Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
File:                     08760972-a6be-3ce7-afc1-cec03eb601a3.roa (raw, json)
Hash identifier:          7H/5PI61KSKKB5zL/00o90/bMwCkj+c0Fk3+ZmRDIrs=
Subject key identifier:   80:56:0A:E4:03:F8:FD:AF:98:50:96:75:3B:AB:4D:F9:1B:CE:BF:11
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D7B6A81FF2500C1DD2F21FF00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     2914
IP address blocks:        104.206.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:81:ff:25:00:c1:dd:2f:21:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=5f828d15-9d95-4e30-bad8-e75248456ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:62:88:f0:5d:28:f9:bb:a2:ed:f0:c6:f8:
                    3d:4c:5c:aa:e3:61:67:0c:10:55:d6:c9:da:bd:d4:
                    25:5d:18:2b:9d:03:52:79:65:0b:57:b3:a4:7d:72:
                    55:d5:b0:8b:0f:ef:bc:49:be:79:b3:27:68:59:c1:
                    60:5d:bc:61:c1:08:ab:03:35:0b:cf:12:68:2a:71:
                    60:c5:63:37:1d:12:fe:44:5a:8a:cf:23:7b:0d:52:
                    9e:a4:c0:99:5c:ee:96:fb:96:5c:3b:06:36:7c:f6:
                    e8:ac:37:db:fc:ea:32:94:91:8e:0a:36:82:06:13:
                    4f:44:2b:20:46:52:a5:1d:b2:dc:6a:0d:22:6f:d6:
                    35:ef:92:1f:90:37:a9:0d:88:1c:d9:71:ec:b9:3a:
                    91:6c:d9:bc:c5:8c:4e:ef:f8:15:ac:d6:10:ee:ff:
                    0a:1d:b3:e9:a5:88:8e:f8:02:ed:53:cd:14:92:12:
                    72:1a:5c:0e:a6:27:1a:1c:6f:d1:95:b8:22:df:72:
                    bd:dd:70:d5:d0:bf:24:ea:fe:23:db:80:17:18:7f:
                    eb:70:41:0e:a5:7d:ee:b4:73:23:d1:50:f3:f1:b8:
                    60:a3:74:bb:ed:96:bb:e6:5b:1a:56:6c:74:ef:94:
                    d6:ab:58:27:e1:32:68:bc:08:b3:da:e1:9e:df:26:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:56:0A:E4:03:F8:FD:AF:98:50:96:75:3B:AB:4D:F9:1B:CE:BF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:e6:bc:07:44:33:d8:6b:52:ab:a3:88:98:97:96:c6:ab:
         0f:74:34:eb:ad:14:6e:1e:03:f4:f2:22:83:9b:09:24:c3:46:
         6b:9b:cb:7c:71:a4:89:0e:43:76:60:17:78:14:d4:88:57:9a:
         3d:24:ce:41:86:8e:5c:72:a2:81:6d:b5:99:b6:81:5e:a5:e8:
         d2:99:44:14:6b:0a:8b:28:b7:9d:12:d1:45:34:9a:f6:01:1f:
         36:13:e1:51:a5:80:dc:66:f1:2b:18:6b:1c:30:b2:96:6f:7a:
         68:6d:ad:a5:5b:fa:50:b9:a9:28:8e:61:b9:f1:6a:26:20:f4:
         c6:ea:64:0d:27:8b:a8:a6:8a:3b:d1:2f:b3:82:5e:60:86:88:
         45:ce:54:f3:b3:64:fa:a2:09:0b:f1:d2:6a:8b:c7:28:13:f2:
         49:12:c5:60:2c:fd:87:47:ed:0c:a7:c1:bd:19:fb:31:3e:92:
         85:42:7a:bb:31:77:ab:13:4a:de:d3:53:15:ba:c0:93:a8:e0:
         9f:62:f6:0a:98:b6:7a:dd:4f:a6:7a:e3:a6:05:5a:79:3b:c3:
         b0:c6:1c:80:75:03:b0:fd:01:30:f8:4c:70:ef:0d:78:59:67:
         df:4f:78:44:71:7d:7b:a9:68:df:9c:8b:3e:21:0e:92:ae:6a:
         57:03:4c:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoH/JQDB3S8h/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
NWY4MjhkMTUtOWQ5NS00ZTMwLWJhZDgtZTc1MjQ4NDU2ZWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhiiPBdKPm7ou3wxvg9TFyq42FnDBBV1sna
vdQlXRgrnQNSeWULV7OkfXJV1bCLD++8Sb55sydoWcFgXbxhwQirAzULzxJoKnFg
xWM3HRL+RFqKzyN7DVKepMCZXO6W+5ZcOwY2fPborDfb/OoylJGOCjaCBhNPRCsg
RlKlHbLcag0ib9Y175IfkDepDYgc2XHsuTqRbNm8xYxO7/gVrNYQ7v8KHbPppYiO
+ALtU80UkhJyGlwOpicaHG/Rlbgi33K93XDV0L8k6v4j24AXGH/rcEEOpX3utHMj
0VDz8bhgo3S77Za75lsaVmx075TWq1gn4TJovAiz2uGe3yaKoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBWCuQD+P2vmFCWdTurTfkbzr8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDg3NjA5NzItYTZiZS0z
Y2U3LWFmYzEtY2VjMDNlYjYwMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM56MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfK5rwHRDPYa1Kro4iYl5bGqw90NOutFG4eA/TyIoObCSTDRmuby3xx
pIkOQ3ZgF3gU1IhXmj0kzkGGjlxyooFttZm2gV6l6NKZRBRrCosot50S0UU0mvYB
HzYT4VGlgNxm8SsYaxwwspZvemhtraVb+lC5qSiOYbnxaiYg9MbqZA0ni6imijvR
L7OCXmCGiEXOVPOzZPqiCQvx0mqLxygT8kkSxWAs/YdH7Qynwb0Z+zE+koVCersx
d6sTSt7TUxW6wJOo4J9i9gqYtnrdT6Z646YFWnk7w7DGHIB1A7D9ATD4THDvDXhZ
Z99PeERxfXupaN+ciz4hDpKualcDTEE=
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:34:17 2026 by rpki-client