Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/83fa5c16-333a-3f97-92c0-1b70fb590a39.roa
File:                     83fa5c16-333a-3f97-92c0-1b70fb590a39.roa (raw, json)
Hash identifier:          I4IZ51j1JhJ3bDh8G51GBtL8Nj3sk9lkrdnBjnNEIRY=
Subject key identifier:   DB:11:3E:E6:F5:B5:A0:B8:5E:15:C3:9F:7E:A9:AE:16:24:56:CA:7D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EAE81906BF743A0F63DB10A98
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/83fa5c16-333a-3f97-92c0-1b70fb590a39.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     834
IP address blocks:        104.140.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:90:6b:f7:43:a0:f6:3d:b1:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=0a47b813-6f8a-4aea-bcd0-e3e2b89a67f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:fe:37:9c:2b:42:51:69:55:46:d9:95:0e:
                    c6:39:fd:7f:12:f4:34:36:97:5f:49:d5:01:ee:e3:
                    89:80:e3:34:78:22:f2:c0:d4:fa:b3:81:5b:95:9d:
                    92:94:f9:fe:53:dd:12:2c:b5:87:4e:78:a5:a1:b2:
                    72:42:28:e0:dd:c3:ac:81:3b:d8:85:c3:15:7a:6b:
                    27:d9:8c:cc:0c:57:24:93:06:f5:f7:bc:f2:95:0b:
                    2c:35:d2:29:bc:fa:18:35:fa:70:b8:2b:5c:f3:b2:
                    10:68:68:a3:bd:4b:e1:d6:93:83:f1:c1:62:b6:51:
                    52:64:c9:5f:93:72:68:e7:1e:99:c1:e1:e2:48:6b:
                    07:1c:5f:84:5f:aa:12:4d:d6:d0:88:89:c0:61:da:
                    83:13:28:b7:36:9f:99:f5:b9:9a:7f:6b:28:0c:07:
                    82:fc:74:d3:21:08:35:89:6d:12:3d:5d:a9:8e:17:
                    fd:de:3f:07:e4:4c:38:1b:83:fa:6a:3d:14:09:1a:
                    a1:e2:04:33:f0:b5:43:0f:f0:6e:30:a6:bb:3b:be:
                    0a:8d:3f:31:0b:53:d0:d1:95:b5:a8:94:50:1b:05:
                    26:8a:8e:18:88:68:fc:f3:c6:48:af:ff:b5:2f:ff:
                    79:a8:74:4f:a7:d5:20:03:96:79:79:e1:23:c3:a0:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:3E:E6:F5:B5:A0:B8:5E:15:C3:9F:7E:A9:AE:16:24:56:CA:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/83fa5c16-333a-3f97-92c0-1b70fb590a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:31:fc:d1:f9:4b:67:29:44:0b:83:92:63:c4:b2:70:94:
         ce:af:fc:44:22:11:6d:af:f9:00:75:c3:64:b1:d3:ef:97:32:
         d7:25:55:e9:33:52:c2:41:f7:4c:7b:cb:7c:a6:bd:a7:dc:48:
         6b:7c:0f:95:8f:be:cb:1e:05:22:66:aa:a7:f8:d9:17:a3:0d:
         c3:17:65:4a:a0:95:2e:b6:a2:cb:6b:a7:9b:59:1e:98:6c:e6:
         2e:5f:9b:81:e1:6b:cb:9f:d6:34:75:d4:11:c9:80:19:0d:42:
         2b:76:d5:6b:7e:7a:40:8a:03:1a:25:8b:55:e6:ee:c4:63:5e:
         82:4d:ed:8f:d4:41:b0:a6:24:a2:25:d5:04:4b:0d:db:f5:6d:
         93:5f:63:33:ef:4b:51:1f:85:5a:fe:a5:8f:9c:f8:68:72:1e:
         28:0e:6e:21:d9:3f:20:4c:5a:b6:08:f6:bb:2e:21:11:26:d0:
         78:f7:1e:3a:89:67:62:e1:72:66:64:40:36:c3:8e:b2:0d:73:
         8e:e0:3b:13:d8:74:5e:a3:51:f0:3c:26:87:f1:f2:a8:3f:97:
         6b:a2:73:7d:d7:ab:47:f1:f4:f4:04:70:af:09:1d:2d:f6:19:
         aa:9a:02:5d:a5:dc:9e:a1:e6:a5:8c:ee:9d:6c:91:9c:e7:f5:
         3b:e5:af:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZBr90Og9j2xCpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
MGE0N2I4MTMtNmY4YS00YWVhLWJjZDAtZTNlMmI4OWE2N2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTT+N5wrQlFpVUbZlQ7GOf1/EvQ0NpdfSdUB
7uOJgOM0eCLywNT6s4FblZ2SlPn+U90SLLWHTnilobJyQijg3cOsgTvYhcMVemsn
2YzMDFckkwb197zylQssNdIpvPoYNfpwuCtc87IQaGijvUvh1pOD8cFitlFSZMlf
k3Jo5x6ZweHiSGsHHF+EX6oSTdbQiInAYdqDEyi3Np+Z9bmaf2soDAeC/HTTIQg1
iW0SPV2pjhf93j8H5Ew4G4P6aj0UCRqh4gQz8LVDD/BuMKa7O74KjT8xC1PQ0ZW1
qJRQGwUmio4YiGj888ZIr/+1L/95qHRPp9UgA5Z5eeEjw6CtzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsRPub1taC4XhXDn36prhYkVsp9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODNmYTVjMTYtMzMzYS0z
Zjk3LTkyYzAtMWI3MGZiNTkwYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIzMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBtMfzR+UtnKUQLg5JjxLJwlM6v/EQiEW2v+QB1w2Sx0++XMtclVekz
UsJB90x7y3ymvafcSGt8D5WPvsseBSJmqqf42RejDcMXZUqglS62ostrp5tZHphs
5i5fm4Hha8uf1jR11BHJgBkNQit21Wt+ekCKAxoli1Xm7sRjXoJN7Y/UQbCmJKIl
1QRLDdv1bZNfYzPvS1EfhVr+pY+c+GhyHigObiHZPyBMWrYI9rsuIREm0Hj3HjqJ
Z2LhcmZkQDbDjrINc47gOxPYdF6jUfA8Jofx8qg/l2uic33Xq0fx9PQEcK8JHS32
GaqaAl2l3J6h5qWM7p1skZzn9Tvlr8Y=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:22:23 2026 by rpki-client