Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
File:                     6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa (raw, json)
Hash identifier:          nsIp0bDg4EwEFknIkWHB+QQoo5HOCzpw+1MCr0jcgkY=
Subject key identifier:   12:B5:12:EC:DE:9B:BC:B6:D9:C4:65:AC:8D:71:65:9B:B4:C3:D0:0A
Certificate issuer:       /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial:       010D0C9F4328584D75D53E30D6353AEFC42C2A8C
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     59362
IP address blocks:        104.193.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3e:30:d6:35:3a:ef:c4:2c:2a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=0c1f0c67-f8c4-4088-823c-8e00fcab152d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:a8:6a:b6:1e:76:e0:23:c9:d4:66:1b:d2:
                    ac:60:c4:aa:32:93:19:01:1a:50:a5:df:11:7b:bb:
                    7c:6e:c5:be:76:2f:40:20:75:57:2b:43:5b:38:78:
                    2e:b5:a5:67:a0:00:42:df:8b:e0:24:07:a6:2d:28:
                    aa:fb:5d:42:93:2f:75:1b:8f:f4:0e:f1:61:be:b1:
                    ef:2c:e4:be:5c:ad:d9:6e:52:a0:c5:c7:ae:c0:c8:
                    be:6d:80:45:91:b9:08:8e:74:82:94:05:58:ad:44:
                    28:ed:3f:b4:15:70:4b:87:94:a9:16:a2:e2:2c:66:
                    87:89:2c:99:b7:10:15:39:a1:33:42:4a:c9:53:72:
                    b6:cc:2f:9d:ad:6d:10:b3:e9:c6:4c:e8:b8:ee:c7:
                    c1:0c:af:24:6b:f1:7c:3e:ac:b1:33:6e:22:07:d2:
                    81:9b:9f:b7:3c:31:b8:4e:58:1e:e9:44:a5:9a:98:
                    6e:c7:fb:83:d8:1c:96:b6:b5:b0:a0:e1:b0:a7:78:
                    9c:8f:93:cd:16:86:4a:6a:90:db:1d:f5:ec:1e:4f:
                    15:87:2e:59:3f:11:4d:34:c4:11:95:bb:83:47:d1:
                    ac:51:43:ea:65:b2:79:ed:14:15:6d:6d:5b:91:51:
                    f1:ac:fe:18:4b:17:3c:b2:75:80:41:c4:ec:ae:a4:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B5:12:EC:DE:9B:BC:B6:D9:C4:65:AC:8D:71:65:9B:B4:C3:D0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl

            X509v3 Authority Key Identifier:
                keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:80:f1:3b:2d:7b:c8:90:e1:fa:4e:62:bc:c7:15:7e:9a:
         cd:d1:83:e1:0a:c0:82:f6:f0:26:0c:e7:50:22:b8:cc:35:0f:
         48:13:89:93:51:a9:44:3c:7b:06:dd:c3:ff:67:82:fd:27:66:
         62:7e:0b:74:52:ec:4d:9c:a3:9e:d5:2f:ee:c8:be:e7:ae:65:
         10:83:d6:26:53:73:28:e7:1e:fe:95:4b:7e:b3:cb:41:f7:e9:
         53:68:8b:1d:71:b8:8c:72:d3:ed:e9:03:28:ec:01:be:5f:bf:
         8e:91:68:1d:d8:fd:41:1c:dd:9b:66:30:0f:62:5c:df:ea:b8:
         15:e0:91:51:64:d6:3e:43:bc:a9:d8:37:17:a6:3b:20:d4:aa:
         92:0e:55:c9:70:95:e9:1d:be:2e:cb:6a:96:42:a2:4b:b4:db:
         79:be:fa:06:58:c8:f1:88:0a:76:1c:28:a1:19:a6:ad:7f:f5:
         23:82:fc:1b:55:e8:4d:c3:f7:54:eb:b6:64:bc:10:3a:39:4e:
         a5:65:95:af:b0:c7:a6:62:38:81:f2:68:0a:1f:01:87:6e:b3:
         77:26:3c:92:d5:8e:89:bd:ec:e6:93:d8:68:2c:cb:87:51:56:
         e5:59:50:d4:9f:49:50:61:dc:52:cc:43:9e:45:1d:ac:20:c5:
         aa:a6:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:05 2026 by rpki-client