Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83a890f9-1934-3978-801f-129c8bb35856.roa
File:                     83a890f9-1934-3978-801f-129c8bb35856.roa (raw, json)
Hash identifier:          Tqh7IiftkDX1rf98hAuGEUqlK7a2KqCcZsGeMbG4pTI=
Subject key identifier:   B1:FF:FC:DB:99:5D:D9:4D:7B:6E:12:51:F7:99:83:1C:21:E2:86:AE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E49BEBE8678DF35EFE00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83a890f9-1934-3978-801f-129c8bb35856.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        104.136.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e4:9b:eb:e8:67:8d:f3:5e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=617dcfa9-6de2-432f-97ee-7c0fdff1c227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:80:b3:d8:01:1f:5f:c5:1f:1b:98:46:78:
                    f4:a7:61:04:5f:7c:e1:42:c7:95:67:d9:93:44:3e:
                    ea:42:7d:a0:3e:9f:cb:d2:04:dc:db:7b:e3:c2:06:
                    8c:ef:55:6b:04:26:9c:30:79:62:1d:98:be:8d:7d:
                    17:ee:9a:19:2f:e1:a8:d2:72:29:a0:65:05:96:72:
                    ac:ce:44:2e:98:57:ac:07:ae:be:66:e9:8b:2f:ba:
                    bc:55:b9:57:0d:05:b3:3a:54:8e:da:95:c1:1f:dc:
                    9b:dc:41:52:66:76:af:fe:1f:ec:3b:d3:2d:d7:fd:
                    50:49:89:f6:19:ce:b7:91:fa:c6:91:05:6e:85:ce:
                    49:d2:3b:97:14:c8:88:f0:e5:06:6b:d4:30:19:a9:
                    36:63:ab:d1:fe:97:44:77:e0:09:46:17:00:8b:48:
                    47:c6:ad:33:b7:37:98:69:df:c4:d2:6c:f7:0e:65:
                    c3:65:38:d1:49:72:d6:f6:2d:2e:6f:40:64:04:c0:
                    32:4a:3e:de:fc:c9:d6:d3:fc:f5:00:1e:41:b4:62:
                    64:29:34:86:5e:4f:5e:29:1b:c4:05:2f:6b:fa:ca:
                    f0:44:94:b7:fe:4c:f0:3a:30:14:f7:a7:27:65:e2:
                    5b:82:f8:6e:bc:a7:c6:81:23:47:db:93:55:d2:82:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:FC:DB:99:5D:D9:4D:7B:6E:12:51:F7:99:83:1C:21:E2:86:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/83a890f9-1934-3978-801f-129c8bb35856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.136.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:52:13:f3:0f:bb:66:fd:73:2e:7f:31:db:e9:15:e4:30:40:
         e7:a7:47:bb:cd:ae:40:1e:10:5b:fc:6c:08:66:6a:86:c7:be:
         b7:9b:0f:48:e1:df:c6:47:6b:92:30:08:b7:2b:a1:46:0e:b1:
         cd:26:4c:58:33:76:46:fb:3d:82:d4:60:12:87:63:b7:4c:b4:
         c7:8c:4c:4c:77:2d:81:dc:7a:81:fd:b4:d8:5f:1e:07:b7:b7:
         10:8d:d0:26:9a:d2:5d:a2:59:14:12:ba:62:08:4a:9c:df:dc:
         62:17:10:2e:6b:5b:33:da:d1:1e:33:d2:12:16:78:76:c1:ea:
         05:a6:f0:be:d1:e7:50:28:12:13:25:af:fb:ae:a3:ca:b2:55:
         e6:54:b8:d5:12:ef:80:dd:e7:d6:2c:31:4a:47:2b:6b:dc:23:
         ad:b2:13:a8:3e:a6:b5:ce:91:e1:fe:1b:32:24:f5:7a:be:df:
         5d:9e:c4:7f:2e:dc:bc:b7:99:5f:92:2d:63:f3:ca:f4:f0:e5:
         3d:12:82:42:b9:f8:87:44:61:32:48:46:ed:80:eb:2e:45:3e:
         6d:f2:32:1c:ca:6f:10:b9:15:8a:11:e0:c1:c6:03:a5:ea:7a:
         cd:ed:b8:d6:1c:c2:bd:1a:a6:41:1b:e6:21:f8:35:1d:b5:42:
         7d:6a:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:49:41 2026 by rpki-client