Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
File:                     08760972-a6be-3ce7-afc1-cec03eb601a3.roa (raw, json)
Hash identifier:          SLpIUqRorb9+08gBEMobcwvzXTBZcMR11tOYUFQ4Ocg=
Subject key identifier:   19:8B:B4:B6:4F:8B:73:E2:D4:61:8F:10:C5:6B:1F:22:5B:70:82:9A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E5BAF4A0DCEAE53F95D2191C6
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     2914
IP address blocks:        104.206.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:4a:0d:ce:ae:53:f9:5d:21:91:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=f87cdb42-380e-418d-a8df-e2e0bd483580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:dd:cc:5a:10:e2:22:8e:ed:7d:69:c3:15:
                    ea:a6:f6:8a:15:c8:c3:27:65:28:4b:a5:01:21:1b:
                    a6:b7:80:1c:3d:76:3d:72:fb:47:42:5f:0f:58:1c:
                    77:d0:b8:f3:c3:e8:09:90:87:e0:3b:12:da:0e:85:
                    3d:37:75:8f:96:52:77:19:a5:7f:be:53:b0:42:de:
                    4e:1e:6e:69:d3:7c:b9:79:a2:4d:7a:ef:aa:7b:bb:
                    05:a4:11:3e:ea:24:26:b3:39:18:ba:ed:11:1e:44:
                    58:ae:2d:64:eb:31:82:0f:b3:22:a4:45:22:24:63:
                    d6:d2:56:44:d9:46:38:84:f4:ad:a1:86:ba:46:91:
                    c9:48:c0:8e:16:52:ac:8d:fa:2c:85:16:cb:51:88:
                    43:e6:f3:7d:5b:62:40:fb:1a:e4:20:56:b1:08:89:
                    ff:75:99:c4:84:e4:db:ee:bb:f7:f3:82:44:46:b1:
                    36:12:c6:b7:70:18:bc:40:c3:ef:0d:8c:2f:b0:db:
                    4d:48:1c:d0:a3:e5:8b:4e:5e:b5:6c:67:87:a4:84:
                    19:16:e0:4a:56:f1:84:d4:df:12:82:04:f3:7d:57:
                    31:e6:50:e5:f7:fa:41:74:5f:1b:71:05:d2:3f:73:
                    e3:58:0e:af:9e:77:0d:56:a6:92:ad:56:bc:3b:4e:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8B:B4:B6:4F:8B:73:E2:D4:61:8F:10:C5:6B:1F:22:5B:70:82:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:98:67:20:75:53:9e:8e:4c:18:c9:f6:1d:37:c5:ab:4b:a0:
         5d:8f:fb:f2:2b:f5:63:a9:02:8e:f3:5a:10:2d:8a:f3:89:9c:
         d7:91:56:bb:95:77:7c:f0:c2:e3:62:9c:02:7e:b9:d7:50:41:
         c4:3e:5d:7e:3f:82:3a:3a:19:95:92:3e:5f:36:30:c9:a1:80:
         c6:c2:2e:b5:11:8e:1a:50:b1:43:50:95:e9:f4:6e:f4:dd:a4:
         a4:92:54:9e:8a:16:a4:96:a6:82:76:ca:43:d3:72:d3:f5:83:
         a9:f6:4b:4c:8e:25:bd:18:55:33:ec:4b:1c:5c:6b:8a:ca:dc:
         63:0e:12:73:55:d2:34:52:34:dc:ec:aa:df:91:26:41:e9:63:
         09:51:af:cc:47:10:b5:fc:b4:4f:49:61:ea:00:cd:be:2f:15:
         ba:93:53:8d:f1:bc:c3:20:f8:49:70:72:74:b1:9b:ec:bc:76:
         14:bf:c5:89:7f:7d:42:e3:3c:0a:c4:6a:95:de:21:3e:17:c8:
         61:88:6d:fc:ec:30:78:63:ed:04:84:e7:54:5a:4d:62:99:44:
         aa:33:1e:ec:3d:99:70:b0:19:34:ed:e1:48:a7:2c:e0:df:46:
         c5:77:5e:1c:5f:12:c7:91:98:7c:ec:72:b5:6a:68:6f:a3:d2:
         73:4b:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:57 2026 by rpki-client