Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/01420613-70a5-3f86-822a-4f98288e5542.roa
File:                     01420613-70a5-3f86-822a-4f98288e5542.roa (raw, json)
Hash identifier:          xr5blu43V9kvGZh1j5KOSAIAzmebP1qh1Ii0D01SRD4=
Subject key identifier:   4F:82:06:AA:9A:F8:C3:9A:6F:56:23:D1:C6:E4:E9:CB:77:43:B4:C1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F07F27954D4C5003E544F1640
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/01420613-70a5-3f86-822a-4f98288e5542.roa
Signing time:             Tue 01 Sep 2026 13:54:40 +0000
ROA not before:           Tue 01 Sep 2026 13:54:40 +0000
ROA not after:            Mon 30 Nov 2026 14:54:40 +0000
asID:                     219182
IP address blocks:        104.206.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:f2:79:54:d4:c5:00:3e:54:4f:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  1 13:54:40 2026 GMT
            Not After : Nov 30 14:54:40 2026 GMT
        Subject: CN=b91aae54-3dd1-4559-be78-70c720380de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:ea:0f:72:b1:0d:ab:e5:ea:d0:24:52:9a:
                    68:38:fe:d8:da:1d:f2:f9:6d:26:e8:7b:63:14:c7:
                    47:81:f8:39:17:89:f1:5c:e1:1d:60:c3:98:c5:31:
                    f9:60:17:e1:ae:1c:b6:9c:20:ee:a0:47:ac:46:ab:
                    1d:6f:ec:5a:fb:3d:7f:88:53:fa:9f:2f:4e:4b:a7:
                    25:d3:6f:cc:03:55:c7:6b:6d:79:fe:be:fe:d6:f5:
                    1f:d4:37:fd:f7:65:68:0d:90:1f:0c:94:da:69:15:
                    52:2b:72:7d:61:7d:83:11:2c:07:2e:4d:ec:54:ed:
                    45:40:7e:01:89:bd:55:da:fd:14:c3:bf:ab:f1:eb:
                    ed:ff:52:c3:c2:e5:39:43:7c:f5:e6:b9:51:d1:dc:
                    32:c6:c9:1c:3f:e6:a4:6e:53:7f:cf:72:74:fe:5d:
                    35:0a:e7:6f:8a:3a:aa:73:47:4c:46:94:63:19:8d:
                    43:26:3b:2c:5f:ff:8d:43:1d:24:21:e1:53:c4:08:
                    98:5e:cd:ed:45:e0:7a:3f:b9:85:5c:97:8a:66:49:
                    68:c1:95:11:b3:e8:46:d8:2b:5e:6b:fe:42:82:ec:
                    8b:81:86:0e:57:b0:6f:0b:e7:1e:9e:fc:51:a4:4e:
                    75:b8:58:89:95:fd:b1:b6:bd:67:ee:3e:0c:fa:2f:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:82:06:AA:9A:F8:C3:9A:6F:56:23:D1:C6:E4:E9:CB:77:43:B4:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/01420613-70a5-3f86-822a-4f98288e5542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:48:7b:f1:09:a3:17:01:23:70:e7:05:75:1e:0a:59:c4:
         69:15:d8:4c:1b:5a:a6:c0:e8:4b:4a:ab:57:c5:59:33:d8:d7:
         62:e0:34:1f:bf:f2:55:83:a4:49:ef:d3:8a:be:d8:05:4c:6f:
         4a:d7:5e:cc:6c:a2:f2:d6:86:5b:fd:50:71:34:a0:be:99:15:
         b7:91:e9:b7:13:f7:53:02:8f:16:91:dd:1f:8c:4a:09:cf:3d:
         fa:ee:53:52:54:b1:f0:c1:19:7f:06:d2:b9:32:ab:2e:ba:b3:
         7a:d7:c6:37:15:ee:f3:81:82:37:6e:58:2c:eb:09:5c:c7:a3:
         8b:67:18:d4:c0:8b:05:e7:55:5b:6d:15:ec:c5:df:03:fb:a4:
         3b:44:97:5c:3c:8a:69:0e:3a:c5:5c:7f:d5:85:d2:b3:fb:66:
         94:9a:51:3d:db:01:94:71:4a:5c:39:a2:26:8d:79:ac:40:bc:
         2b:7b:05:06:47:77:b7:4e:c2:4e:78:2a:00:6d:ee:3a:98:12:
         77:8c:79:9a:0c:19:ab:df:93:c7:b7:ca:ef:7b:4a:d5:26:90:
         e3:03:6c:97:af:66:bf:93:51:78:3a:55:6d:ab:0f:44:60:f3:
         48:26:36:78:10:17:e2:64:4f:0a:c2:9c:82:ea:00:e0:f3:30:
         67:5b:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:05:18 2026 by rpki-client