Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa
File:                     3b4d73af-ea73-375b-85d2-0abc2807b135.roa (raw, json)
Hash identifier:          Qu37wCDofnBfv8WsAqyHxOm/q2Xr0FtrnhONJTAKAjU=
Subject key identifier:   74:29:8B:CD:56:51:4C:EE:67:61:A3:16:29:4E:D2:D5:15:99:99:AD
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584AD568967605D6F2B3AA801400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa
Signing time:             Tue 12 Aug 2025 16:18:40 +0000
ROA not before:           Tue 12 Aug 2025 16:18:40 +0000
ROA not after:            Mon 10 Nov 2025 17:18:40 +0000
asID:                     2914
IP address blocks:        104.140.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:68:96:76:05:d6:f2:b3:aa:80:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 12 16:18:40 2025 GMT
            Not After : Nov 10 17:18:40 2025 GMT
        Subject: CN=5717c4bd-d138-4bdd-8047-ac0bdb3ec84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:64:cc:e7:b9:da:52:0d:a1:e7:3f:43:76:
                    a9:fc:ae:ed:22:9d:5c:5a:40:f4:ed:3d:8b:71:f8:
                    c3:d7:c5:6d:fc:0c:b2:6a:9a:47:02:68:80:9f:89:
                    d2:a6:76:1a:a0:b4:26:28:20:60:fb:8e:76:75:b9:
                    a9:b6:bd:49:68:b8:44:cf:05:d2:63:52:ba:2f:f6:
                    37:4f:6d:54:06:c7:04:9e:0f:2f:04:b7:f5:43:fd:
                    ee:b2:a8:7a:6a:3d:21:7c:b2:9b:b4:83:b3:15:73:
                    9f:f9:b2:43:67:48:0f:d4:1e:2d:d2:76:36:ab:41:
                    86:88:b7:18:db:8e:f0:32:54:0d:d4:b3:ef:a5:63:
                    d8:78:6b:b1:ea:61:9c:c7:8e:63:5f:58:4a:b7:0d:
                    54:a1:d8:75:b4:63:b3:cc:8d:3b:23:f9:75:9f:0e:
                    01:b3:94:2e:f2:a8:63:dd:eb:de:0b:83:be:03:2d:
                    a3:dd:f4:3a:12:ef:60:db:b4:c6:cc:30:bf:35:5c:
                    fb:4e:36:fc:d6:1a:e5:06:58:1d:b5:12:93:8b:27:
                    8e:3b:ae:08:a3:36:22:81:a3:d3:b5:fc:fa:f0:d7:
                    60:7d:33:9c:98:b7:9f:d7:7b:fb:07:66:28:82:e6:
                    e1:5b:df:98:44:fd:bf:d4:82:38:1b:17:6c:93:7c:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:8B:CD:56:51:4C:EE:67:61:A3:16:29:4E:D2:D5:15:99:99:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:49:e7:ca:ee:84:d7:ae:1b:e1:f1:97:68:fb:52:b1:1f:
         ff:05:de:0c:12:4d:6f:6a:ef:f9:6c:5e:9b:b4:54:e7:a9:dd:
         38:a8:04:5e:d9:69:9a:fe:18:d3:87:65:86:b4:c9:24:2d:98:
         21:cb:58:48:9b:0e:84:e4:3f:17:b0:de:cb:b3:1e:ba:c9:12:
         50:22:cf:b5:b1:d0:9e:da:79:14:8c:43:90:b8:a9:53:8f:af:
         4c:68:20:dd:8e:dc:26:85:20:16:36:8c:42:95:a3:92:4f:eb:
         12:7c:00:0a:ed:89:13:a1:44:8e:68:68:2a:99:05:1e:12:55:
         82:8c:f8:92:6a:b0:43:b1:d2:7a:3f:83:ea:86:9a:fd:78:5f:
         10:5a:45:ad:23:19:cd:63:06:eb:2a:50:c7:eb:25:7b:3b:ce:
         53:65:e4:e3:32:7f:62:d5:f5:df:c7:e4:99:37:1e:29:02:51:
         75:d5:d4:a3:69:48:29:b5:1b:aa:63:7e:0a:8c:5d:88:bd:69:
         13:52:8b:ce:a4:8e:ca:11:55:db:f2:57:8d:a4:fd:2d:94:8d:
         51:cd:a9:7c:ee:a5:d6:ea:db:64:62:67:cc:a6:6c:97:90:09:
         b3:ef:69:ca:fe:26:9b:7e:ce:eb:90:2a:17:0c:21:52:31:80:
         27:fe:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:32 2025 by rpki-client