Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5dd6b0eb-3a10-3bf8-a4f2-4f3fb97563f2.roa
File:                     5dd6b0eb-3a10-3bf8-a4f2-4f3fb97563f2.roa (raw, json)
Hash identifier:          qiBtvJn7rrVv/nI2R9e6PnOw+AqfaFbCpMQzhgsf2jI=
Subject key identifier:   BE:30:19:7F:5D:8B:FD:58:F6:15:EE:61:CE:49:6E:D4:F0:6B:AA:0B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DF5FA1C62A320329E935F4780
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5dd6b0eb-3a10-3bf8-a4f2-4f3fb97563f2.roa
Signing time:             Tue 26 May 2026 10:38:34 +0000
ROA not before:           Tue 26 May 2026 10:38:34 +0000
ROA not after:            Mon 24 Aug 2026 10:38:34 +0000
asID:                     20473
IP address blocks:        104.206.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f5:fa:1c:62:a3:20:32:9e:93:5f:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 26 10:38:34 2026 GMT
            Not After : Aug 24 10:38:34 2026 GMT
        Subject: CN=c1c284e0-cc01-4331-94b0-dd157eaede3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:76:a7:b6:dd:e5:00:73:53:b7:d8:d6:f1:
                    cd:73:2f:b5:39:07:cf:de:38:ae:be:39:b4:65:48:
                    ce:55:e5:5a:ec:f1:9b:88:2c:74:9d:a8:c1:e4:18:
                    b7:45:9b:f8:82:24:8d:59:6a:4d:46:26:34:fc:90:
                    0d:c6:a3:34:54:93:24:1a:10:66:9a:84:b5:0e:12:
                    fe:9e:ed:52:6b:cb:7c:da:71:f8:fe:14:b7:21:fd:
                    e0:24:59:b5:cc:cb:4a:08:5f:96:e2:30:8f:d9:22:
                    a8:ed:ff:a1:42:a6:e0:ef:fb:9c:38:22:c2:0b:a2:
                    c3:0c:01:e3:72:a0:39:91:3e:7b:e9:6e:f7:2a:ab:
                    09:ce:ad:a4:72:41:c9:e1:d3:8b:20:7e:88:d4:27:
                    ae:eb:61:c3:6f:d4:00:0a:f4:df:8d:49:0b:02:86:
                    30:a5:35:74:23:ca:0a:3d:17:3f:ac:60:1d:44:43:
                    e8:97:9a:99:cf:84:f0:b3:6e:b5:e6:21:7b:f2:09:
                    5e:63:0b:60:d1:dc:3f:ba:18:60:6a:c1:c4:f9:84:
                    13:d3:20:9e:f5:3a:40:15:e8:7f:13:e2:ff:6c:10:
                    1b:17:40:3e:84:fb:8c:50:23:59:53:43:48:17:b3:
                    9c:57:b6:ce:7f:60:8c:87:2e:38:33:ba:83:4f:7d:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:19:7F:5D:8B:FD:58:F6:15:EE:61:CE:49:6E:D4:F0:6B:AA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5dd6b0eb-3a10-3bf8-a4f2-4f3fb97563f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:71:5d:d7:19:4d:91:58:28:f9:12:0c:97:14:3e:44:bf:
         53:45:35:2d:44:66:e4:75:96:e9:84:e1:bd:b5:05:3b:0b:85:
         e8:44:56:20:d6:99:48:2e:6f:83:ef:97:62:85:d9:65:8b:a2:
         97:6d:0b:73:d1:b4:6f:14:a9:b0:1a:c6:75:91:cc:75:7c:e0:
         65:97:c2:93:b9:1c:f0:37:6e:50:ed:af:7b:eb:33:f9:d9:05:
         47:e1:fd:ac:00:ec:bf:90:5e:01:e4:85:3d:11:ec:66:65:ec:
         55:83:0e:7b:f0:78:27:fc:b3:4a:32:ac:71:0b:e1:f8:a1:7b:
         54:6c:ce:a6:c6:7c:71:40:a3:36:fa:15:f2:1f:4f:f0:0e:eb:
         98:58:69:8e:bf:c9:72:ce:f3:95:19:46:61:7e:d4:07:70:5a:
         a6:ea:6e:fa:30:27:0a:ad:81:c8:5e:84:33:6f:89:9b:95:46:
         2d:16:fc:84:c1:96:af:d7:3f:15:4a:a5:77:00:9f:84:f5:e2:
         ba:42:c0:33:b7:99:2f:a3:37:f4:5c:23:af:7b:c9:57:f7:47:
         96:c0:55:bd:ab:4a:aa:a0:3a:b8:be:64:b6:57:0c:1c:6b:e3:
         d6:33:11:c2:19:15:a0:fb:f6:7a:09:90:a9:b2:1b:8a:89:e3:
         aa:f0:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:51:42 2026 by rpki-client