Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa
File:                     48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa (raw, json)
Hash identifier:          rkYZxDAtkdcshJLm7Ee5/vBLmtPG0TLmfTkv+dzy8bI=
Subject key identifier:   E3:DF:74:AF:EB:AA:77:CF:83:0B:AB:95:69:F5:04:6D:93:0F:C4:EE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA796D6388323DAA3741A17C6
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        104.29.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:d6:38:83:23:da:a3:74:1a:17:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d01a662e-9d6d-4889-a02e-1ad83f1965fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:ac:81:04:b5:97:aa:1f:30:98:19:2b:a4:
                    5e:ea:db:d9:2a:8a:b1:0f:76:b6:ce:59:0f:b2:35:
                    3a:67:49:8d:3e:1b:41:6e:5e:7b:1a:39:cf:15:4b:
                    c3:af:da:9b:6b:57:77:f4:3d:cf:d8:4d:b8:a1:ac:
                    e1:49:ba:e9:aa:21:48:03:06:da:ba:36:50:5b:7d:
                    19:96:dd:bc:21:8a:f8:9c:22:0a:50:41:c5:da:5e:
                    14:9f:d1:49:56:9c:dd:04:75:f8:d3:3b:10:68:f6:
                    33:f7:c5:d8:41:1a:8a:46:10:8f:d9:5b:67:be:6c:
                    3b:ac:d8:e9:f5:ed:d4:f3:e7:57:46:6f:30:26:5e:
                    3b:e2:9c:81:53:ca:00:85:d9:f9:e3:2a:82:66:f5:
                    d2:34:85:a5:c2:81:a3:d0:e4:d8:47:97:af:31:c8:
                    50:28:1e:b5:92:59:4f:fd:3b:b6:32:e8:40:03:59:
                    8b:ba:66:8c:89:18:13:b6:b9:c2:d6:21:de:c3:a5:
                    81:12:4e:26:be:c0:44:e9:c4:f6:34:7f:9d:61:0e:
                    1f:10:78:a9:57:5e:d3:03:5e:3f:58:9c:b0:ec:3e:
                    f7:0c:a2:7a:71:15:be:33:61:3c:c5:8a:92:96:cb:
                    61:8c:f9:f9:cd:5a:3d:43:9a:36:51:40:1d:15:df:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:74:AF:EB:AA:77:CF:83:0B:AB:95:69:F5:04:6D:93:0F:C4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:cd:e9:b9:90:3b:b1:df:83:e0:70:32:b6:5b:04:71:6a:
         9e:0e:1c:fb:18:1d:ad:a4:21:79:c5:73:00:a2:73:f8:73:2f:
         82:ef:1f:21:36:f4:65:44:fb:72:e0:fb:f0:85:78:bf:77:08:
         8b:e9:ee:49:5a:7b:cc:74:ba:df:db:24:f9:f3:3d:82:7f:0b:
         7a:10:f6:c0:90:7c:a3:64:5e:ac:88:0f:1e:df:2a:cb:bc:ae:
         9a:2a:3b:1c:35:a4:08:22:e6:af:a0:19:79:a1:88:fe:f9:79:
         7d:9d:d6:72:5e:5a:f6:79:60:49:a3:93:f7:d8:9d:61:43:2d:
         5b:f4:ca:4d:a1:e3:5a:76:c7:1b:7d:24:6e:18:b7:ed:bd:fd:
         08:4a:1b:a8:4f:0b:5d:30:00:df:47:79:74:55:fe:0b:7b:1e:
         6a:25:65:29:29:6f:14:e7:22:0f:b3:5e:c9:bf:57:67:cc:ac:
         36:9e:6c:05:31:f6:68:62:aa:fe:ef:1b:e9:15:aa:54:9c:de:
         8f:1e:84:e0:de:7a:18:83:21:71:d9:e5:ec:8f:45:b8:d1:55:
         22:47:ea:07:c4:ba:c8:6d:ff:79:d7:9f:79:13:37:2f:f8:de:
         31:08:49:fd:1b:75:a2:e1:58:24:f4:e1:c8:6b:a7:f9:d1:1b:
         e3:cb:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:24 2026 by rpki-client