Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa
File:                     f005327f-246f-30ed-8e50-a91fdd190a16.roa (raw, json)
Hash identifier:          dUjBYe9fL/xLpOXoPwZuM0d/s85kHrHElSyyBskSfpA=
Subject key identifier:   05:DA:8C:B4:CB:DE:A5:DB:24:69:0C:FB:11:C3:61:ED:1B:E3:7C:7B
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584E016B31C6A4D4D84EA7ABB500
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     213122
IP address blocks:        104.249.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:31:c6:a4:d4:d8:4e:a7:ab:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=3c2a2ef9-f306-4e2c-81f1-e18533a43f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:b8:b4:63:3d:4f:e4:ab:d1:a2:b9:5f:cd:
                    3e:c7:24:97:8b:98:b0:97:f1:1f:8f:20:aa:81:64:
                    3b:5d:b8:8d:54:61:24:45:ed:7e:84:41:4e:85:da:
                    2f:82:e3:7d:2b:12:e1:74:7b:61:2c:ac:a2:d5:99:
                    f7:42:54:2a:14:c2:4b:c5:34:0d:1e:66:9d:1c:87:
                    38:2c:a8:ea:fa:8b:8b:8b:a7:82:f2:84:90:33:d2:
                    0d:4a:bd:46:66:d7:a4:68:50:89:33:19:60:a8:c4:
                    dc:bc:26:35:2b:4f:08:b1:d0:63:b1:a1:17:03:02:
                    fa:29:7c:eb:28:af:18:8b:65:ec:78:e6:03:ff:98:
                    5c:24:d0:0d:6b:0f:09:0b:b6:f3:dc:a2:0d:09:fe:
                    01:1b:ec:8b:f1:96:ec:07:d3:1f:f6:68:ce:b4:1e:
                    87:08:c3:b3:3a:d3:7e:f7:80:2c:aa:f6:d1:0b:92:
                    9f:41:f2:1c:b8:a5:4a:1f:8c:c5:a7:46:c3:f8:bb:
                    d9:b4:76:b4:b6:7b:70:f7:0d:15:1a:0d:6c:fb:85:
                    3e:e5:4e:75:2b:07:92:11:4d:00:d0:76:17:8e:a7:
                    1f:eb:5a:5e:75:47:d4:5f:f5:0b:cd:1b:ae:02:4d:
                    f7:7e:41:5b:a6:ef:d0:42:9d:23:14:75:d0:bc:c3:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:8C:B4:CB:DE:A5:DB:24:69:0C:FB:11:C3:61:ED:1B:E3:7C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f005327f-246f-30ed-8e50-a91fdd190a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:ad:5d:c2:f3:88:61:30:3e:42:62:37:a6:46:ee:a4:d0:
         ef:5b:87:33:d1:c6:cb:af:06:e2:17:2d:ff:5b:6b:a8:ea:35:
         e3:91:68:d9:36:68:6b:d5:b1:b0:b7:f4:fd:34:53:f9:32:ae:
         14:6a:f0:bc:fe:b8:aa:53:77:65:ac:e9:64:31:50:83:0b:3d:
         42:e4:2c:fb:2e:84:ba:48:83:77:fd:93:51:ae:5c:7f:57:02:
         9b:5a:68:fb:37:aa:56:fe:48:d8:fb:3c:b0:54:5f:53:5f:d8:
         92:99:8a:06:19:80:6b:d1:38:33:26:2c:bd:75:91:f6:34:12:
         07:b7:d8:b5:29:8c:02:88:27:e5:4c:a9:8f:1d:d7:a0:b6:8d:
         3e:12:90:2e:34:38:f6:68:84:f4:3e:d7:be:bb:1d:dc:88:0a:
         35:b3:93:7e:e8:82:a9:c7:55:a7:95:59:3c:a5:95:a7:ba:ec:
         4c:1f:0e:55:eb:f2:10:70:33:4f:77:ca:f5:5e:c4:a2:32:67:
         74:d9:71:14:be:a8:c5:6a:f0:1c:5b:02:48:df:bd:15:9a:23:
         5b:69:86:01:57:75:bf:2d:3d:c2:0f:79:8a:cd:23:cd:7d:2f:
         56:0a:a5:da:b9:c4:43:0f:0f:72:1b:be:cf:70:ac:9d:b6:4a:
         66:72:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:00 2026 by rpki-client