Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb87551f-4aca-3639-afd0-59208e805e3e.roa
File:                     cb87551f-4aca-3639-afd0-59208e805e3e.roa (raw, json)
Hash identifier:          C1J3M/6kuJTtlpKklIBUm9hPvgPESbEckqVd0dNybj0=
Subject key identifier:   3C:81:25:D4:1A:96:2F:AF:87:37:C9:3E:2F:16:95:35:94:D6:04:CA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64D27673BC76757C916740
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb87551f-4aca-3639-afd0-59208e805e3e.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        104.140.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d2:76:73:bc:76:75:7c:91:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=7ea41ad9-1e60-4241-8bb7-64c4f2ee9da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:58:91:51:b2:08:32:fc:4f:c5:7f:60:39:
                    b6:68:8a:9e:83:e5:ca:90:2b:76:46:9d:16:53:22:
                    8d:e9:c6:63:14:1f:c0:e4:30:08:9c:7d:62:19:16:
                    38:5a:8c:2e:9c:30:f9:a4:89:36:d5:38:75:4b:ba:
                    fb:d6:83:26:f2:4a:79:5b:ea:65:34:2c:3b:d5:bf:
                    01:42:47:26:8f:3e:4b:0e:fd:f7:ce:7c:7f:94:69:
                    ce:68:b3:49:cf:71:28:d4:aa:c2:ba:92:db:28:a3:
                    aa:73:dc:b3:72:4b:18:fa:a7:40:cc:27:aa:aa:e3:
                    5e:12:a5:55:88:18:f7:93:b0:c9:16:d4:3d:af:01:
                    f8:f9:57:44:1d:34:2d:01:1d:32:4e:c4:c1:f0:43:
                    51:1d:08:93:44:bf:09:a6:57:bd:b2:7c:49:4c:6b:
                    ea:c6:9c:b6:55:e3:95:90:9c:8f:5c:ae:29:e5:61:
                    56:74:0c:26:0d:fd:ba:a2:02:7a:48:43:d0:68:2f:
                    74:ec:a0:29:9c:35:57:74:4f:34:28:23:66:33:c2:
                    14:60:01:37:c7:6f:b2:7c:8d:62:46:c4:3f:8d:25:
                    81:6e:15:c2:12:42:2d:f7:3f:03:01:13:62:ec:89:
                    e2:5b:0c:fa:d1:7f:05:c2:f2:20:3b:c4:c0:8e:39:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:25:D4:1A:96:2F:AF:87:37:C9:3E:2F:16:95:35:94:D6:04:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cb87551f-4aca-3639-afd0-59208e805e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:fa:32:0a:5b:6d:8c:c6:21:b0:87:60:b3:94:79:76:f0:
         65:92:d0:28:85:5d:e1:05:8b:42:78:dc:6d:63:0d:92:ec:7e:
         ac:18:1a:41:02:a6:be:c4:19:18:9c:3a:fa:ba:c0:f6:46:8a:
         0a:f7:21:ad:8b:23:2d:fa:05:3a:9d:0c:5a:1c:c2:74:9d:01:
         b9:fa:69:7f:ba:dc:2d:7c:ca:b0:41:d0:77:75:4b:4d:e2:35:
         1b:09:eb:cc:28:d5:a9:13:f5:2a:45:c8:b9:17:30:95:86:03:
         86:89:da:02:49:ee:52:49:ce:ec:20:03:7a:23:11:0b:47:45:
         2a:ef:eb:84:4b:3b:6d:8e:3d:68:54:a8:a0:2a:a6:bc:47:ee:
         eb:b1:16:f6:ee:d6:99:94:9d:28:b9:cb:07:21:fa:e5:fa:27:
         c3:3a:fa:08:5c:c5:01:13:d3:c0:97:ee:d0:73:0d:53:37:31:
         b1:dc:8c:65:07:b8:e2:dd:7e:e1:da:10:59:63:39:e6:78:76:
         f2:fa:b5:fb:7e:ff:05:31:a4:79:62:06:57:dd:35:87:75:a9:
         1a:f0:aa:30:7e:b4:6f:e6:5b:be:27:5f:11:06:0e:c2:a3:b6:
         b7:8f:85:82:36:eb:af:9e:11:ec:41:fd:2d:ab:0b:2f:40:aa:
         e7:96:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:28:41 2026 by rpki-client