Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
File:                     162e852c-8413-3d8d-bf88-356053600612.roa (raw, json)
Hash identifier:          CzoEPiMaH+tQEwSur/zHt2CMBPs9b8i0KWO+Sr63/mY=
Subject key identifier:   25:0F:59:3F:C4:43:8E:78:29:08:BD:8A:E7:0E:FE:B3:E2:50:27:E1
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584D7A0521D5AFF9B202C24EFD00
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:21:d5:af:f9:b2:02:c2:4e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=5e60705b-1dfe-4bd6-a50e-4de3948b34a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:c8:43:c3:1c:f0:8e:4e:94:55:42:80:4e:
                    1d:f2:6a:2e:2d:f5:0f:ad:55:8d:57:ae:74:37:5c:
                    2c:99:9e:a8:f2:47:6f:9a:6f:5c:76:32:16:dd:73:
                    73:52:de:d7:2a:40:0b:71:62:ec:b1:23:01:c5:c8:
                    c1:17:d2:ec:92:f7:22:50:cf:4d:37:b6:04:1c:41:
                    c2:2b:05:f4:3a:35:30:26:af:0d:9c:de:36:8d:19:
                    5f:6c:2c:1d:d9:9e:ce:fe:d6:df:86:08:ea:7e:ed:
                    66:8c:f8:d3:7e:aa:1c:ed:ce:33:9c:fb:2c:52:bd:
                    f0:d3:39:b5:68:a9:d5:ff:46:34:17:24:2f:fb:d9:
                    88:a6:a4:24:d4:7d:63:cb:dd:6f:de:3e:52:b2:d2:
                    40:30:33:ab:27:14:3f:a9:97:4c:7e:43:93:35:29:
                    2f:8a:ef:3e:a6:e0:d1:d4:8b:43:7a:55:cd:f8:79:
                    81:bc:5f:27:1d:e6:23:20:22:86:35:c3:61:6e:35:
                    d3:57:78:d3:7a:16:ba:b4:3d:3d:85:fa:4e:42:7e:
                    16:b8:ca:88:ec:be:3e:e4:ef:f3:31:bf:46:2d:9d:
                    a1:b0:d3:13:4d:1b:3e:f2:54:0b:63:37:61:e0:6a:
                    ca:bb:af:49:db:b5:95:76:38:1b:35:9a:8f:60:76:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:59:3F:C4:43:8E:78:29:08:BD:8A:E7:0E:FE:B3:E2:50:27:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:12:6f:dc:35:8f:83:d2:85:ce:96:92:0c:a4:a7:df:93:
         7f:6c:37:f8:18:4f:60:85:3a:0f:f9:46:16:3b:c3:ea:0f:08:
         45:8d:d8:d1:c5:d7:cc:dc:a1:86:b9:cb:88:7a:29:b6:67:87:
         14:2b:59:e6:dd:12:aa:fc:20:82:24:a4:9d:b3:17:eb:32:03:
         df:7d:00:1a:67:58:14:a7:88:f9:3c:87:83:f8:83:9d:46:c9:
         77:e0:80:dd:42:06:95:dd:c8:ad:65:2d:27:71:ef:15:cd:d6:
         b0:70:94:6e:55:5f:3e:0d:b2:de:58:75:17:5b:57:dd:57:12:
         e6:14:fd:bf:01:6c:9e:83:56:1f:e5:94:af:6c:9e:9a:be:f6:
         77:c1:5b:17:9d:08:02:6c:6a:58:40:8c:5f:5b:a5:bd:aa:fd:
         58:ab:0b:e6:80:ed:b7:6f:bc:2a:52:d4:59:e7:7c:1f:56:99:
         5a:49:bf:3f:85:ac:98:e2:5c:34:a1:01:15:f1:2b:4c:c1:44:
         87:01:2e:81:c7:4f:2a:12:f4:ed:38:c2:15:da:38:39:25:54:
         9a:be:81:b1:f2:62:4c:67:6a:c7:ee:be:94:d5:d4:16:a1:cb:
         3a:0b:54:38:53:c2:44:b4:ed:41:35:81:ab:11:5b:6f:66:42:
         8f:33:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:29 2026 by rpki-client