Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa
File:                     e17f76b6-f017-390f-a321-ac4727d60e22.roa (raw, json)
Hash identifier:          W2K8+D5rnUTBeR0nrSfrD9B1roOCtHH6cLZUnjkiZ/4=
Subject key identifier:   D2:06:F8:82:27:B0:8B:59:70:01:6D:7C:E8:EE:36:D4:3F:D8:90:94
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE8C4246118A7D196D7C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.19.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e8:c4:24:61:18:a7:d1:96:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=ec26084e-909a-4d6f-8bda-97ac713469eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:ce:96:9a:ba:51:ce:28:fe:50:da:56:18:
                    5d:d5:7f:7f:ea:76:74:a3:99:01:3e:71:27:9c:99:
                    0b:35:7a:db:17:9e:7c:c3:59:13:c1:7e:0c:ea:0e:
                    a5:44:2d:a8:cf:71:3b:43:32:dc:87:15:46:43:bc:
                    10:e7:a9:99:ae:dc:18:b6:04:25:83:cb:9a:0a:95:
                    ad:c3:93:29:8e:85:d7:af:68:53:18:a6:a4:0c:22:
                    d7:e3:c3:81:7b:01:03:40:70:33:11:f7:d2:1d:4e:
                    5f:22:cd:bf:22:99:97:e3:1b:dd:c4:d7:1c:53:f9:
                    09:d7:88:ab:1c:fe:44:87:f2:4f:28:46:c4:79:f7:
                    e9:8f:af:52:03:c2:c6:ae:79:80:ba:bd:a5:8c:f4:
                    c3:c8:24:b6:45:12:5f:a8:03:fc:d7:21:e2:31:96:
                    91:20:37:3e:bb:d0:4d:92:46:29:ff:33:ea:66:eb:
                    47:9b:3b:ab:74:73:e1:32:66:84:0a:2e:42:78:01:
                    e4:cd:fa:a3:05:08:f7:4d:10:bb:26:23:37:51:28:
                    11:87:f5:64:be:8a:75:7e:5b:ef:c1:2d:71:89:4e:
                    67:55:b2:b4:cb:58:e1:e8:90:9f:a9:41:09:2c:24:
                    d3:6e:ea:52:7e:9a:72:46:4a:82:d0:64:4a:3e:c5:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:06:F8:82:27:B0:8B:59:70:01:6D:7C:E8:EE:36:D4:3F:D8:90:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e17f76b6-f017-390f-a321-ac4727d60e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:da:b6:a9:1c:6e:69:f4:3a:0d:c5:a4:92:fa:26:08:ef:
         d0:84:c4:b2:76:ea:ab:3e:ba:36:8d:c1:c7:d8:58:05:3e:6c:
         39:94:01:22:1d:07:fe:f3:68:47:35:d4:65:96:ed:e2:62:48:
         dd:72:4d:00:10:c2:37:c5:8c:7a:14:44:b1:40:20:d3:57:25:
         1b:4b:8d:48:1e:ef:f2:1e:25:7b:f5:bf:39:6a:23:cb:0f:e0:
         9f:dd:0f:c3:83:0e:41:3f:fe:fe:8a:f4:35:81:28:88:13:f2:
         96:f2:db:b5:24:41:b7:c4:10:a8:28:00:03:b5:b2:0a:2d:30:
         5a:7d:ce:c2:af:40:a4:1a:38:29:a9:d0:20:f7:aa:97:90:6f:
         95:0d:01:d5:5d:2d:88:3c:85:1e:5d:1a:c6:05:f3:04:02:ea:
         76:e8:59:f8:33:3d:8b:6f:11:86:70:e3:61:e3:7a:fe:9d:13:
         ff:6d:0b:d8:fb:eb:35:c9:f1:38:76:de:ce:b1:54:2e:dc:f2:
         6e:b3:00:7a:a1:06:b6:22:88:f1:a1:00:e6:5b:2e:9c:dd:39:
         6d:bb:a8:ba:4a:47:d8:f2:23:c5:72:87:fb:70:9d:36:73:77:
         3e:9b:72:80:a4:6b:94:eb:e7:2f:57:fa:b5:64:6e:6f:e9:98:
         f4:0e:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:45 2026 by rpki-client