Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0e93a7b6-0ad1-3eca-a101-890b2e873a11.roa
File:                     0e93a7b6-0ad1-3eca-a101-890b2e873a11.roa (raw, json)
Hash identifier:          4D/poZvYFhvVZWOpsXh31vQi1yEk/BSa00ACUIjnXk8=
Subject key identifier:   49:D9:A5:DF:0C:0A:93:8A:50:B1:39:49:B8:D2:69:A6:55:0E:37:FA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DAD1BB3875FF369D6FB025C80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0e93a7b6-0ad1-3eca-a101-890b2e873a11.roa
Signing time:             Thu 30 Apr 2026 08:12:14 +0000
ROA not before:           Thu 30 Apr 2026 08:12:14 +0000
ROA not after:            Wed 29 Jul 2026 08:12:14 +0000
asID:                     402298
IP address blocks:        104.140.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:1b:b3:87:5f:f3:69:d6:fb:02:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 30 08:12:14 2026 GMT
            Not After : Jul 29 08:12:14 2026 GMT
        Subject: CN=b591e982-bb0c-43e8-b169-2d0291a26f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:f0:b4:26:99:cb:d0:d8:f7:81:e4:bd:8b:
                    df:f4:93:a4:95:3e:37:c7:03:6d:19:f6:cc:c0:83:
                    71:25:ac:7e:bd:1a:ea:a3:a6:1e:38:eb:57:89:5d:
                    e8:3f:c9:69:ef:5e:62:4e:ce:52:dc:b6:51:6a:f8:
                    33:96:4d:c0:06:50:99:aa:41:e0:f1:ad:0d:e3:b4:
                    2d:e4:f7:59:45:7b:b8:85:2d:b8:b4:3c:92:50:eb:
                    d7:43:11:7d:8a:64:f6:e7:24:fe:54:68:b2:9e:e0:
                    54:00:15:6f:15:74:6a:ea:ec:5c:58:f8:cd:6a:70:
                    1a:57:f5:51:30:c3:f2:f5:10:93:b4:76:83:7a:98:
                    e7:63:86:dd:5f:45:19:9b:20:27:60:3e:49:cb:1f:
                    8e:e7:8d:fb:21:11:8b:1b:68:bb:cf:f3:f6:ec:c5:
                    76:a2:f2:82:00:41:89:f0:f6:46:82:c7:d2:8c:75:
                    4f:dc:e1:36:a6:bc:03:dd:98:01:1e:ce:fb:b7:9a:
                    4b:45:29:5c:48:b9:75:ac:0f:d7:a9:70:f9:7c:37:
                    26:36:62:c5:8c:b4:bc:79:32:2f:20:ac:79:75:b4:
                    ec:3b:0c:6a:eb:e2:31:f3:19:f4:13:0b:c0:44:7a:
                    47:2c:7b:5e:f2:c7:9e:64:aa:c3:79:fc:1c:91:89:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D9:A5:DF:0C:0A:93:8A:50:B1:39:49:B8:D2:69:A6:55:0E:37:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0e93a7b6-0ad1-3eca-a101-890b2e873a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:05:92:af:9b:dc:27:6e:05:08:a4:88:6c:5a:92:79:07:27:
         c6:e5:76:a0:36:d1:10:eb:aa:86:14:c1:d9:8c:2f:db:03:34:
         4b:f2:09:96:a5:b1:45:74:f2:5a:8b:98:ee:19:f2:0c:0f:8b:
         ea:57:94:03:88:63:f1:2d:a4:cc:59:13:1e:86:17:9e:3e:dc:
         4d:db:1c:04:e8:d7:47:f6:38:51:c2:59:fa:86:f8:80:b5:41:
         48:6c:a5:48:9e:a9:82:90:07:e5:75:8e:25:24:92:46:1a:36:
         21:bf:d3:66:52:5f:b5:ab:ba:be:e8:de:5a:d4:33:dc:11:70:
         08:3d:ba:7e:3d:f9:81:71:88:5a:c9:f5:9c:43:6a:70:a4:f1:
         21:bc:4d:61:0f:2f:7d:36:ad:40:1f:3b:5e:d7:f3:83:ac:70:
         74:0d:b4:84:95:6a:f0:aa:11:e4:3e:83:3c:47:59:46:63:8f:
         1a:39:e7:85:a8:6a:82:44:89:dd:5b:46:1d:32:d0:f3:d7:43:
         76:d4:4e:55:8b:a5:0b:24:dd:31:c4:19:2b:91:11:17:76:3e:
         63:cb:03:7e:32:e7:e5:56:2c:cd:b0:6d:3c:4a:c8:3b:78:7d:
         3e:2a:5c:9e:64:a8:10:51:a9:36:e0:bb:2b:0a:eb:9b:24:2b:
         5f:68:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:58 2026 by rpki-client