Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/68c7910a-48ac-3320-9736-8640dbd668bb.roa
File:                     68c7910a-48ac-3320-9736-8640dbd668bb.roa (raw, json)
Hash identifier:          jQvThzs6s8JWBUnanW6k2vmLR3DVEn/Y7tyrnr1nu7s=
Subject key identifier:   BF:B8:E8:69:6F:36:0C:C5:98:CE:23:DC:44:CE:60:8E:7E:D4:34:51
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D38B2742F7D0B56A2EE6C19E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/68c7910a-48ac-3320-9736-8640dbd668bb.roa
Signing time:             Thu 19 Mar 2026 15:26:24 +0000
ROA not before:           Thu 19 Mar 2026 15:26:24 +0000
ROA not after:            Wed 17 Jun 2026 15:26:24 +0000
asID:                     198087
IP address blocks:        104.206.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:b2:74:2f:7d:0b:56:a2:ee:6c:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 19 15:26:24 2026 GMT
            Not After : Jun 17 15:26:24 2026 GMT
        Subject: CN=575867ea-6d1a-4bf0-baba-2c471e7caa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:ee:ea:99:04:2d:f8:0b:c4:eb:58:55:61:
                    01:fa:cf:f5:fb:c4:ea:fe:5f:23:3e:2f:f5:5c:24:
                    11:7e:53:5e:8f:7a:c5:c4:89:8e:5f:7e:a4:04:81:
                    a1:aa:83:ff:1b:b8:93:d0:55:04:15:0b:a5:7e:15:
                    76:c1:c6:a3:9a:4c:20:0c:2c:49:c3:06:44:bc:16:
                    8b:56:6b:7c:31:8a:ed:32:aa:ee:e4:9f:e2:1a:3f:
                    65:b5:89:af:96:08:85:ba:35:c7:63:5f:1a:56:c6:
                    d3:41:80:67:dd:d4:b4:1b:f6:ee:11:18:5d:32:68:
                    b6:39:0a:5f:97:87:40:c4:fc:20:9f:9f:8a:30:d7:
                    03:47:c4:5b:8a:64:aa:d9:4c:6d:cf:14:18:b1:d1:
                    35:6b:5d:a0:1d:75:9b:49:c6:b4:d5:2d:90:02:70:
                    a3:82:18:8e:12:1a:3b:12:f3:f6:df:61:28:91:b5:
                    30:e0:f4:6e:99:4f:93:f6:2b:86:3e:b2:bf:f9:82:
                    13:af:5a:8a:60:b1:5a:16:81:95:a9:c5:1d:00:f6:
                    3c:15:9b:a0:78:25:49:be:c8:4c:b4:fd:a8:ad:d2:
                    1e:a4:94:4b:93:53:ca:6e:06:8a:45:09:a4:86:a2:
                    6c:f1:1e:a6:7c:35:b9:77:9f:61:5c:29:d8:7e:22:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:E8:69:6F:36:0C:C5:98:CE:23:DC:44:CE:60:8E:7E:D4:34:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/68c7910a-48ac-3320-9736-8640dbd668bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:a3:9c:bb:d9:21:2b:07:78:ea:9d:b5:17:fd:b8:c6:c1:
         5d:1e:01:b7:58:cd:fb:d3:d3:69:69:f2:b9:a4:5d:38:67:80:
         e9:f7:d9:08:fc:ce:48:9a:d1:ce:11:ea:b9:37:8a:ab:c1:3d:
         42:d3:f6:63:59:30:3f:34:b6:c0:39:ed:84:93:43:93:2a:bf:
         34:73:46:fc:ac:2d:ea:08:9f:ac:09:5d:34:77:16:f7:d5:d2:
         6e:8b:82:49:8e:83:c7:9e:24:15:9b:ae:ec:3b:dd:ba:7c:45:
         a5:c2:92:3e:fc:a4:74:d0:dd:7f:10:36:7d:cc:bd:55:b9:75:
         f2:9e:f4:ca:15:46:8f:2e:5d:ab:87:d3:32:80:a8:07:76:10:
         4a:1a:07:47:f6:61:0b:fe:f7:44:49:05:1f:fa:03:d8:0b:ba:
         42:65:1c:c7:be:b0:90:f3:6c:ef:5c:b4:49:c2:6c:76:27:1d:
         51:12:22:f1:c0:0a:49:f7:30:b2:80:c8:a7:57:ff:57:f0:83:
         3a:25:03:e7:a6:7a:4d:a5:c9:34:d1:2f:67:ed:03:48:19:e7:
         d0:b6:57:a9:a6:77:24:71:c1:7e:bc:61:64:fd:b8:18:4f:61:
         9a:08:22:ca:5a:55:c2:34:27:1c:66:af:ff:03:f9:3c:2a:ac:
         ad:6c:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:07:08 2026 by rpki-client