Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e9e356f-4236-38e3-b790-16586fc6bc33.roa
File:                     2e9e356f-4236-38e3-b790-16586fc6bc33.roa (raw, json)
Hash identifier:          t37SUw902CxulzVzl5tsJ9HKpIAXvrt71AHgyHUUiVg=
Subject key identifier:   2B:73:02:5A:B6:62:0D:10:FE:85:0D:BE:D8:70:7B:0C:AF:FD:4F:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F4972DE5D6523FF1336B06A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e9e356f-4236-38e3-b790-16586fc6bc33.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.22.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:de:5d:65:23:ff:13:36:b0:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bbd23dae-6b28-4ac8-927f-7b6ce55f8ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:3e:30:8e:5a:0f:3a:f1:fe:7c:45:ef:d2:
                    09:14:f7:9b:53:fe:ee:dd:ed:c5:58:b7:89:5a:85:
                    b9:2b:72:14:bd:0c:62:11:f3:e7:a5:5c:86:24:27:
                    71:64:b8:a2:05:63:e1:53:7a:ae:b8:5d:12:06:8b:
                    4d:f6:d2:be:e5:3f:ba:33:cd:43:5d:6e:94:e0:09:
                    6b:d8:e0:c2:1e:03:19:f4:4b:8c:8b:c0:42:4b:b2:
                    43:5b:d4:3a:e0:3d:00:b2:37:77:22:77:82:10:fd:
                    9a:8e:3e:9b:14:eb:29:6a:8c:d0:51:c1:7d:62:de:
                    2e:5d:1b:3f:3a:18:dd:7e:32:a0:66:7d:04:51:0a:
                    70:78:83:73:ac:25:57:6c:15:bb:23:3f:23:5a:92:
                    d8:31:a3:36:d3:1e:c9:cd:ea:06:02:ea:91:88:89:
                    90:9e:29:b3:92:be:d0:02:8e:d5:cf:74:af:71:52:
                    c5:a7:56:6f:ae:80:3d:d8:5f:8d:50:5a:f8:a1:30:
                    eb:db:2f:0d:1c:d6:9f:57:d2:83:a6:82:39:d8:a9:
                    b5:66:e9:92:6a:74:d9:bf:84:3e:04:3b:a7:cb:10:
                    57:dc:11:2e:00:10:84:98:9d:29:f5:6e:77:8a:0c:
                    bc:fa:1b:e2:03:b2:3d:eb:90:88:65:34:cb:e2:1b:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:02:5A:B6:62:0D:10:FE:85:0D:BE:D8:70:7B:0C:AF:FD:4F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e9e356f-4236-38e3-b790-16586fc6bc33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:02:02:42:c3:4d:9f:1f:d0:56:c8:21:f8:82:32:c2:bd:
         97:ce:53:b2:db:ec:e3:b0:d7:2b:b0:05:9d:01:a5:57:19:e8:
         7d:90:1e:8d:a3:47:78:14:b4:7d:b1:ba:2a:a3:8b:ad:2b:99:
         21:e3:24:df:08:fa:c7:ca:f6:5f:4a:29:f2:fb:83:dd:a8:47:
         51:af:b1:e8:0c:fc:45:70:f7:9b:f0:dc:ad:bf:84:5c:1d:de:
         95:88:37:5a:5b:48:1a:53:ef:2c:9e:f3:c8:6a:45:70:3c:e0:
         b8:38:fc:1c:f3:0c:3c:88:b1:38:77:a8:6f:2f:1b:3b:66:42:
         9d:33:4c:3f:a5:fb:3e:05:f6:a8:a5:62:27:2c:76:39:e3:80:
         58:1f:40:a1:53:70:6d:63:92:31:39:6b:d7:36:80:d2:12:47:
         f6:29:03:f1:8c:52:20:a0:3c:fd:23:3f:ed:a3:1b:72:b3:de:
         e8:97:b4:64:2c:0b:12:bd:6f:9a:54:cc:b4:b2:21:a3:f4:e5:
         05:04:c2:f0:dc:21:fb:f1:d7:3f:65:cb:ab:df:69:1d:7e:49:
         4d:49:47:2a:fd:7a:d9:ee:3f:b3:76:e3:fc:a8:30:9a:62:37:
         be:61:5b:9d:53:e2:06:1a:8c:6b:ec:39:cf:2c:fb:b7:49:1b:
         16:0f:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:33 2026 by rpki-client