Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa
File:                     3b4d73af-ea73-375b-85d2-0abc2807b135.roa (raw, json)
Hash identifier:          oyQHDn/8gGW3D83cEmfo8fRB/wRWggHuZ2+sTGfD3vI=
Subject key identifier:   93:48:EE:40:74:94:D9:D0:0B:10:87:F7:D4:80:AD:8D:5E:F4:D4:5E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D773A6630C22B8FC388C8A180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     2914
IP address blocks:        104.140.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:66:30:c2:2b:8f:c3:88:c8:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=45a53930-db42-46a4-bd1e-14ffa6cc9710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:de:fc:42:aa:a2:cf:e1:c3:90:22:46:1d:
                    72:fb:c4:ad:46:71:f5:e8:db:98:b6:7c:05:ba:9a:
                    c8:6f:df:df:d5:74:a3:ca:36:d2:6f:f8:6a:64:b5:
                    64:3a:d5:3a:27:3f:4c:e4:7d:7b:4a:8e:fc:39:c3:
                    fe:dd:e3:07:a8:ad:d9:22:ee:02:8b:78:65:3a:ee:
                    da:7f:3f:24:2e:c5:a0:94:39:be:08:79:d7:1a:5f:
                    c4:4a:2e:f1:78:aa:7b:d9:6e:fe:e5:c8:1c:19:1f:
                    66:9f:b2:58:fc:00:89:f3:b7:c1:c8:9a:cd:df:8c:
                    90:81:a4:82:a0:86:7f:88:43:39:89:a8:b4:5c:f3:
                    4a:70:67:f3:77:7b:6f:88:e5:7d:8b:8c:c8:a8:e0:
                    98:49:b1:9d:68:9c:24:d8:23:f0:3d:d4:4c:ad:79:
                    16:53:fb:e2:a4:37:a9:2d:2c:34:63:91:3e:45:26:
                    4e:fd:33:51:e0:f6:16:fe:f7:a2:ab:d4:07:22:94:
                    fd:8e:60:90:c0:cf:8a:47:f9:27:f6:8e:c4:1d:e5:
                    22:3c:fb:04:25:82:eb:2d:b9:c1:4c:c0:1b:49:70:
                    79:25:32:d6:43:c4:3d:9c:74:10:45:27:94:43:63:
                    26:6e:91:32:61:88:8b:46:9c:ea:c1:6c:8d:1e:57:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:48:EE:40:74:94:D9:D0:0B:10:87:F7:D4:80:AD:8D:5E:F4:D4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3b4d73af-ea73-375b-85d2-0abc2807b135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:2f:be:f0:de:68:b9:e7:48:2b:d7:d2:45:7e:d9:67:e8:
         9a:5a:81:8e:8a:a1:bd:8c:41:cf:1d:cd:9f:65:af:3e:a6:e9:
         c9:da:e6:b8:d1:d5:2b:23:a6:56:ca:91:48:9c:f7:94:07:45:
         aa:b1:d8:3e:44:f1:a9:f3:cf:cb:18:67:f5:5f:72:58:17:de:
         91:ca:75:f5:54:f5:fd:78:8c:9d:d6:b8:a1:be:ad:45:fc:56:
         e1:59:b2:61:b3:49:c6:da:09:66:0e:70:ff:7b:33:f3:27:73:
         47:80:05:90:cb:54:94:d2:5a:d5:dd:33:e1:46:b5:49:02:9c:
         d3:82:93:e8:3d:43:b7:66:e3:41:bf:e0:86:b9:74:48:0e:4e:
         fd:72:3b:5f:89:4e:76:6d:de:af:87:d5:11:80:27:89:2e:f3:
         a6:9b:89:97:6a:8b:35:be:73:6b:49:c2:53:27:c8:06:bb:53:
         9a:b0:3e:5c:bb:2e:4e:0a:d9:6e:8c:2d:fa:c1:3c:e6:ab:29:
         97:1b:b0:6b:e9:b2:0a:b4:ba:4a:43:eb:1c:e5:12:c3:3b:07:
         77:49:c6:54:ff:9e:3b:64:ec:49:26:23:8e:47:a3:7f:55:14:
         29:8c:df:3b:fb:2d:c6:8f:4e:38:3b:54:25:eb:3e:bc:b9:d8:
         2d:cb:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:33:05 2026 by rpki-client