Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a5c1bc92-7e98-36cf-9b9e-d27f44708327.roa
File:                     a5c1bc92-7e98-36cf-9b9e-d27f44708327.roa (raw, json)
Hash identifier:          xObhVRkLBmtjb9rpQeIWYs8nZdperLsCUIaBP+dVczU=
Subject key identifier:   3B:7B:EE:93:AE:CC:4D:8C:2D:69:1E:73:15:28:F7:CA:53:04:F4:C5
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584F46A7DF10E3E9B1ABE82A6D80
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a5c1bc92-7e98-36cf-9b9e-d27f44708327.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     396998
IP address blocks:        104.152.140.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:df:10:e3:e9:b1:ab:e8:2a:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=7ddfd21d-f23b-43cc-8dcc-c3ccb0b2a7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:14:f9:a4:19:c8:f4:8a:bc:29:9a:23:2d:
                    11:7a:0e:33:bc:27:1f:fb:05:e6:1b:89:30:e9:10:
                    63:eb:58:88:36:90:f7:93:2f:fa:b1:f9:72:34:74:
                    97:c0:8d:f1:b3:38:41:09:d0:93:7a:52:fc:46:29:
                    ce:47:06:ea:df:39:46:0c:81:80:70:4d:f1:04:eb:
                    dc:a1:eb:32:01:88:f1:a5:a1:8d:4a:d1:bb:cd:b1:
                    43:a4:c5:98:0b:36:cd:ff:0a:e7:5f:92:8a:ff:43:
                    d9:3e:c0:4f:bb:ba:c6:09:76:e2:29:cd:ad:a7:80:
                    4f:d1:19:4b:9e:44:66:64:f2:25:01:e3:e8:11:86:
                    b7:43:9b:45:c9:da:7c:3c:90:49:48:d7:31:c8:25:
                    1c:7b:8f:3d:00:7e:b1:cb:d8:ff:f1:d6:ad:e5:a7:
                    bc:09:f4:7d:60:26:8f:8b:8c:c5:e7:61:f8:1c:d5:
                    d5:49:73:6c:28:96:f7:a9:59:39:ec:98:f3:e8:b0:
                    36:7d:e5:c2:45:0e:fb:bd:a9:4a:52:22:7d:bf:0e:
                    63:da:cf:fd:2c:23:3c:7e:65:6b:ff:ee:f8:65:77:
                    02:8a:a1:91:ca:6b:b3:93:2f:2b:08:4a:53:55:40:
                    ad:31:84:3b:be:55:dd:ff:cd:0a:a1:84:1d:42:42:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:EE:93:AE:CC:4D:8C:2D:69:1E:73:15:28:F7:CA:53:04:F4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a5c1bc92-7e98-36cf-9b9e-d27f44708327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:72:75:24:db:f4:b8:ef:37:5d:c3:7a:87:29:c5:22:b3:c1:
         c1:03:60:2c:a7:07:81:40:d0:25:0c:e2:ef:9c:12:d5:81:c2:
         9d:75:92:8b:be:8d:ce:5e:16:26:ab:f6:96:9f:7d:81:96:c5:
         d8:29:32:93:ea:76:ea:5e:d0:00:b6:f6:04:c7:84:e9:2f:f5:
         31:db:ad:46:d9:50:ce:3d:21:49:10:f9:7c:cf:eb:37:77:de:
         20:32:d6:0e:3a:e5:fd:61:0b:d9:ca:81:1a:49:e7:30:79:ed:
         53:09:09:e2:d4:04:cb:e1:d2:d7:32:e0:85:28:c0:44:61:e0:
         0a:c9:86:08:f6:13:2a:4d:e4:26:4e:a7:1d:e9:5b:6e:49:55:
         23:10:ff:8f:e7:3d:26:55:c2:26:b6:d3:86:76:3f:ed:b9:fd:
         ec:09:44:71:95:a6:71:53:d1:1c:9c:e4:1e:79:13:c6:64:61:
         3e:a0:1f:46:ef:5d:ae:77:4d:8a:53:d4:e6:e5:a1:db:7f:0f:
         dd:e8:74:74:27:6f:42:fc:1a:03:e4:d7:9d:ab:5b:a8:f6:54:
         63:ca:ed:68:63:3d:8a:f7:94:d4:70:b8:71:b1:07:40:ed:ac:
         f8:ef:b3:e5:f7:77:7a:9b:bf:50:d7:e1:f7:5a:6d:0f:00:91:
         59:14:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:12:41 2026 by rpki-client