Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ca5de0f-483a-3d18-b705-517c7e52b3f2.roa
File:                     4ca5de0f-483a-3d18-b705-517c7e52b3f2.roa (raw, json)
Hash identifier:          Z3zAlrmXvgFPutut6dkV2dqKtSWbm6Q05Ij24V3XklM=
Subject key identifier:   34:C6:FD:D4:51:FB:16:F9:6D:5C:87:8D:84:A1:06:00:46:85:C2:CC
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D773A8043183D3A0D3E438880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ca5de0f-483a-3d18-b705-517c7e52b3f2.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     2914
IP address blocks:        104.140.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:80:43:18:3d:3a:0d:3e:43:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=784d32d7-0638-4939-84d6-15c1390fb112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:56:55:b6:b4:85:b9:22:ff:9d:ee:7e:2e:
                    a5:28:d7:70:f9:a1:69:cc:d0:70:8f:d1:80:26:2e:
                    89:c6:fa:74:ee:67:f1:0a:35:36:d2:15:21:a2:ca:
                    ab:85:26:c5:97:df:8b:68:d8:37:d6:d3:51:b8:30:
                    78:8e:e7:29:03:2b:02:c1:12:ac:1a:fe:85:d4:49:
                    6d:ca:71:da:33:89:b3:26:74:c9:92:c5:c6:d6:a8:
                    23:ec:82:32:03:38:67:0d:0b:e2:dd:ff:92:05:92:
                    4e:fc:0d:e8:00:c9:ff:f0:7b:2f:f3:4b:a9:93:c4:
                    8e:b1:61:c2:08:21:e9:15:ff:09:69:26:94:58:6b:
                    54:cd:f9:87:b2:8a:88:0b:8b:14:23:5d:ee:28:5c:
                    91:b7:1b:f5:d2:56:33:f6:46:91:31:dc:a2:3b:76:
                    38:cd:fb:64:22:5b:82:ae:9d:91:a9:4a:f7:86:4e:
                    06:9c:8b:12:cb:a9:e9:e1:c7:42:56:cf:39:e1:fd:
                    61:a8:da:04:33:58:c8:3c:63:53:e4:d1:d1:ea:7d:
                    a4:58:1a:66:17:3e:ce:11:6a:79:80:b1:8e:a4:48:
                    58:04:71:52:36:a7:13:ac:de:fe:e7:f8:33:f5:e5:
                    73:d9:67:2d:7e:6e:37:58:e0:3d:cf:19:14:43:78:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:FD:D4:51:FB:16:F9:6D:5C:87:8D:84:A1:06:00:46:85:C2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4ca5de0f-483a-3d18-b705-517c7e52b3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:7c:4b:59:0c:9f:14:64:96:6b:29:90:69:f7:00:2e:d4:
         ce:bf:c8:17:ad:32:7b:cc:8b:c0:84:97:8a:91:4b:a8:41:69:
         5e:b1:4a:96:e7:5f:b1:b5:6a:b7:68:49:45:4e:f8:b6:3c:bf:
         98:a6:63:de:87:6c:a1:89:c4:5d:79:18:d9:75:2e:b3:d0:42:
         79:6b:6b:a3:f3:70:59:12:cb:29:26:23:e7:a2:48:69:ae:19:
         b6:39:1d:69:5f:7a:5e:03:58:2f:2d:79:7b:0d:66:82:66:be:
         5f:12:d6:83:6f:c7:85:2e:97:ac:24:3a:05:cb:23:1a:10:86:
         c7:51:73:8a:11:a0:ac:d6:c8:86:7a:e6:21:ea:66:c2:5f:ca:
         15:66:47:95:77:d3:de:a1:cb:0c:3c:d1:53:2b:6e:e7:49:b4:
         fe:8d:5d:08:55:a8:d6:26:f0:bc:93:85:27:c0:98:b1:41:50:
         10:a3:49:72:55:ef:94:08:58:83:fc:6c:1a:0f:f0:8b:10:58:
         25:22:d6:2d:0e:a1:a5:f8:36:1d:40:20:a1:ed:de:d7:c1:f9:
         eb:f4:40:74:c7:03:bd:33:be:93:9b:3a:75:bb:01:5f:e0:1a:
         10:2b:5a:80:06:bc:54:d4:d1:9d:4d:3e:f4:d5:fa:60:64:e4:
         9f:06:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:34:13 2026 by rpki-client