Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
File:                     08760972-a6be-3ce7-afc1-cec03eb601a3.roa (raw, json)
Hash identifier:          aldW63eYvPDnkx9FHd2wbCEm4vKbj+SBXermvuah0J8=
Subject key identifier:   91:06:87:01:90:AA:76:B2:4F:63:80:A4:FE:A0:1B:94:CE:57:13:7A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EFE121BA550986B4477BB5000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        104.206.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:a5:50:98:6b:44:77:bb:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=7969a384-3e6c-43f4-918a-b87b2c0a05bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:61:80:83:2f:f7:08:61:f8:9e:26:f4:bd:
                    e1:af:78:dd:f1:8a:bd:d2:ab:fa:31:6c:bd:ea:b3:
                    c5:b2:f8:97:89:68:dc:c2:58:aa:ab:1f:88:c8:71:
                    00:bb:8c:c7:1f:5d:3a:56:a8:ea:e5:95:13:b9:79:
                    89:90:a7:28:5b:45:f6:40:a4:86:d4:97:e1:04:8a:
                    73:f6:0d:83:46:34:a8:f7:f5:fb:f5:c2:25:c7:b8:
                    b1:50:0d:f2:7d:76:51:fe:9f:5b:39:c4:0f:7b:ff:
                    05:1f:59:6d:a3:02:21:88:64:a4:65:2d:ec:07:12:
                    a9:eb:cd:32:68:89:68:ab:b9:e8:59:6f:f6:83:bb:
                    7a:ce:d4:f5:80:f2:96:8a:f9:09:2b:fa:a8:e5:47:
                    b5:21:d4:25:aa:b1:b4:92:06:cc:5f:84:04:2b:40:
                    f9:25:5b:56:5e:a6:8e:8f:84:66:89:19:03:59:5f:
                    22:93:8c:99:5f:4a:b3:7a:34:0a:a2:7b:db:d3:df:
                    48:31:57:5b:d0:a1:33:39:34:20:58:fd:a1:2e:f6:
                    ca:15:6a:9a:07:60:3a:02:0b:2a:1f:e7:d7:bf:51:
                    1d:ca:2d:86:cf:5d:43:44:c6:c0:be:ed:3d:c3:82:
                    5b:b3:ef:5e:79:82:06:89:e2:4b:5d:c8:b7:99:9d:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:87:01:90:AA:76:B2:4F:63:80:A4:FE:A0:1B:94:CE:57:13:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/08760972-a6be-3ce7-afc1-cec03eb601a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:f2:13:17:15:86:70:01:e2:39:76:be:c9:e8:c3:0b:07:
         e0:34:b5:ad:cd:6a:77:5a:7f:a2:2c:97:53:7f:58:ae:86:49:
         fa:8a:15:7d:71:dc:47:70:76:44:1f:21:64:ad:66:e6:ae:9f:
         fe:b3:06:4e:82:a0:5a:d5:a8:db:df:c7:37:61:34:a5:16:63:
         3e:43:cc:d0:92:2f:eb:41:87:53:63:0f:de:d3:0c:7b:70:34:
         83:db:e8:0c:1f:e2:97:c8:8f:ad:a2:53:5d:b4:68:ee:69:e1:
         ae:ba:ce:2b:8a:26:18:b6:23:54:f1:3a:2f:3c:16:d0:d5:47:
         c7:5a:53:94:e4:fa:59:61:3f:13:a4:0d:ae:2d:79:a3:c3:e2:
         53:07:6d:e7:2e:f7:f5:85:13:db:36:1b:d5:9d:99:27:97:cd:
         fe:d8:79:9e:02:06:59:be:7b:44:5e:eb:90:21:e3:0c:29:9c:
         21:94:20:02:e7:4a:0e:75:b0:be:f2:41:f5:56:24:5b:d6:82:
         17:af:8b:50:da:89:71:95:f6:d1:1d:9a:13:6a:1e:0a:9b:7a:
         65:4d:35:81:c1:74:36:01:71:19:fb:70:0c:cd:91:04:9a:95:
         57:a6:d8:0f:3e:5d:4a:ae:00:a1:be:9c:fa:82:dd:82:e1:ca:
         d2:5b:91:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhulUJhrRHe7UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
Nzk2OWEzODQtM2U2Yy00M2Y0LTkxOGEtYjg3YjJjMGEwNWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOthgIMv9whh+J4m9L3hr3jd8Yq90qv6MWy9
6rPFsviXiWjcwliqqx+IyHEAu4zHH106Vqjq5ZUTuXmJkKcoW0X2QKSG1JfhBIpz
9g2DRjSo9/X79cIlx7ixUA3yfXZR/p9bOcQPe/8FH1ltowIhiGSkZS3sBxKp680y
aIloq7noWW/2g7t6ztT1gPKWivkJK/qo5Ue1IdQlqrG0kgbMX4QEK0D5JVtWXqaO
j4RmiRkDWV8ik4yZX0qzejQKonvb099IMVdb0KEzOTQgWP2hLvbKFWqaB2A6Agsq
H+fXv1Edyi2Gz11DRMbAvu09w4Jbs+9eeYIGieJLXci3mZ2xKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEGhwGQqnayT2OApP6gG5TOVxN6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDg3NjA5NzItYTZiZS0z
Y2U3LWFmYzEtY2VjMDNlYjYwMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM56MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHri8hMXFYZwAeI5dr7J6MMLB+A0ta3Nandaf6Isl1N/WK6GSfqKFX1x
3EdwdkQfIWStZuaun/6zBk6CoFrVqNvfxzdhNKUWYz5DzNCSL+tBh1NjD97TDHtw
NIPb6Awf4pfIj62iU120aO5p4a66ziuKJhi2I1TxOi88FtDVR8daU5Tk+llhPxOk
Da4teaPD4lMHbecu9/WFE9s2G9WdmSeXzf7YeZ4CBlm+e0Re65Ah4wwpnCGUIALn
Sg51sL7yQfVWJFvWghevi1DaiXGV9tEdmhNqHgqbemVNNYHBdDYBcRn7cAzNkQSa
lVem2A8+XUquAKG+nPqC3YLhytJbkdI=
-----END CERTIFICATE-----
Generated at Sat Aug 29 05:53:48 2026 by rpki-client