Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/90e4697e-a873-3c95-86cb-e11c003c9ccd.roa
File:                     90e4697e-a873-3c95-86cb-e11c003c9ccd.roa (raw, json)
Hash identifier:          r/VrTztRnwLUGKE1eibXydNwLllquXhPQ8O7/vb+0DE=
Subject key identifier:   01:1B:F1:E9:6A:3D:0C:2D:79:BB:6B:9D:25:7F:D9:38:3E:4C:93:23
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F07F2B7631B93DCD02C98BE80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/90e4697e-a873-3c95-86cb-e11c003c9ccd.roa
Signing time:             Tue 01 Sep 2026 13:55:09 +0000
ROA not before:           Tue 01 Sep 2026 13:55:09 +0000
ROA not after:            Mon 30 Nov 2026 14:55:09 +0000
asID:                     219182
IP address blocks:        104.206.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:f2:b7:63:1b:93:dc:d0:2c:98:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  1 13:55:09 2026 GMT
            Not After : Nov 30 14:55:09 2026 GMT
        Subject: CN=6772cbda-6831-4bb8-88c8-0be133337ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:7c:82:e7:6d:21:36:bf:74:ca:13:95:ca:
                    dc:41:c1:eb:a6:18:04:b5:b7:47:83:d5:3e:7a:49:
                    1c:44:15:0e:ea:27:1b:ff:ca:b7:e2:ab:0e:4e:a0:
                    11:55:b2:4a:1b:01:84:97:0e:d0:5d:0a:e0:b2:9b:
                    bb:8f:cb:59:86:54:97:e5:07:0a:c7:9c:16:4a:d2:
                    eb:88:cf:89:fd:a9:cb:cf:61:2f:2f:39:db:e3:f6:
                    55:1c:dd:8b:a8:60:64:4e:13:0b:2d:55:40:e6:be:
                    6a:94:3c:2c:94:50:2b:73:7f:af:ad:75:e1:ee:89:
                    ba:4b:23:e2:4f:75:cf:ff:c1:ab:8e:96:13:5f:e5:
                    a8:4d:06:6a:92:8f:0c:95:8d:69:1c:61:46:0c:3b:
                    32:f3:46:e3:64:bf:33:82:10:07:6c:38:f9:cb:c9:
                    fc:53:49:72:a0:c2:97:2d:21:48:5f:aa:8d:07:b9:
                    5a:e2:84:f0:75:f9:df:40:7d:3f:a0:1d:5d:83:37:
                    59:df:33:fa:ef:1e:b2:50:c1:b5:7c:d3:7b:61:95:
                    5f:ce:cb:c9:1e:d0:fb:ba:9d:9e:f5:77:1e:f8:d9:
                    1b:b9:e2:86:12:f9:48:b1:74:01:ac:a4:ef:2b:ea:
                    2a:9b:f6:36:76:a4:b2:31:42:77:4e:7c:f6:9c:8a:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:F1:E9:6A:3D:0C:2D:79:BB:6B:9D:25:7F:D9:38:3E:4C:93:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/90e4697e-a873-3c95-86cb-e11c003c9ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:22:04:5f:92:e9:71:ff:a9:e8:ef:6f:f9:27:c6:2b:f3:
         d1:65:82:64:a3:fb:fa:60:52:b0:37:9f:41:d8:5a:76:a5:e3:
         bc:44:a5:c3:29:7a:52:b4:97:3e:ab:84:b5:68:06:00:9c:d8:
         e9:1d:13:7e:05:67:95:83:2c:be:87:81:b8:b3:cd:5f:e4:b5:
         86:3d:34:8a:26:04:60:d1:b9:64:36:df:6d:59:fd:2c:c5:78:
         93:84:b3:75:a0:1c:0c:e9:a2:06:86:37:a6:be:fe:55:9c:a3:
         60:27:01:70:40:4c:71:43:f9:f7:61:db:26:55:0e:6d:52:6c:
         a8:3d:f4:64:80:a7:38:64:0d:61:eb:72:34:71:15:b1:64:8e:
         41:18:73:51:ea:bb:a5:60:e1:9e:e9:fa:eb:a2:4d:ae:59:49:
         dd:63:6b:9b:03:cc:cf:ca:91:d8:c2:5d:63:38:2a:2f:8e:b8:
         1b:a4:42:c5:0e:06:0b:e6:02:54:63:fc:73:4d:5e:71:1d:ce:
         51:35:62:61:ac:78:6b:48:87:8e:2d:65:17:bb:59:15:3f:fb:
         18:2f:7f:af:e4:da:32:73:0f:4d:1e:91:4e:97:fc:ff:14:eb:
         56:b1:1d:a0:ad:61:8e:b5:1b:dc:c4:ad:47:3e:15:7a:e3:f3:
         18:ff:9d:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H8rdjG5Pc0CyYvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkwMTEzNTUwOVoXDTI2MTEzMDE0NTUwOVowLzEtMCsGA1UEAxMk
Njc3MmNiZGEtNjgzMS00YmI4LTg4YzgtMGJlMTMzMzM3ZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnN8gudtITa/dMoTlcrcQcHrphgEtbdHg9U+
ekkcRBUO6icb/8q34qsOTqARVbJKGwGElw7QXQrgspu7j8tZhlSX5QcKx5wWStLr
iM+J/anLz2EvLznb4/ZVHN2LqGBkThMLLVVA5r5qlDwslFArc3+vrXXh7om6SyPi
T3XP/8GrjpYTX+WoTQZqko8MlY1pHGFGDDsy80bjZL8zghAHbDj5y8n8U0lyoMKX
LSFIX6qNB7la4oTwdfnfQH0/oB1dgzdZ3zP67x6yUMG1fNN7YZVfzsvJHtD7up2e
9Xce+NkbueKGEvlIsXQBrKTvK+oqm/Y2dqSyMUJ3Tnz2nIpUbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEb8elqPQwtebtrnSV/2Tg+TJMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTBlNDY5N2UtYTg3My0z
Yzk1LTg2Y2ItZTExYzAwM2M5Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM7EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHG1IgRfkulx/6no72/5J8Yr89FlgmSj+/pgUrA3n0HYWnal47xEpcMp
elK0lz6rhLVoBgCc2OkdE34FZ5WDLL6HgbizzV/ktYY9NIomBGDRuWQ2321Z/SzF
eJOEs3WgHAzpogaGN6a+/lWco2AnAXBATHFD+fdh2yZVDm1SbKg99GSApzhkDWHr
cjRxFbFkjkEYc1Hqu6Vg4Z7p+uuiTa5ZSd1ja5sDzM/KkdjCXWM4Ki+OuBukQsUO
BgvmAlRj/HNNXnEdzlE1YmGseGtIh44tZRe7WRU/+xgvf6/k2jJzD00ekU6X/P8U
61axHaCtYY61G9zErUc+FXrj8xj/nWU=
-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:24 2026 by rpki-client