Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa
File:                     54e7d065-600c-3a46-9f50-15aa58a909d6.roa (raw, json)
Hash identifier:          t7m4Un1AdnHnGnfLgToMWCk8fhi/kW+Q53xcfl0dh7k=
Subject key identifier:   CB:11:59:E9:65:32:CF:23:B1:B0:E3:D6:DF:55:65:BB:40:54:23:98
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D65153C7D40E1F0E75950E280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        104.201.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3c:7d:40:e1:f0:e7:59:50:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=a2cb374e-cd2d-441d-be80-4d73cc6a2eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:5a:30:d1:d2:91:41:a1:49:e8:53:ec:6e:
                    9b:63:61:a5:39:e5:1d:75:c3:4e:ec:ad:0d:21:33:
                    04:8a:87:2c:11:78:b3:f2:e5:0a:52:69:41:1a:ea:
                    d9:38:1e:2e:15:6e:5b:41:bf:0c:be:e7:24:c8:10:
                    80:ae:83:ed:86:49:95:d7:11:b9:b1:d2:a0:5d:ee:
                    db:ba:99:2d:84:ab:f9:ea:a1:6d:1f:85:2d:a9:ee:
                    7a:c3:fb:b9:5c:41:7e:93:43:14:cf:d8:04:94:04:
                    aa:80:f5:b4:e9:a0:f6:92:cd:98:a7:9a:21:73:58:
                    9e:c1:9b:6d:aa:fe:58:c4:13:f1:4d:a0:27:fe:b3:
                    aa:c5:69:ac:e2:1c:66:09:34:79:57:d5:ba:48:2e:
                    a9:37:bf:88:61:b0:cd:08:2a:71:03:b3:87:b9:61:
                    80:84:aa:35:11:c7:2c:5e:99:e9:76:32:45:59:21:
                    4f:bc:e6:fe:5d:3f:28:db:4d:b2:4b:d7:50:b3:d2:
                    13:56:1e:5d:9e:a9:79:3e:6c:96:c6:9c:cb:a4:5b:
                    79:fc:69:91:94:7f:20:7c:18:9d:6c:ce:51:5c:90:
                    b6:67:03:b4:24:01:e7:5b:f7:a1:d5:31:26:d3:8d:
                    e9:a8:00:46:ef:94:18:34:7a:17:a7:b5:f4:63:a7:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:59:E9:65:32:CF:23:B1:B0:E3:D6:DF:55:65:BB:40:54:23:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:52:f9:6f:f5:95:17:d9:81:ae:09:d4:f9:9b:5f:d7:ec:
         c5:3a:3d:31:aa:9f:2a:09:0a:be:82:6a:17:50:71:00:9d:d2:
         3f:6d:97:1f:45:14:d6:d5:2f:49:1f:c3:b4:db:12:86:3a:77:
         9d:bf:29:50:19:d7:ae:93:e1:ee:5d:7d:74:6c:45:3b:7a:8a:
         6b:ce:66:bc:0e:8a:f6:1a:94:e5:cf:1d:66:58:e3:d1:0b:37:
         d1:4e:93:2c:76:b3:ae:4d:bb:d9:3d:bd:35:6d:03:eb:ea:d9:
         7a:61:11:10:43:5e:45:ff:a1:36:08:c9:51:0b:bc:50:ef:b5:
         4a:49:77:b3:90:16:43:9f:0c:6a:12:00:86:a6:c2:fd:94:3a:
         0a:fc:81:88:5f:15:7b:ac:6b:93:9f:08:16:74:99:5e:b9:a2:
         53:ef:5a:eb:88:0e:fa:03:ff:38:48:51:cc:35:b5:57:0b:92:
         57:ed:bc:22:64:f6:f7:a8:d1:50:eb:e7:ca:dd:05:85:d0:1e:
         9c:04:aa:15:3d:0e:36:28:8e:e1:78:94:5b:cb:c5:71:a6:20:
         10:32:55:a0:40:fe:1f:9c:27:af:1b:fa:8b:df:be:9c:a1:a6:
         dd:cb:0b:b4:03:54:76:32:05:06:9e:a9:7f:9a:8a:dc:85:d3:
         d9:c2:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:43 2026 by rpki-client