Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
File:                     311c905c-c74a-3300-b053-5abc79b4a61a.roa (raw, json)
Hash identifier:          0hKOuDtHIEcOKZtTgrAEJf5hFrBvYGKMUeFE8i8mj34=
Subject key identifier:   85:DA:90:92:24:0F:4E:10:0F:E2:DB:20:BD:9A:77:89:2F:4E:5D:92
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584EA79AD7605B50C2777090FE00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        104.237.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:d7:60:5b:50:c2:77:70:90:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b0c53b9f-1ec8-4915-98a4-d3bc620e4043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:66:e9:c6:44:a4:62:f6:00:57:89:cc:b5:
                    9d:c7:b9:0e:69:c6:b7:fd:c2:10:f3:5c:0c:76:dc:
                    e8:29:ca:de:ef:16:e9:0f:9e:8a:86:a7:93:e3:14:
                    22:98:89:ce:b4:c8:01:1b:71:0e:3b:46:9b:e1:18:
                    88:03:06:7a:01:4c:99:71:6e:80:54:b4:70:99:a5:
                    9b:65:28:94:f3:ae:58:ba:72:7e:05:5a:1b:63:27:
                    d5:48:02:55:8c:08:ee:7a:d7:55:dd:02:46:86:6d:
                    ec:36:ea:66:7e:06:31:fa:ea:70:57:3b:be:94:76:
                    48:23:15:03:53:3e:b4:c9:8a:a8:6c:e2:be:5f:eb:
                    3d:d4:7d:0d:4d:d0:bd:82:1e:d9:69:ea:e1:35:10:
                    e4:3c:00:89:d2:b8:4e:b0:51:45:8b:17:14:da:59:
                    6e:f9:03:13:85:76:43:c4:07:d5:d5:7a:31:53:b5:
                    23:63:46:e2:dd:6f:2e:32:d8:7d:3a:62:a3:66:61:
                    cc:c3:25:c2:a7:fc:61:6a:9b:a0:30:20:4f:ba:22:
                    19:a0:d4:2c:3a:a4:e6:62:c8:2f:0e:0d:3e:1a:cd:
                    7a:69:b6:90:74:ab:8d:c2:52:c4:6d:71:69:2c:a9:
                    3f:1d:cf:81:d8:6d:b9:45:8f:78:35:00:5e:ad:67:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:90:92:24:0F:4E:10:0F:E2:DB:20:BD:9A:77:89:2F:4E:5D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b0:22:f1:4c:2a:38:eb:f3:90:f0:bc:8f:3f:8f:b8:0f:82:
         63:f3:3d:53:d5:a4:08:73:0c:3d:26:52:a1:2c:e0:8f:2b:5d:
         bc:26:34:7d:f7:bb:11:ac:c5:e0:8f:1c:40:e9:5e:55:ba:8b:
         31:7b:b4:75:62:91:86:7d:f4:6f:dc:04:cf:e9:75:d8:db:42:
         43:58:aa:29:7e:f0:d9:3f:44:dc:2d:90:9f:8a:1b:d9:f3:65:
         dc:77:17:bb:70:1f:40:de:22:64:d8:63:1f:e8:ee:86:45:00:
         97:85:8b:1f:f5:f1:fe:3e:29:d5:5d:14:d6:b2:73:e6:8a:15:
         f5:60:7f:e2:ad:a0:d9:2a:81:b4:e6:7b:21:8c:ba:3a:a2:4a:
         3e:85:76:70:91:5b:97:3a:95:85:0f:02:6e:f3:9e:0d:46:d3:
         fc:e0:48:6d:f2:e6:79:39:ce:23:af:e3:8d:75:d6:02:10:e9:
         1d:d1:58:cf:21:91:4d:1f:92:5c:76:6e:f7:7b:b9:47:35:b1:
         c8:33:59:b1:6c:db:7b:24:1a:10:47:09:e1:9e:0c:0c:ef:4d:
         47:b1:14:07:92:fd:7a:93:e7:fd:db:78:64:b5:97:ed:45:73:
         b5:9d:d0:11:4e:ba:ca:f3:72:ae:db:de:eb:e6:f8:2f:bb:49:
         b4:50:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:26:58 2026 by rpki-client