Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/629fd353-f3e7-39d8-9621-38f47711fb08.roa
File:                     629fd353-f3e7-39d8-9621-38f47711fb08.roa (raw, json)
Hash identifier:          dBTyZ2Z1SGhEiK+2KScKHze5lZfhqwYXADZNFLfcWQo=
Subject key identifier:   D5:8F:17:FB:0D:C8:BE:49:8C:85:2A:4C:88:E8:A0:99:A5:AC:19:16
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFD4756410AAE5A52DB980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/629fd353-f3e7-39d8-9621-38f47711fb08.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.17.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d4:75:64:10:aa:e5:a5:2d:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=7c691d52-d15d-4fb6-9eec-050c5b31f500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:76:63:e8:40:19:7c:9f:fd:36:d5:8d:1f:
                    c0:80:53:23:cb:e7:3a:95:25:51:0b:29:71:cd:1d:
                    48:42:e3:cf:0c:b9:f5:2d:a5:2f:2d:a2:b2:a7:b2:
                    80:92:ff:61:77:f0:26:a3:c6:60:69:3d:45:33:99:
                    bd:c8:86:9e:19:25:c9:da:9a:ef:59:4c:7c:0d:9c:
                    07:bb:fb:d2:e5:cc:be:8b:3d:62:1f:5b:26:9b:db:
                    9a:b3:0c:5a:f3:c1:36:a4:4b:b5:e9:c4:1d:78:44:
                    45:40:7f:92:bb:96:2e:b9:98:54:45:cb:6c:28:bd:
                    f7:74:77:e3:19:69:71:07:80:30:44:81:a4:32:22:
                    e0:5c:b9:a7:30:a3:f4:68:c6:9b:71:10:cc:32:6d:
                    34:31:a4:80:e0:b0:4a:ad:5d:81:5a:b4:0f:5c:20:
                    0f:f0:2f:fd:83:f7:f7:45:c4:9a:1e:c9:9f:3c:13:
                    7d:b4:ff:89:53:bb:de:4c:a6:89:c5:c9:b3:a3:b1:
                    49:6b:62:b9:19:38:1b:b3:ad:47:42:24:5d:17:0e:
                    c0:ef:32:51:f4:d6:9a:37:e2:32:3a:fb:fa:a4:18:
                    db:f1:1d:59:f0:e0:00:3b:d6:16:70:a7:a9:2c:95:
                    24:c2:f2:ea:1c:00:d4:68:a7:92:a0:c3:ae:54:f5:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8F:17:FB:0D:C8:BE:49:8C:85:2A:4C:88:E8:A0:99:A5:AC:19:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/629fd353-f3e7-39d8-9621-38f47711fb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0b:14:df:17:3c:b6:f6:51:1a:a0:ea:0b:ce:9e:38:7e:e1:
         a7:fb:52:5a:5a:65:6f:b1:ec:72:d4:f3:fa:24:ee:53:7f:68:
         49:92:29:ad:54:13:9f:d5:e6:85:66:18:5b:98:41:95:bb:c3:
         b7:90:04:42:1d:48:0c:89:13:29:e5:76:2c:d7:59:7c:c3:f0:
         ef:55:56:e6:03:f4:d2:7a:0e:72:64:d1:6a:75:a5:65:06:3a:
         a2:36:47:81:45:72:9d:61:7e:88:08:ff:73:22:7d:83:59:cc:
         44:dd:27:76:63:7a:c0:05:07:41:ba:cf:6c:fc:f8:b4:ed:db:
         85:0e:f8:55:55:55:bc:25:c3:1c:5e:1c:1e:cd:07:58:7e:2c:
         82:ba:5e:8f:f0:59:cb:e8:3d:20:e3:97:64:f0:6c:da:93:d6:
         6f:6a:f4:f7:9a:67:c6:78:9d:83:0b:9a:5f:27:85:4e:a5:74:
         b3:9b:e7:f0:61:c8:a7:3f:a2:3e:6c:0f:2c:0f:35:32:4e:bb:
         d9:9f:35:7c:b4:92:ad:34:47:3d:d9:17:ff:e5:5c:2d:e9:17:
         80:17:3c:34:dc:26:f3:77:35:13:5b:a0:64:66:f0:59:e7:96:
         e4:48:14:be:61:c9:77:67:ff:8f:eb:40:f2:e1:23:2a:48:03:
         e9:d8:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:17 2026 by rpki-client