Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa
File:                     1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa (raw, json)
Hash identifier:          YnxNLiRtxZW1tNn/S5RwJJ3N09BmSA+DHmN+MASl3YU=
Subject key identifier:   2E:28:1F:A3:F2:F2:F0:01:38:0A:5F:F0:75:92:05:C1:95:69:04:E8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D7B6A799FAD90936D2229B640
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     2914
IP address blocks:        104.206.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:79:9f:ad:90:93:6d:22:29:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=291f23b5-9c54-40c4-b224-652453677c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:36:d5:43:68:25:ae:8f:66:bb:5f:b8:e6:
                    9c:ea:3d:ff:53:62:a1:8a:e2:dc:71:35:fb:f6:7d:
                    92:b3:ef:c7:dd:d5:db:9b:5c:e8:b8:1b:96:7f:f3:
                    5e:4c:fa:75:6c:fc:5e:c2:21:c9:88:92:6f:cc:f4:
                    ae:28:4a:98:39:0e:74:99:25:9d:b2:7e:12:e9:1c:
                    f7:3a:25:53:46:38:50:8e:fc:ae:60:9a:62:33:7d:
                    bf:21:73:e7:30:a1:4d:90:ec:01:aa:4b:cf:45:ac:
                    47:dd:a1:d9:79:12:cc:4b:28:48:fc:03:e1:8f:16:
                    4a:ec:e9:8b:c3:51:e0:86:5d:5d:66:dd:bd:50:3a:
                    7c:b6:af:d8:fc:86:e7:b2:e0:f4:3c:55:94:a5:5e:
                    a3:37:c4:12:03:68:26:fc:00:31:1b:65:8b:f8:72:
                    da:21:2a:b5:d7:4e:80:38:02:f8:b8:53:00:1e:f4:
                    59:6e:b9:95:f9:e3:0f:b7:45:40:c6:74:10:63:17:
                    08:1b:0b:57:21:e1:4c:87:85:d4:49:28:23:d8:3e:
                    96:4a:56:31:05:e7:73:2c:16:b9:62:8b:3e:d5:6c:
                    ae:f0:80:56:ee:4f:2f:64:74:a0:76:66:c4:7a:a6:
                    64:f4:c9:41:33:ca:16:a0:6c:13:8e:8a:40:a4:b5:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:1F:A3:F2:F2:F0:01:38:0A:5F:F0:75:92:05:C1:95:69:04:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c27793f-3d01-3352-b2c2-2e7dc00191bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:0f:a6:3d:da:2c:39:a3:43:af:ff:a1:27:d4:00:97:ef:
         90:80:af:10:e3:9f:4f:96:01:b1:d2:92:9d:84:f7:25:ae:e9:
         99:26:bd:07:3c:42:53:8a:65:06:2e:e4:38:25:16:a8:a5:54:
         bc:65:b2:e6:be:61:0a:2b:d9:65:c5:01:6c:3a:74:eb:31:32:
         11:ce:8d:6a:72:4d:16:4f:3f:10:c8:44:af:15:4f:bf:92:26:
         0f:5c:04:96:e8:21:9d:08:00:e2:31:33:1a:ea:96:13:cb:bc:
         f1:ec:63:54:1e:4c:9a:10:df:99:2b:f5:d6:58:73:79:84:dd:
         09:f4:67:2a:21:33:dd:fd:ec:dd:2e:06:8b:f3:cc:46:69:e5:
         a6:8e:8e:e2:f6:b1:fd:e5:23:68:35:98:24:a0:c8:fc:a8:f2:
         3a:c5:66:ec:a1:8a:9c:07:7a:32:42:47:74:92:89:db:10:93:
         80:d4:b1:be:47:f2:f5:91:b8:82:e2:b6:19:5b:11:cc:00:01:
         fa:18:5f:22:54:84:48:1b:95:4b:d6:c9:fe:e3:68:bf:06:89:
         fd:1f:f0:fa:f2:5c:9b:3c:95:64:5b:a9:17:d3:58:80:d7:5a:
         31:0d:9f:83:01:83:78:d3:59:28:71:21:77:87:78:28:d6:4c:
         1d:d6:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:33:08 2026 by rpki-client