Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfd610df-158a-37f4-aa88-37255dcee423.roa
File:                     cfd610df-158a-37f4-aa88-37255dcee423.roa (raw, json)
Hash identifier:          73f3mAWv7zJHkPn/WV8h6hwJlAm7lGxwpq9usQh9YHY=
Subject key identifier:   78:AB:45:07:0F:E6:08:58:A3:06:EA:B7:3A:1A:D3:A4:04:44:32:45
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC794F807205225F5FBC680
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfd610df-158a-37f4-aa88-37255dcee423.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        104.140.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:94:f8:07:20:52:25:f5:fb:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=36123d4f-83f9-4ef7-9759-d82012877f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:1a:b0:19:03:f9:b3:6a:af:e7:d0:2d:69:
                    3b:01:b3:57:bc:c0:c9:1e:4a:b9:e8:df:96:38:91:
                    69:1e:0a:d2:eb:a7:b6:e4:44:93:11:5a:e9:b3:d0:
                    a6:3b:05:37:4e:77:18:2f:28:ed:86:d0:f3:fa:c3:
                    7e:de:97:a4:33:f8:12:9d:ee:e9:59:a9:64:ad:a7:
                    69:ee:ca:1b:c1:46:b0:8a:36:68:bd:15:8f:03:bf:
                    b1:b0:75:ec:6c:18:da:33:f8:ad:1d:e5:4f:1a:e5:
                    4e:61:83:00:64:d5:34:eb:e6:67:93:6a:7f:7b:15:
                    cf:19:8d:5a:f3:18:f4:0c:41:9d:2a:5d:bd:2a:91:
                    dc:8f:69:de:89:f1:d2:25:56:a8:3e:8b:9b:fb:3a:
                    47:79:bb:87:4a:11:97:39:47:c9:67:db:04:e4:fe:
                    63:02:75:61:97:d2:d1:7f:35:ae:ab:3e:36:c6:44:
                    db:d0:ea:ee:96:74:93:b9:2d:e9:55:ae:7a:bd:57:
                    4e:70:99:ae:66:53:37:50:7f:ba:dd:05:d8:b2:05:
                    eb:4a:3c:29:07:95:18:47:55:25:c2:3c:aa:84:3c:
                    3b:6e:b8:1c:8c:cc:48:9b:bb:86:8e:ab:57:bf:14:
                    8a:43:d2:00:93:ce:68:fa:07:da:c1:b5:57:d9:60:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:45:07:0F:E6:08:58:A3:06:EA:B7:3A:1A:D3:A4:04:44:32:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfd610df-158a-37f4-aa88-37255dcee423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:f9:4b:b7:b2:12:8a:48:d5:fe:33:13:22:45:f8:5d:7b:
         b5:83:30:60:bd:3f:8f:08:27:99:78:3f:28:e9:d4:50:c8:c5:
         7b:9e:c1:77:59:3e:51:cd:a8:28:99:4b:30:2d:aa:7a:10:e9:
         5e:20:f8:a2:22:32:81:ec:60:25:96:71:bc:2b:cb:ff:e3:64:
         43:3b:3f:bb:38:93:22:b7:1f:0b:78:87:f3:8f:fa:30:f1:b1:
         ca:2a:d8:aa:59:8b:00:fb:e5:63:63:da:16:9b:04:11:92:84:
         1b:9f:bf:f8:98:fd:72:69:85:06:20:17:74:f7:2e:99:e2:aa:
         36:18:cd:52:79:20:c5:a5:f3:2e:e2:60:4e:ea:a1:f5:62:34:
         f5:ba:37:cb:a2:13:dd:c9:2e:60:16:3b:29:42:fa:95:ca:ed:
         d7:c1:50:de:a6:a3:7d:12:f7:dc:12:21:a0:14:e3:6f:48:c7:
         46:73:3c:86:b0:dd:d2:82:a5:f7:8d:5a:9c:92:ff:17:f8:90:
         87:14:3b:8d:65:89:df:02:6f:75:6d:fc:ad:16:e2:20:f9:8d:
         d6:b4:4a:98:d7:12:2f:c9:89:9e:10:79:0c:28:c4:61:39:c6:
         24:7d:5c:c6:4c:30:80:55:a0:8e:e9:d4:21:97:7a:c4:b3:ca:
         b4:68:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:51:04 2026 by rpki-client