Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5c7831-508b-34ef-a2dc-eac32b951722.roa
File:                     6f5c7831-508b-34ef-a2dc-eac32b951722.roa (raw, json)
Hash identifier:          1eiLCzON4LJurEwG3IVy4rg1O4CFi8mJt3BXa0MjEd4=
Subject key identifier:   E0:EF:A3:BB:19:1A:D7:5E:73:AE:26:0D:7C:F0:29:05:AF:95:04:5C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7399EB64E5E7C174C4819E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5c7831-508b-34ef-a2dc-eac32b951722.roa
Signing time:             Thu 09 Apr 2026 17:49:40 +0000
ROA not before:           Thu 09 Apr 2026 17:49:40 +0000
ROA not after:            Wed 08 Jul 2026 17:49:40 +0000
asID:                     14789
IP address blocks:        104.29.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:99:eb:64:e5:e7:c1:74:c4:81:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 17:49:40 2026 GMT
            Not After : Jul  8 17:49:40 2026 GMT
        Subject: CN=9a536698-1dcc-4555-a6e3-d73241149a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:85:37:1b:49:19:37:65:57:c8:ea:45:84:
                    c6:98:7e:47:d2:1b:32:aa:44:fd:ca:a9:69:09:ea:
                    5b:48:30:47:bf:c9:b8:69:ae:35:c5:c9:35:05:f5:
                    92:3a:6e:87:96:39:95:ad:05:e9:fe:94:0e:00:d1:
                    fe:1e:16:74:b0:3b:5a:54:46:11:d1:35:51:36:65:
                    08:47:87:c7:b3:da:5e:2f:8c:94:f4:49:ff:2e:d2:
                    07:a7:43:14:e8:c2:2c:11:65:0a:fd:a4:46:2c:fe:
                    36:a4:22:a5:20:6a:6a:92:66:84:ea:33:91:48:6a:
                    e9:27:53:d8:88:ae:b1:c4:c2:cc:61:c0:78:bf:e1:
                    72:9c:07:09:f4:e5:7e:81:55:58:1f:16:32:e6:38:
                    bc:4e:5c:03:d8:b9:e4:5d:2e:f4:e8:75:1b:6c:55:
                    17:46:cf:88:4a:c2:0c:88:aa:05:62:19:e8:18:bb:
                    5a:e4:d2:05:b8:2b:03:cd:9d:d0:56:1f:e1:f1:c8:
                    8a:4c:8f:6c:db:40:f8:82:61:e2:7e:5c:39:42:fc:
                    2b:4d:f4:94:e9:25:ed:c8:90:b9:a1:be:31:b7:cb:
                    8e:61:1c:a7:f3:f7:e7:7c:33:b9:34:08:f9:13:6f:
                    63:9f:a6:cf:68:5a:37:0e:57:a5:8e:49:d0:1c:35:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EF:A3:BB:19:1A:D7:5E:73:AE:26:0D:7C:F0:29:05:AF:95:04:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5c7831-508b-34ef-a2dc-eac32b951722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:be:7e:02:68:6b:3d:0f:e3:64:da:98:53:f8:56:f0:18:
         b8:cf:e2:2d:22:01:64:f5:bf:a4:ef:23:8b:d0:09:c8:86:55:
         cf:fb:b9:16:80:7a:f2:13:4e:4d:0f:32:e0:0a:04:75:b7:73:
         51:ee:e6:90:d8:4d:0a:4f:2d:3e:59:c3:3a:0b:1c:a2:57:40:
         d5:d6:6b:7a:cb:33:97:1b:3f:ee:c5:d2:3e:2c:c4:67:93:d1:
         fc:16:3e:df:5d:82:46:2a:3b:3c:f3:ef:78:90:b3:73:fb:2f:
         18:52:bd:56:5c:41:9a:51:f3:72:13:e4:22:9f:37:75:ec:e1:
         19:75:3c:00:71:ed:a1:b8:67:57:7c:6e:fa:ba:ef:48:9b:fc:
         cd:52:af:44:e5:ba:bf:ea:49:7b:94:86:17:31:a8:d7:2a:0c:
         58:9b:76:f2:f8:8d:9d:e3:a8:ec:71:19:5d:e2:d3:f5:f5:2a:
         0a:ac:30:be:d6:13:93:8b:f4:5a:a8:f1:11:da:06:97:c4:85:
         e5:71:24:24:3e:d9:63:e0:9d:8e:0f:3a:8e:a1:27:e3:7a:b2:
         07:69:23:fc:73:c4:08:85:63:33:1d:b2:25:f2:e6:ce:82:e5:
         e3:e2:f6:7c:73:62:9d:91:01:8d:22:53:72:e9:d3:4b:70:70:
         d5:82:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:23 2026 by rpki-client