Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7f8279ed-93a9-363e-9e91-a920a117f0d2.roa
File:                     7f8279ed-93a9-363e-9e91-a920a117f0d2.roa (raw, json)
Hash identifier:          Yo6Ps2BhQn4Vl0idjoN2iBCtbTYP4TYlSSkPyJTjJbg=
Subject key identifier:   AC:A6:6B:8A:38:C6:E5:33:EC:1F:48:71:ED:35:E3:9B:8D:A4:81:3E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497CAB05264CD2D09C310E80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7f8279ed-93a9-363e-9e91-a920a117f0d2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        104.237.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:ab:05:26:4c:d2:d0:9c:31:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=239fa7ad-7feb-4129-9986-6a07bbcee162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:46:1f:0e:cc:83:0a:05:3f:22:d7:f8:f9:
                    f3:c3:3a:3e:51:62:d5:d4:98:99:a8:48:63:f5:29:
                    67:0b:51:3c:e2:30:3c:bf:d6:12:d0:04:c2:18:5b:
                    f9:fb:f8:3e:4f:77:ad:ea:27:f1:2e:b9:6f:cc:ae:
                    af:56:9d:6d:2f:46:4b:66:c6:a9:01:1f:74:22:f8:
                    98:c5:4d:9b:df:ef:94:77:ee:78:68:d8:af:26:e0:
                    7a:40:af:de:12:f3:75:33:d0:97:8d:f1:07:cd:b8:
                    28:8c:2a:2e:bf:da:77:47:25:4f:d8:87:f7:df:a5:
                    f4:d0:69:91:a4:bb:b4:5a:1b:50:eb:3f:29:af:49:
                    23:3c:63:ae:1f:ff:29:49:14:b3:3c:64:27:89:e4:
                    d1:3d:52:4b:48:06:e3:a3:c3:45:f7:c3:59:f1:e0:
                    3e:95:43:2a:6e:8c:08:d1:82:12:66:f8:b6:4d:35:
                    78:39:40:36:0d:4f:b4:58:15:01:20:f6:9e:7d:7d:
                    10:c9:0e:1f:ac:54:20:83:40:3b:38:92:90:59:c6:
                    ad:da:37:a8:c3:ac:c3:73:95:2b:0e:82:db:ba:ef:
                    71:71:43:c9:eb:2d:b1:e4:d0:ed:fc:e1:fc:35:ef:
                    98:8c:ab:10:d1:c9:32:d1:00:f0:89:16:a4:79:61:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:6B:8A:38:C6:E5:33:EC:1F:48:71:ED:35:E3:9B:8D:A4:81:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7f8279ed-93a9-363e-9e91-a920a117f0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c3:83:62:5d:18:a3:64:c9:62:71:2f:a3:9e:c1:7f:f5:35:
         35:f7:16:e9:1a:f9:cc:9f:33:68:2b:27:f9:9f:08:0a:a6:34:
         2b:7a:45:30:9b:2e:2b:27:15:46:85:3a:85:58:d0:80:18:46:
         a1:b6:7f:09:7b:cc:1f:c7:19:dd:00:5a:78:af:4f:32:73:a8:
         8e:e9:cf:46:db:16:11:fa:57:0a:9d:29:c0:50:09:4a:13:bd:
         d8:22:2e:77:05:71:ac:4f:bb:99:d2:c3:5e:b3:3b:da:67:1f:
         b5:58:44:c2:2e:21:30:e0:68:7a:db:a4:28:8b:1d:ee:76:13:
         47:0e:a7:9f:17:aa:dd:d3:db:6a:c7:ed:2d:90:8e:2e:d9:25:
         c0:c3:5c:67:f4:e6:84:a1:95:29:7a:40:f8:2b:59:89:14:51:
         d5:f3:37:c6:9f:f7:91:41:4c:40:00:73:1e:3c:0d:d4:75:83:
         f4:5e:65:e8:f6:c6:b7:23:b3:d9:9e:53:72:c5:94:01:34:e6:
         14:67:f8:d8:3d:f3:07:6d:11:38:b8:d3:c0:ba:8d:d0:3b:ff:
         b4:a2:bb:ff:6c:2d:d2:a0:78:62:7d:00:25:3f:27:7f:33:35:
         a1:38:e5:db:80:70:d2:6f:c3:9d:d3:48:9b:88:3b:77:7d:96:
         30:4d:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:51:25 2026 by rpki-client