Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa
File:                     1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa (raw, json)
Hash identifier:          e76Nud/qR/Pv+t42M6qa6M1FFkP2S4EqbSzaKpE+XLw=
Subject key identifier:   39:9F:B7:F3:76:D5:49:81:80:01:3D:79:79:85:10:A2:19:2C:49:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE71051FFB21F42679700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.18.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e7:10:51:ff:b2:1f:42:67:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=5a43d03d-096d-48db-96bc-3c2813db2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:b5:c3:41:d7:1d:56:3b:13:6d:64:e0:3a:
                    48:8e:d1:9a:da:a0:8f:8d:0e:c3:77:46:57:3a:45:
                    32:a5:95:85:07:c8:7c:d6:09:24:0d:9c:06:5b:e0:
                    d0:8a:0a:6d:35:2e:e9:5c:68:87:a8:38:25:0b:39:
                    6c:e9:21:9c:ea:8a:67:79:ae:e4:5f:0a:15:05:21:
                    b0:24:c3:df:8c:a4:34:51:96:66:40:c1:57:50:28:
                    80:d2:13:c4:99:dd:b6:9c:89:6d:76:9f:48:e5:a7:
                    48:cf:32:9e:9f:90:09:9c:b4:15:56:79:1b:8a:89:
                    0e:87:07:30:fc:03:55:49:dc:3f:be:a6:36:71:65:
                    46:73:bb:29:19:59:32:b2:f6:f6:e9:7a:08:7b:54:
                    67:8b:e5:e1:82:e7:ba:54:18:ae:4a:15:2c:f0:18:
                    98:c1:b3:36:5a:93:5b:7c:13:b5:9e:8a:9f:e9:84:
                    d5:76:97:6a:0b:39:f6:4b:a1:c9:50:9d:3d:ea:f5:
                    a0:3c:bf:01:b8:e0:be:d8:b8:6c:4d:27:ad:ac:8b:
                    89:d9:b2:a9:6e:ee:36:25:a7:6e:62:59:e8:a8:35:
                    79:53:0e:f2:14:47:c8:5b:6d:fd:55:2c:8f:03:0e:
                    5e:05:65:f0:3d:96:0e:60:23:1b:65:38:1d:19:e5:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:B7:F3:76:D5:49:81:80:01:3D:79:79:85:10:A2:19:2C:49:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:04:04:29:2c:61:81:82:fa:44:c3:8e:37:98:12:b5:b2:ba:
         1d:b5:eb:ee:27:7b:37:53:e3:3a:b5:c4:c6:9f:f9:99:c5:52:
         62:71:85:21:cd:d4:90:f7:4e:fd:c6:4b:95:1f:9f:55:e8:64:
         02:aa:dc:f6:aa:de:62:6d:9b:db:81:8c:33:97:3d:1b:2e:5a:
         12:92:6e:29:3a:1c:a4:3f:27:72:f7:29:59:a2:93:79:91:71:
         83:ec:4a:63:83:4b:93:48:ef:49:16:2b:81:5c:36:93:cd:05:
         ff:cd:88:c6:d2:bd:2b:23:b4:ac:02:d6:98:4c:1e:ad:7c:f2:
         73:f5:46:21:3d:36:ba:6b:99:5b:be:a2:52:5e:84:16:88:cc:
         1c:23:63:97:5b:58:ec:1c:9a:9a:85:bc:e5:12:23:6e:98:39:
         2e:f4:9d:0d:0b:7d:00:ec:dd:65:0b:e9:7b:06:43:48:c0:1a:
         7c:5c:c9:77:48:5a:b6:87:5c:b6:36:58:96:d5:d4:45:f6:4e:
         2a:b3:f6:1a:6a:81:5c:f0:ca:f6:d6:54:c6:7a:68:22:37:68:
         7f:7a:a6:40:28:ea:1f:43:cd:3c:dd:f8:bc:49:c0:8a:2e:b2:
         20:e2:35:5d:97:d8:6d:18:97:a3:28:4e:fb:1a:5a:8c:bb:4b:
         66:db:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:35 2026 by rpki-client