Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/90a3229b-ba48-32c2-87d5-9d71615f490f.roa
File:                     90a3229b-ba48-32c2-87d5-9d71615f490f.roa (raw, json)
Hash identifier:          B6IJN356SZ7SGlqK2m92mgRuHwZJkrWw94WBUUwkbzM=
Subject key identifier:   E8:AA:10:F0:F3:89:0E:B1:E1:5E:AE:EA:5F:C9:53:E2:15:0B:1F:9B
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584DE2B5EFA7684B938398C19B40
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/90a3229b-ba48-32c2-87d5-9d71615f490f.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398143
IP address blocks:        104.204.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ef:a7:68:4b:93:83:98:c1:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=caf66c36-1630-4871-888c-e8d8830f8aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:7d:2d:13:90:6d:26:ad:5e:95:a3:27:7a:
                    09:ed:6c:a9:cb:85:36:f6:26:a0:ae:8c:a5:89:4e:
                    8c:e5:f8:f3:23:c6:61:1b:b4:58:71:62:d5:e4:5a:
                    c4:7d:8f:c4:f5:48:8c:28:e1:11:90:05:51:f9:3c:
                    49:7d:d0:00:06:4e:20:2a:d8:48:d7:b2:33:5d:4c:
                    5c:ab:6b:e3:3e:cb:54:2c:39:7a:0b:8a:ce:de:3b:
                    6c:5a:17:5f:2e:4e:1f:95:81:96:73:db:4e:0d:e8:
                    38:15:de:45:9b:1d:8e:b4:10:6d:7c:1e:7e:11:58:
                    17:00:9d:aa:fe:0a:d9:7e:94:3a:22:9e:62:41:75:
                    d4:b2:01:6c:03:27:71:a4:c5:3c:61:2e:3a:84:cd:
                    8a:dd:73:30:a4:e7:63:75:b6:33:d1:f8:47:8a:8f:
                    69:93:5d:c3:8a:59:96:87:ce:79:ff:66:38:e4:c3:
                    98:2b:f0:3e:78:c1:4a:6b:df:b0:85:f4:dd:17:6c:
                    98:0b:ee:f3:2f:dc:77:dc:9d:0e:10:87:db:b2:67:
                    1a:18:3e:9c:8f:a8:e5:96:13:96:87:82:9d:15:96:
                    6f:4e:c8:1e:bc:ce:a4:9f:48:86:7d:f1:71:30:9f:
                    98:9d:c6:ab:05:bc:65:a9:f3:1b:92:30:e8:67:1a:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:10:F0:F3:89:0E:B1:E1:5E:AE:EA:5F:C9:53:E2:15:0B:1F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/90a3229b-ba48-32c2-87d5-9d71615f490f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:88:77:d2:07:bb:2f:70:50:f4:01:16:c9:1c:e6:51:1a:38:
         a6:c4:b2:ef:c1:6d:19:b2:c0:66:f4:ed:29:8a:ba:0e:76:89:
         46:5a:d9:c0:32:b7:2b:0b:26:b2:00:08:00:41:66:51:c9:95:
         5c:49:31:36:0d:c7:ab:75:5d:58:6a:9f:fc:45:b9:d1:61:df:
         97:a2:d6:50:3b:2c:eb:31:ff:68:dc:48:92:a2:b9:3b:56:7a:
         eb:88:b6:22:27:c2:02:10:81:b1:93:cc:01:1e:25:71:c3:76:
         cf:0a:17:92:0b:b9:de:44:22:c7:15:37:5d:f1:b5:21:a9:ee:
         08:a3:0f:78:aa:3b:26:8d:04:f4:66:cd:f3:66:24:9c:6d:d6:
         f4:4d:ff:ff:70:35:a0:53:4e:3e:6e:ee:14:fd:1f:ff:14:a2:
         6e:27:c1:92:47:c5:07:73:44:21:00:35:6c:44:b0:9d:4c:c9:
         72:8f:63:91:2e:05:31:b9:0b:29:0d:e6:08:31:5b:10:34:2b:
         08:a2:ac:29:1a:67:dc:6e:33:65:84:07:35:75:59:3e:af:5a:
         f9:14:80:6e:7e:5f:62:26:ad:92:1f:3e:de:0d:27:d9:84:de:
         55:23:5c:b4:45:7a:f8:6f:b6:61:17:a8:78:ad:e1:02:9e:a4:
         a4:87:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:30 2026 by rpki-client