Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4d2e9984-efd4-367e-a07d-458e5d71c9ef.roa
File:                     4d2e9984-efd4-367e-a07d-458e5d71c9ef.roa (raw, json)
Hash identifier:          LWBSxU+2P6YljXCuDuufP7c6eobSLK67AQX6Q7xprJU=
Subject key identifier:   90:4E:7A:AD:B3:E4:2E:F4:2A:4E:96:1E:63:91:40:96:44:5E:C9:9D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF9E20F37A48E26D249287F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4d2e9984-efd4-367e-a07d-458e5d71c9ef.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     2914
IP address blocks:        104.140.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0f:37:a4:8e:26:d2:49:28:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=8e29a84c-95d4-437c-afe7-83e348363c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:ab:61:dd:b5:0d:b6:19:92:e0:bc:5b:14:
                    67:6e:df:2a:81:28:bc:c1:3c:27:39:d1:9c:b9:f3:
                    29:2e:ba:bc:90:27:80:24:07:ea:17:14:42:98:b5:
                    fc:67:f2:a5:61:65:db:0e:0c:19:f0:cb:81:1d:7a:
                    0b:04:d5:07:59:a7:c0:7c:b5:a4:19:5e:52:07:fa:
                    95:20:a0:e3:5f:9a:af:3f:bd:c9:68:db:c3:80:05:
                    6d:50:bb:57:b4:1b:54:e7:73:ae:88:a8:0d:d9:d2:
                    33:d0:f7:0d:db:51:bc:2a:5f:47:ee:18:76:16:6b:
                    d6:1c:58:19:6b:41:09:06:88:8d:b6:de:4a:da:77:
                    de:ab:1a:70:9d:af:6e:1a:f1:5b:f0:d7:ad:24:59:
                    80:d7:23:a2:b4:2b:ba:0d:62:f4:a8:17:ae:1c:51:
                    fb:4a:60:b3:a9:e3:63:b1:d9:30:6a:d2:a2:f4:e1:
                    00:2e:25:e2:df:9e:f6:22:a4:db:2a:e2:d6:56:ae:
                    49:7a:86:1d:33:fc:3e:2f:39:6b:85:55:2d:ce:9a:
                    10:59:7e:9e:a2:f5:cf:b8:cc:88:75:d4:8f:24:73:
                    98:5b:3b:b4:a7:76:ac:21:3c:29:9f:e5:37:85:ef:
                    0d:1d:f7:d9:74:33:4a:c5:fd:e3:7a:74:45:08:a5:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:7A:AD:B3:E4:2E:F4:2A:4E:96:1E:63:91:40:96:44:5E:C9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4d2e9984-efd4-367e-a07d-458e5d71c9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:56:85:93:71:90:a4:b8:e5:da:52:ae:5d:0b:79:3d:bb:bb:
         1f:f0:61:35:d6:2e:8c:c7:f9:fb:70:c4:eb:2b:f6:d9:2f:55:
         e8:72:58:48:ee:ab:76:52:98:6f:c2:39:f7:bd:75:22:f2:5b:
         28:fd:af:3f:69:86:27:89:2d:50:ce:3c:1b:53:9a:59:75:90:
         df:f6:dc:40:6e:5d:65:e5:24:ad:ba:da:fd:b3:a3:4f:50:a9:
         71:b6:e3:e6:c8:7d:83:a3:23:ae:44:b0:be:5b:e8:0c:33:d2:
         88:4b:a5:36:7f:12:47:27:78:a9:7d:0c:8e:79:eb:c9:6c:53:
         7a:d6:77:60:d5:4f:15:fa:77:e4:bb:05:ee:fb:10:a7:46:88:
         ac:29:9b:9f:8a:0c:64:2e:d0:21:21:3b:ab:8c:aa:08:64:5f:
         21:b2:bc:7b:a3:9f:7f:fd:d2:bc:5f:ad:56:0c:df:2e:cd:f8:
         4e:66:10:43:9f:bb:69:55:fe:62:34:3b:fb:39:e7:c9:25:09:
         56:26:0c:d5:95:3f:85:17:c4:6c:36:a1:68:14:5d:2b:d9:d4:
         62:4e:aa:ce:37:57:32:b7:08:bb:16:9c:cd:6a:31:9f:cc:a9:
         0f:d4:73:9d:08:63:af:a7:11:38:98:4a:ae:d0:09:50:35:14:
         72:bd:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:53:24 2026 by rpki-client