED:0F:08:1D:38:F0:F6:34:82:A9:6C:5A:74:7F:CF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f198d85f-389a-3e71-8d26-f43a11f5ada2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a0:0f:9f:9f:f9:f5:50:0f:42:a4:1a:53:27:d1:c5:ff:3a:
         0e:94:d7:62:4f:93:fc:3e:16:0f:40:57:7a:29:27:f8:49:cf:
         28:6f:6d:af:0a:44:33:8f:62:ec:3f:8f:00:b1:04:39:3b:6d:
         f0:5c:87:bf:60:41:b9:5f:98:6b:74:85:b7:23:c2:de:4a:2e:
         78:36:92:57:c8:68:54:b3:83:57:dc:ce:22:95:36:c2:e3:7e:
         9d:a8:97:f5:02:f2:a7:ff:4d:b4:e7:2d:83:7c:d2:f8:93:ea:
         c6:2f:81:32:6e:aa:b0:cc:86:52:e1:7d:7f:6e:39:06:9a:93:
         20:c9:9a:ae:96:b9:27:dd:43:17:a0:f1:54:ca:a9:de:1f:ed:
         0d:ea:e0:4c:e6:0c:99:5b:d3:54:08:82:ad:d2:d6:61:8f:47:
         e5:b4:94:dd:c4:85:a0:27:e6:47:79:02:13:bc:a0:fc:47:03:
         2c:4e:37:67:54:3a:5d:a7:fb:47:bc:5f:de:0d:80:31:26:ca:
         2a:b8:c0:d8:eb:b3:4a:9f:df:87:5e:67:4d:3b:21:03:c6:de:
         18:10:69:da:6a:ec:b3:7a:ac:4f:b7:6c:88:6f:7e:a6:6a:4f:
         0f:7b:b7:2b:7e:52:b2:cb:75:10:0e:90:bf:6c:af:03:8f:c2:
         c9:56:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:22:59 2026 by rpki-client