Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0d36633c-106b-3c2c-a074-9a2f6be4e319.roa
File:                     0d36633c-106b-3c2c-a074-9a2f6be4e319.roa (raw, json)
Hash identifier:          nKuD0Ay4VlKcFzcJr+K5NyjcySLaXe7BnGRWRu8HeH0=
Subject key identifier:   C5:1E:76:83:D8:AD:C5:32:21:05:F6:51:EE:DA:FF:12:23:E1:A7:57
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CC77739EA255CE7D3AABCE480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0d36633c-106b-3c2c-a074-9a2f6be4e319.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     215595
IP address blocks:        104.206.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:39:ea:25:5c:e7:d3:aa:bc:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=ba878c6a-190a-497b-9500-7c678814a3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:9c:ec:6c:04:16:0e:f6:86:7a:75:f0:92:
                    aa:77:e3:ff:98:fd:00:ec:ad:57:d0:41:c4:e6:2b:
                    74:1f:f6:90:2c:55:2f:06:da:95:1b:92:fa:26:17:
                    bf:c5:44:45:58:90:1a:f6:7d:aa:0b:7c:07:df:07:
                    36:f5:a8:44:b9:d3:df:e9:d2:81:2d:a5:5f:c7:fc:
                    7d:0a:4f:16:ca:9e:56:7c:fe:51:ca:2b:d9:d6:8f:
                    fe:ec:c9:22:68:95:3d:48:9f:2a:8d:c0:db:aa:ba:
                    49:cf:c1:a1:36:0f:84:db:4f:4e:ad:1e:db:98:f8:
                    a9:6b:55:ac:8c:d4:ab:2e:98:e1:00:6a:b9:c7:af:
                    72:23:6c:ef:ec:69:6d:a2:b8:4a:37:55:11:c7:60:
                    0e:bc:30:a9:34:96:c4:15:7b:f5:9e:9f:ca:ae:f5:
                    07:ba:c0:51:0f:f8:ce:68:9b:e3:1c:b2:3b:ef:2f:
                    a6:5e:ac:00:c9:e5:67:a1:a4:42:95:37:59:dc:79:
                    e9:c1:f8:f0:7d:64:ed:66:17:22:24:68:66:eb:35:
                    b8:1f:8a:e1:b4:b9:0d:b8:2d:fb:c3:54:84:b0:82:
                    db:a9:65:b0:62:9d:ea:93:fd:4f:44:e4:ee:2d:b0:
                    01:45:56:f5:38:7c:78:3e:cd:ea:ac:62:f0:34:2c:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:76:83:D8:AD:C5:32:21:05:F6:51:EE:DA:FF:12:23:E1:A7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0d36633c-106b-3c2c-a074-9a2f6be4e319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:a9:66:e4:4b:b1:3d:36:99:ca:45:77:72:36:0c:b6:f4:
         86:89:c5:de:9f:f8:43:79:15:4c:7c:c1:7c:60:7a:e9:83:43:
         02:71:1a:98:a6:5f:b5:7b:1b:f3:d0:4b:b1:3e:5f:63:f4:a7:
         cc:0f:2a:92:d3:b8:de:75:fe:cc:e2:f9:f5:66:27:82:54:9d:
         6c:5f:2b:3e:d4:34:a7:76:ad:e3:48:6f:73:41:50:ae:1e:23:
         6d:d6:a2:da:dd:ef:cf:cb:0c:ab:30:b9:20:9e:ef:69:86:7f:
         aa:b8:94:73:9c:42:dc:fa:02:68:90:c8:c7:eb:db:ad:0c:a0:
         2a:41:14:0f:8b:ba:94:fb:66:e1:1c:85:d7:49:e0:ad:37:f6:
         0a:08:59:09:14:06:ce:d8:7e:be:8b:59:8c:30:cb:7d:67:1b:
         a2:1d:ab:72:0d:22:8b:ca:aa:92:fd:8a:f0:6e:54:b5:fc:c6:
         c4:64:c1:d8:29:eb:0d:ec:27:e3:d9:51:8f:92:b6:31:7b:34:
         34:35:7e:03:61:bb:36:e3:ec:d8:bc:51:c3:54:33:cd:83:d8:
         2a:4d:1f:9a:9c:3d:21:60:8c:d6:9f:ad:49:46:d7:c2:62:26:
         48:38:f7:6f:74:f2:ba:8a:a3:a5:ec:ba:75:df:dd:80:c4:7f:
         fd:0c:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:19 2026 by rpki-client