Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
File:                     df61bb8b-6c75-397e-84df-0353bf3e6294.roa (raw, json)
Hash identifier:          Yh+bHL8eE6petvTvPt45xnd8oaEvJSMTdQTvhEGvpQk=
Subject key identifier:   EC:1E:19:7F:89:8C:BE:51:E0:B7:EC:B8:21:6B:02:ED:C6:3C:E3:AE
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584DE84B44069340B73F3992FB80
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     63267
IP address blocks:        104.171.216.0/24 maxlen: 24
                          104.171.217.0/24 maxlen: 24
                          104.171.218.0/24 maxlen: 24
                          104.171.219.0/24 maxlen: 24
                          104.171.220.0/24 maxlen: 24
                          104.171.221.0/24 maxlen: 24
                          104.171.222.0/24 maxlen: 24
                          104.171.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:44:06:93:40:b7:3f:39:92:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=674786f4-d343-4798-9f4c-bdef031bf9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:78:7a:1d:83:4f:9a:ef:37:66:db:ba:f3:
                    59:e5:5d:6f:72:9c:a0:3c:4a:29:28:e8:9b:bb:d0:
                    c6:c3:bf:fc:f8:0b:ee:37:7b:8d:3a:b0:7b:84:71:
                    1e:04:43:e6:80:5c:f5:b7:6b:ae:b7:ae:83:d3:05:
                    85:9c:e5:4f:1d:84:34:6a:9c:55:1f:8f:1e:39:e5:
                    c5:69:2b:da:c4:f2:4b:85:40:32:81:dc:f2:34:23:
                    07:9f:46:6f:8d:b8:02:19:bc:fd:53:ba:f3:d1:2a:
                    95:4b:ba:5b:22:f2:1a:c6:ae:0f:c7:43:4c:48:6d:
                    1a:2e:3d:2e:f1:3d:5f:fb:95:86:a6:2e:41:a5:93:
                    3d:54:55:37:58:d1:6e:ca:c5:2c:3a:96:c7:c6:a9:
                    6a:c8:55:18:c5:4b:11:4f:c8:4f:04:45:0b:22:56:
                    6a:05:70:94:8e:8a:50:cc:5a:77:de:7c:b7:59:3d:
                    91:44:c6:19:7c:9f:c8:44:65:27:3d:d8:89:3b:c5:
                    7c:19:42:8e:3a:3c:cb:2d:a2:97:fa:30:fc:1d:34:
                    73:f7:b5:53:44:29:4f:ba:12:c2:6a:29:46:2d:7a:
                    17:4a:da:5b:9f:46:e0:3f:24:42:07:aa:8f:d9:93:
                    f3:56:85:68:09:16:48:4a:47:33:2a:0d:ef:e5:ff:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1E:19:7F:89:8C:BE:51:E0:B7:EC:B8:21:6B:02:ED:C6:3C:E3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5f:6d:13:67:da:a6:ba:89:79:02:14:d2:d3:ec:e5:f0:1a:
         49:46:f9:07:f6:4f:dd:34:e2:95:69:e1:71:84:e9:d6:b0:43:
         6d:e2:bf:0e:21:e4:88:01:51:c1:3b:7f:02:ac:6e:61:b2:73:
         9f:e7:f0:90:e8:25:23:04:2d:f3:e0:78:4f:b1:9a:5e:cd:64:
         47:51:3b:c5:52:ac:63:16:da:08:dd:94:b4:42:f7:01:66:65:
         82:df:d2:43:a0:c2:45:85:af:e4:6e:42:89:48:89:75:ca:2c:
         09:9c:ba:8e:90:2c:24:ca:a8:e1:45:78:56:48:52:25:3b:16:
         b2:49:09:1e:ce:00:46:40:f4:91:58:a9:ae:5f:6f:9f:e1:69:
         2d:bc:83:44:c2:ae:a9:47:9c:6d:96:92:be:3c:01:bf:cf:17:
         2e:a1:88:c0:9a:1e:c7:46:33:7e:e7:f4:6d:06:ea:0a:88:20:
         11:68:97:b9:97:6b:94:52:25:75:ec:7e:f7:d0:98:e7:32:c1:
         52:2b:fb:15:b3:e3:a1:39:ac:0e:e0:79:9f:de:93:b8:7d:36:
         d5:e0:50:00:4c:38:99:12:e1:bd:15:9d:cc:52:96:83:99:c6:
         91:99:7d:d4:00:25:b5:32:bb:7d:2e:3b:7f:08:c0:17:83:0b:
         cf:9d:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:29 2026 by rpki-client