Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa
File:                     ae787592-e911-36a3-888b-4f4a37abd16b.roa (raw, json)
Hash identifier:          ipmqbyCqHWDjBAbfe7b4TkUeKW6coxINYASEnHLOMw4=
Subject key identifier:   51:95:8F:A9:D2:0B:C8:C0:66:9F:FF:30:FA:14:4C:01:89:61:FB:78
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFF28741EA455A84D14280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.31.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f2:87:41:ea:45:5a:84:d1:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=f9993254-6006-4f43-b022-f6588a49d516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:6a:ab:03:e4:9f:51:57:0f:ce:12:18:e3:
                    38:db:f2:b2:5e:dd:df:8a:64:53:7b:ad:5a:a5:5f:
                    7d:62:ee:80:98:fc:e6:e8:9a:fd:7e:ab:1b:97:57:
                    56:70:7c:b4:3e:b8:50:b8:6f:ee:22:02:8e:ba:e7:
                    4d:ad:26:87:ba:33:07:20:70:57:5d:fe:eb:19:9d:
                    44:3a:ab:65:92:3c:c7:4d:27:86:73:1f:c3:86:4b:
                    22:02:af:ca:0d:f1:ff:ce:cf:e3:11:3c:6f:40:47:
                    d5:d3:64:37:c6:0a:12:65:19:66:7c:1b:bd:b1:4f:
                    1d:1f:85:33:b6:6e:d0:38:4e:95:db:95:26:8b:b5:
                    bc:e7:1e:c0:79:0b:72:6f:95:df:d6:e5:da:76:29:
                    5e:88:29:60:06:ac:b2:90:42:04:7b:a4:27:b7:b3:
                    6e:4e:4f:16:0f:b3:52:ae:7e:48:91:65:0e:6a:49:
                    c7:f5:46:e9:4b:0f:c8:e9:a9:86:46:64:e5:9e:86:
                    d6:aa:05:52:92:81:7e:1f:13:f4:e8:7f:bc:4a:95:
                    7e:c2:08:df:f7:8d:29:17:23:03:3d:0e:59:ae:85:
                    d8:8e:0f:40:fe:25:2e:4a:db:b8:f6:68:45:75:c1:
                    0e:e1:93:29:bf:d9:b0:fb:e7:26:15:a6:ed:e7:5f:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:8F:A9:D2:0B:C8:C0:66:9F:FF:30:FA:14:4C:01:89:61:FB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:e7:60:89:2d:ef:22:f9:40:f1:99:cd:a1:20:ed:34:93:
         26:d9:49:b3:ea:31:13:a7:07:65:1c:e8:a1:37:d2:c3:ec:6c:
         7f:b9:23:c4:8c:b6:a3:0d:7b:27:b8:5b:59:b2:82:17:d6:61:
         0c:92:6a:04:8a:2e:4c:68:c8:60:ea:26:58:89:e7:2d:fd:f7:
         5d:13:7d:cb:9a:6d:15:aa:3a:a4:fa:37:a5:f6:19:10:90:91:
         4f:65:37:e6:cc:43:e9:59:c8:43:af:02:f3:37:a5:a5:95:9a:
         9a:26:20:1a:21:b2:8e:35:06:06:1b:45:4e:36:72:be:3a:84:
         18:89:11:0e:ea:81:63:e2:dd:d4:30:3e:9c:ff:01:ab:d4:35:
         89:32:5a:28:8f:b3:c5:36:2a:1e:59:aa:db:dc:30:01:e7:1a:
         04:3d:ab:45:ed:47:a1:f8:72:de:7a:18:c4:d0:de:28:e1:68:
         a9:4b:a4:f1:39:1f:60:78:b2:ce:2b:cc:bb:49:ad:df:66:92:
         4e:70:5e:eb:fa:1e:3d:b4:b3:d5:52:d4:15:14:40:2b:b1:eb:
         a2:73:3a:f7:55:9c:99:fc:f5:bb:bb:57:77:8e:74:b0:b7:3b:
         a9:f9:aa:21:0b:55:6c:13:93:05:b0:ad:ba:a6:72:bb:93:a0:
         6a:47:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:48 2026 by rpki-client