Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8774465-868f-3637-86d0-17dcc96f01b4.roa
File:                     a8774465-868f-3637-86d0-17dcc96f01b4.roa (raw, json)
Hash identifier:          hc691UGZPP+GxQt7jBNbCiFQZTl/KLRK3uA2XLsrvHo=
Subject key identifier:   62:4F:54:4D:3F:ED:F7:9F:01:12:6B:D3:55:01:7C:32:05:D1:3E:91
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F9B7ED835C17B4DB1CF8A7080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8774465-868f-3637-86d0-17dcc96f01b4.roa
Signing time:             Sat 24 Oct 2026 10:21:19 +0000
ROA not before:           Sat 24 Oct 2026 10:21:19 +0000
ROA not after:            Fri 22 Jan 2027 11:21:19 +0000
asID:                     11404
IP address blocks:        104.140.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:7e:d8:35:c1:7b:4d:b1:cf:8a:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 24 10:21:19 2026 GMT
            Not After : Jan 22 11:21:19 2027 GMT
        Subject: CN=6e5a258b-7e8e-46d2-8da1-ecd4204f6576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:2d:ba:2b:1f:9c:d5:8c:da:8d:9b:bb:0e:
                    40:cd:66:f8:1e:1b:b5:f6:33:f4:b8:cb:bd:ef:79:
                    cf:6c:3d:a4:97:08:6d:8d:16:31:99:50:02:66:d0:
                    a7:87:ad:27:30:a6:34:b8:a6:28:4f:66:37:c3:b6:
                    b9:50:2b:e6:b7:60:1d:53:0c:a9:36:28:ee:1c:47:
                    ff:cb:11:cb:40:aa:94:34:8f:20:eb:70:d3:75:10:
                    e8:b3:8e:1d:3d:fe:15:63:b3:03:aa:19:d6:12:5d:
                    d5:84:2e:ac:f5:37:c8:0c:35:a3:c2:c1:98:aa:15:
                    60:ac:e6:62:a6:a1:0e:ea:d2:9a:19:28:d7:2c:5d:
                    4a:ba:6d:49:fc:14:a4:27:36:ca:e4:0b:0a:4a:0e:
                    a6:df:b3:fa:7a:84:79:98:4f:64:09:71:6d:aa:2a:
                    05:f6:15:91:f2:60:bc:7f:ee:15:ca:7b:21:17:94:
                    d9:b6:15:a3:b5:24:b5:c9:d6:4b:4d:4f:e4:8b:3c:
                    a2:22:30:07:9e:9b:37:6f:7d:15:b0:16:8e:cd:14:
                    a2:2f:11:cf:38:e0:1d:24:3e:ab:1a:68:b7:83:1b:
                    5b:4f:ac:2e:22:24:a2:e4:cb:94:6d:e4:6d:1e:ea:
                    ef:a4:79:02:5b:91:75:ea:d1:30:22:a9:50:a3:c8:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:54:4D:3F:ED:F7:9F:01:12:6B:D3:55:01:7C:32:05:D1:3E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8774465-868f-3637-86d0-17dcc96f01b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:02:b8:64:cb:78:68:b9:a1:88:ba:dd:bf:fb:6c:dd:8e:
         34:8f:d2:24:1a:43:b0:86:50:f9:5f:81:fa:60:7b:ff:c3:54:
         ca:4f:04:dc:0b:54:0e:83:1a:09:b4:fb:09:53:eb:2c:7a:f7:
         23:08:0c:7f:e3:c4:d4:ac:a8:b9:4e:b4:3e:a7:94:6a:66:22:
         4c:41:5a:24:ba:d4:21:ee:2b:9a:4c:51:3f:a5:af:b9:3f:6d:
         4b:fe:52:9a:6e:7d:4f:15:f2:fd:ab:a9:6d:a5:53:25:f8:b9:
         1e:d3:82:85:83:ab:ee:39:45:8d:66:82:a5:5d:cf:4b:fe:d5:
         6d:99:b7:ba:ff:1c:f3:a4:4e:4c:53:28:af:6f:85:cf:3c:05:
         fd:8e:fb:ac:05:91:c2:69:d4:85:81:f2:f9:fb:f1:b4:32:ed:
         57:30:18:3c:5d:28:1f:ce:63:1f:32:25:3f:fa:83:70:33:58:
         72:c1:96:dd:07:2b:a7:06:51:67:e6:63:ec:69:ef:01:27:a5:
         c4:7a:34:83:be:56:26:65:0f:72:e1:74:d3:40:93:6f:5b:75:
         e3:b4:ac:b1:98:a2:f9:57:b4:e1:59:e2:ee:de:af:e5:1b:1e:
         75:b7:eb:9e:4d:15:5f:43:57:5b:7e:35:24:d6:a8:ab:2f:16:
         e3:d9:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:40:49 2026 by rpki-client