Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa
File:                     725d8488-5d9b-3e1e-b301-f67bc37915bb.roa (raw, json)
Hash identifier:          d7xNyF7Sh+CdHRVzL4H9/eHbuu8PeGRL+fGEOlOpQ1c=
Subject key identifier:   C4:FF:68:44:DD:16:05:FA:8E:95:97:23:99:B1:36:77:6E:F9:CF:F5
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584E1B798C6607FFFB992B72BA80
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     393950
IP address blocks:        104.251.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8c:66:07:ff:fb:99:2b:72:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=c8401853-4c9c-40b1-934e-1d40eb2bef0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:db:b6:41:fc:13:f6:64:60:62:82:15:cb:
                    09:e4:a2:c4:bf:0c:90:5a:6e:ac:2d:65:2a:21:de:
                    08:d5:bc:40:ce:de:e2:7b:c7:07:25:c9:05:90:1b:
                    77:45:d8:6a:53:51:43:4f:74:0d:da:d4:2c:7b:3b:
                    53:cd:52:b1:0f:77:4f:21:c0:8e:42:c0:c5:04:28:
                    c4:bb:ef:6d:ca:c6:82:7c:c8:00:57:8f:ca:1a:38:
                    26:22:a6:e5:37:fc:a3:5c:bc:37:7e:68:c2:a4:a5:
                    be:47:07:b9:ef:19:46:6f:21:67:a7:45:c2:00:cd:
                    0c:75:c6:d4:6f:a4:38:22:82:72:e0:c4:e2:d0:25:
                    3c:84:10:d8:c0:c4:03:3b:5d:06:57:31:03:ae:37:
                    d2:36:f9:da:ff:16:65:0a:a6:fc:5e:f6:e0:3f:f5:
                    13:e0:03:e4:c4:9e:ad:e3:02:d0:f9:1d:72:c4:25:
                    6d:42:4b:59:5a:1f:55:21:d7:64:a3:a5:37:6c:a8:
                    12:98:fa:cb:af:2e:bb:e8:3b:21:80:23:95:c6:ce:
                    d3:37:d7:ec:41:36:3a:dd:6d:59:91:6f:82:02:8d:
                    ab:50:bc:27:41:a5:46:50:7a:b1:b1:4a:07:c0:e5:
                    52:ec:ab:f5:02:72:20:ee:29:c5:75:2b:9d:11:a1:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FF:68:44:DD:16:05:FA:8E:95:97:23:99:B1:36:77:6E:F9:CF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/725d8488-5d9b-3e1e-b301-f67bc37915bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:56:16:71:1c:b3:d6:88:64:b6:ff:9b:bc:6f:e1:ee:e7:
         96:64:58:9c:ee:a0:04:ab:80:0b:87:e6:98:b2:73:72:1a:cf:
         4a:e3:ac:4d:a8:c6:90:81:e8:1a:0e:3d:66:ed:9b:ba:e6:8c:
         ec:bb:81:3b:45:ac:63:30:ab:95:ac:94:22:17:b0:32:34:21:
         7e:f2:50:43:33:31:33:04:d4:80:aa:44:5e:a1:9a:a1:db:42:
         4e:4a:8e:87:78:62:57:7a:51:a3:69:ae:3e:6d:cf:11:12:f0:
         f7:38:d7:37:ba:02:f5:3a:71:aa:ac:07:30:2d:14:74:e4:93:
         be:82:81:48:c4:4c:35:7e:6e:19:3d:7f:cd:ae:ec:03:ce:c7:
         cc:52:1b:17:ba:ef:ae:6f:de:68:3d:3a:15:53:6a:83:d0:cc:
         dc:d9:28:2f:85:9c:b0:98:61:0e:00:9e:e8:ce:7d:ee:b1:e2:
         df:5b:f8:c3:b6:9d:d0:fa:84:8e:67:a7:5b:c2:b9:60:51:5a:
         01:7e:6a:ed:58:bb:29:be:7a:9d:5b:c7:0f:8b:c5:97:e5:36:
         b2:f1:bf:89:2c:34:d0:69:46:9e:c0:38:03:73:d4:c2:e5:97:
         92:3c:04:71:ea:8d:ba:d2:e4:d6:14:88:48:5a:c4:f8:e6:b6:
         71:a5:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:35 2026 by rpki-client