Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f9a67ecc-de77-3481-a47d-bde929510847.roa
File:                     f9a67ecc-de77-3481-a47d-bde929510847.roa (raw, json)
Hash identifier:          SWExIf29MBd/xQfZfEhM+bjAuplR1F09yBxNVDZMCjk=
Subject key identifier:   65:36:9A:79:54:AA:FD:34:19:97:09:57:8D:2D:4D:B7:50:60:61:1E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6CBD47736B512B71FF8EE744
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f9a67ecc-de77-3481-a47d-bde929510847.roa
Signing time:             Wed 07 Oct 2026 16:24:08 +0000
ROA not before:           Wed 07 Oct 2026 16:24:08 +0000
ROA not after:            Tue 05 Jan 2027 17:24:08 +0000
asID:                     49532
IP address blocks:        104.140.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:bd:47:73:6b:51:2b:71:ff:8e:e7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  7 16:24:08 2026 GMT
            Not After : Jan  5 17:24:08 2027 GMT
        Subject: CN=a81dbaf6-4c8c-4b6b-8fde-cda99a3da356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:0d:3d:18:a6:8f:a1:f0:7a:6b:91:1e:5f:
                    5d:e6:25:7c:f0:bb:68:55:b5:8a:ce:b9:53:7c:0e:
                    55:14:25:a1:44:3e:fe:f1:9a:3a:61:d3:9b:5d:dd:
                    bc:80:36:73:c1:81:4b:be:fb:4c:e0:73:00:a2:20:
                    1f:76:da:48:74:14:5b:74:ef:3f:c4:5f:a1:61:5a:
                    ab:f5:3a:c3:e7:c4:bf:a3:9a:7a:fa:19:d6:af:80:
                    14:4a:8c:7f:c8:ea:62:49:3a:c2:05:f8:75:c6:3f:
                    9c:38:f2:b8:69:c5:33:6c:09:20:40:aa:c6:0a:0f:
                    95:35:0c:4f:b0:aa:aa:73:9e:31:65:84:88:bb:f0:
                    73:fc:19:51:08:90:88:58:1f:08:5a:1a:1b:5b:11:
                    33:5a:58:23:05:d1:10:19:59:bd:5a:3b:5c:5a:7e:
                    48:c3:26:d4:27:a1:06:bd:eb:b1:02:ca:d5:f7:bd:
                    da:15:a5:79:e9:67:02:ba:5f:6c:8f:2c:b4:d8:a9:
                    85:60:ba:84:a7:bc:1e:77:23:a1:e7:73:7e:22:e3:
                    69:2c:07:a7:78:8b:21:5c:45:5e:6f:c4:61:c3:ee:
                    cf:9e:e7:2e:35:c6:4f:7b:2a:4c:ae:a4:e4:43:9a:
                    2a:3d:70:c1:42:01:12:11:c9:b9:7f:f1:ed:b9:e2:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:36:9A:79:54:AA:FD:34:19:97:09:57:8D:2D:4D:B7:50:60:61:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f9a67ecc-de77-3481-a47d-bde929510847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:84:f9:5c:8f:84:75:00:0b:2c:9e:e6:ab:2e:d3:08:8b:
         55:84:58:a8:83:ce:fe:e2:6b:78:2d:3b:17:df:78:ba:25:d3:
         63:f1:c5:85:2e:99:3d:ec:be:c8:a9:5b:dd:9b:db:d1:cd:db:
         d0:60:75:8e:de:3c:c1:10:58:2e:8e:90:6a:1b:11:d2:0b:f6:
         bd:10:f2:6c:fb:bb:75:af:ca:8e:4b:15:af:75:e7:92:ac:6a:
         2d:21:a9:c3:64:01:ed:b9:bb:d4:29:17:ee:4e:d7:7a:c3:c3:
         94:a3:01:aa:26:ef:6d:2d:0d:c3:cd:4d:b9:ec:d4:e8:43:9c:
         7c:17:2d:c3:85:be:1c:f8:c4:4f:c7:82:03:61:66:e3:6a:8f:
         f8:37:00:2f:b7:78:b4:90:24:6a:e8:9d:5a:7a:53:b1:ce:05:
         83:2c:59:b1:cc:c6:69:75:f0:f5:ab:65:81:cd:b8:d4:bd:47:
         a9:60:de:2f:d2:77:ca:60:a4:f1:7e:73:3b:33:26:0a:3c:2f:
         0c:35:db:5f:e7:2f:3a:ad:71:ad:64:0f:fb:22:c4:07:9d:3b:
         a2:22:41:67:a6:e3:f0:50:88:2b:10:27:73:b7:99:85:05:f3:
         60:10:e3:cc:a1:00:2b:71:4e:5f:69:8e:c3:65:b4:9d:87:17:
         4f:e8:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:16:31 2026 by rpki-client