Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c778286-7429-37d7-8f21-02a2ad2b40ef.roa
File:                     6c778286-7429-37d7-8f21-02a2ad2b40ef.roa (raw, json)
Hash identifier:          XdjzDofnz2cbRjPz/lrernNYc0oRGl5zuz5v08WZvbU=
Subject key identifier:   1E:49:41:6F:52:50:41:B8:C1:FC:ED:75:57:2E:64:BE:AD:78:4F:F1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF4C03527BC80DE65CE3BB200
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c778286-7429-37d7-8f21-02a2ad2b40ef.roa
Signing time:             Tue 25 Aug 2026 16:53:01 +0000
ROA not before:           Tue 25 Aug 2026 16:53:01 +0000
ROA not after:            Mon 23 Nov 2026 17:53:01 +0000
asID:                     219394
IP address blocks:        104.206.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:c0:35:27:bc:80:de:65:ce:3b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 25 16:53:01 2026 GMT
            Not After : Nov 23 17:53:01 2026 GMT
        Subject: CN=25d8c39f-5f80-44bf-8bde-d73f2065c03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:78:73:7e:49:14:6f:d0:92:e5:eb:b0:a7:
                    1c:5e:7d:96:f2:c2:2d:bc:c8:af:17:b6:b7:7f:8b:
                    df:fd:7e:62:02:f3:65:73:b4:5d:37:7d:4b:ce:99:
                    8d:68:c6:72:1b:65:07:53:4b:37:8d:22:6d:63:6a:
                    5d:e1:fa:c3:c8:02:ad:d1:39:0d:79:f0:61:0b:92:
                    cf:d3:36:5b:70:1d:8b:1c:d9:66:42:15:ba:b8:46:
                    32:02:58:6e:91:8f:c1:49:90:52:af:b0:6e:c7:59:
                    8e:67:8f:32:e5:24:ef:a3:0f:6a:c9:47:ee:ff:7f:
                    08:b3:59:62:b9:95:ba:9a:d3:14:14:e8:ce:bc:15:
                    35:5d:85:3f:01:86:87:eb:1b:46:59:7e:c7:27:b5:
                    d6:9f:03:bc:90:db:85:83:ad:1f:e1:89:5a:c6:8b:
                    e5:f4:cc:59:b1:8b:c8:d4:95:8b:39:24:aa:60:70:
                    15:e1:a2:1d:17:a8:6d:10:5d:c9:a6:2b:cc:52:74:
                    65:04:b2:9e:ea:85:02:18:5a:33:5a:37:4e:71:33:
                    89:bc:83:fe:11:9c:0b:f0:50:bb:78:0a:7d:47:7b:
                    bc:5c:1c:fe:8a:89:17:ce:01:d7:e9:a3:0c:7f:93:
                    11:7c:bf:10:34:06:aa:04:30:29:00:08:92:12:7c:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:41:6F:52:50:41:B8:C1:FC:ED:75:57:2E:64:BE:AD:78:4F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6c778286-7429-37d7-8f21-02a2ad2b40ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:5e:f7:66:9a:18:42:27:e1:90:d7:53:f5:56:9a:e5:a4:
         cb:28:e7:80:9e:0a:be:36:2b:69:6f:c0:41:24:5d:58:f2:c5:
         e2:11:73:fc:44:62:70:aa:0d:34:1b:3d:32:12:04:9f:56:73:
         84:ed:90:f6:ac:9f:0e:ea:95:4e:c3:f1:d7:83:52:7c:cc:61:
         8a:0c:f2:07:84:dc:28:6f:25:eb:61:f7:5f:80:d7:bc:63:ea:
         81:55:ff:6b:ef:75:54:21:b1:73:93:01:ff:6d:43:2b:85:4b:
         a7:b7:00:39:42:3e:54:d2:a5:7d:f5:60:b4:ad:9c:12:e8:f3:
         cd:00:1c:2f:f3:6a:d3:e4:4c:e4:92:62:f8:dd:62:fe:75:1b:
         d3:c2:30:06:6b:8d:8e:a3:ef:14:73:7e:df:4e:01:39:3e:81:
         26:3b:5c:86:6d:af:43:65:9c:33:a3:2f:73:d5:c9:2b:66:b5:
         ae:49:cc:e2:83:9a:92:ef:f2:be:6a:86:e4:bf:62:3d:b0:c3:
         97:03:e9:70:8f:59:fc:b0:93:a4:4a:bc:48:92:8e:e1:d4:10:
         cf:ea:a6:22:7b:6b:15:48:eb:03:f6:c2:a7:6f:5d:fa:af:4c:
         1b:74:06:db:5f:41:77:7c:8e:0a:28:a8:35:35:be:f7:7f:41:
         f9:4f:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:59 2026 by rpki-client