Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa
File:                     45a02249-463e-36e7-8fc1-dc479575b96c.roa (raw, json)
Hash identifier:          18o8o+p72SWjELegHjeZs7sNo3XQOkTe/Pjk2QUv/50=
Subject key identifier:   F2:83:84:29:E3:2D:5B:77:EB:25:EC:8A:08:30:95:A6:95:A9:51:4D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D86954F334C1A45870894DF20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     62904
IP address blocks:        104.140.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4f:33:4c:1a:45:87:08:94:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=dc06ec7d-882b-4f6e-a3f1-b498e2fd485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:35:49:d3:75:ab:cc:9f:eb:a2:ad:9b:08:
                    f9:b1:90:61:06:41:3d:15:7f:f1:02:6c:5b:64:c5:
                    31:c9:4c:b8:61:2a:20:e8:78:1a:ff:fe:7d:6c:45:
                    7e:1b:78:1f:b7:f2:00:69:fd:63:16:45:ce:2c:cc:
                    23:55:d9:19:66:7f:de:0a:5c:22:15:ef:a0:e6:26:
                    7c:17:b0:31:8f:8e:5f:e9:68:61:01:4e:1b:d6:52:
                    98:15:6c:18:85:f5:67:4a:79:a4:4f:7a:1b:10:8a:
                    c3:37:43:c7:0a:05:b7:0d:22:a5:b1:65:27:fc:b5:
                    6f:16:8c:ce:87:a4:38:b5:b6:3f:93:10:19:74:d6:
                    3c:88:dc:60:bd:26:fe:a4:78:f3:36:35:1a:f3:f9:
                    12:41:fa:5d:5a:b8:f6:6a:5f:97:50:a1:55:b3:f2:
                    9c:db:d8:90:28:dc:bc:98:16:c7:f2:a9:a2:c1:05:
                    35:5e:e9:71:fc:ee:5e:d6:b2:4c:77:ae:9a:32:10:
                    87:19:4b:3c:9b:2b:7f:34:6d:65:c0:fd:e8:6a:51:
                    46:41:6b:87:cd:a0:f8:fc:07:dd:60:f3:ec:05:2f:
                    46:1e:03:98:2a:7f:65:fb:da:65:50:f3:1f:78:2f:
                    7e:31:42:f1:bb:19:bc:8a:9d:44:8a:0e:40:9e:d2:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:83:84:29:E3:2D:5B:77:EB:25:EC:8A:08:30:95:A6:95:A9:51:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45a02249-463e-36e7-8fc1-dc479575b96c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:e8:b3:50:a7:ae:e1:cb:a2:18:6d:c3:ef:e5:9a:0b:1a:
         bc:55:64:20:84:3b:e7:37:2f:06:8b:48:80:65:7a:b6:9e:4d:
         ff:69:31:56:a1:cf:d4:c6:c6:c7:f0:94:e3:30:68:e7:bf:00:
         02:a6:43:ae:ec:40:5e:0f:5a:b5:c6:cf:8b:98:51:c7:58:5a:
         aa:dc:c6:05:77:ea:60:c1:1b:a0:2a:74:65:22:6d:fe:9e:3d:
         c7:2e:ff:ab:8f:ad:b9:ba:3f:71:80:36:d6:e9:35:76:30:2a:
         f7:45:5a:c7:a3:5e:0d:8f:85:ff:38:23:15:1f:bc:7d:d9:f3:
         ab:79:40:b1:61:89:36:29:43:96:4f:d7:39:56:29:1b:59:cb:
         c0:9d:8c:a9:cf:0f:b5:1f:83:90:2c:71:32:22:dd:54:65:cd:
         56:8e:4f:7b:1f:49:a6:ef:5b:81:e3:c8:c8:27:39:9a:b0:a5:
         89:83:6b:d5:82:20:c9:4c:72:0d:34:7c:66:a2:ad:31:0c:76:
         4d:69:55:23:1e:ef:0b:35:53:31:4e:f7:91:d3:4e:12:18:77:
         38:88:45:0a:9a:32:51:33:87:c5:17:14:65:06:ae:73:25:c8:
         ec:b7:4e:a3:58:b9:77:6f:21:78:8a:b6:ba:d8:b7:5d:1d:f5:
         34:05:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:51 2026 by rpki-client