Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa
File:                     44d13c76-0cc5-370f-8756-3bab26cf9b95.roa (raw, json)
Hash identifier:          Nzp9hfEHDWjgNWe8YS9z2Z7RG9G3WNX010e38V+7nLw=
Subject key identifier:   33:66:F7:B8:4C:C0:18:0A:44:DE:6C:CC:99:4C:70:D8:6F:72:B5:E6
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D571FA26CDB93A8B3353D40D8
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     11572
IP address blocks:        104.244.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a2:6c:db:93:a8:b3:35:3d:40:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=0771560e-860d-44ac-b566-b8a254ff068e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:72:90:84:ce:8c:94:4c:86:8f:b7:54:3b:
                    1a:2e:df:6b:5a:e5:39:ff:a1:ad:4e:83:2f:d1:fe:
                    38:93:23:b7:af:2e:8e:85:82:0e:d7:e8:dd:e6:37:
                    a1:00:81:48:cb:7f:79:73:8b:a1:5c:27:cc:75:e9:
                    69:25:91:ab:29:ea:d4:33:66:1c:21:e4:0d:5c:27:
                    41:05:5d:9b:63:20:6a:b5:64:92:e7:1d:8e:b0:8c:
                    7f:d1:a7:63:5c:ff:13:40:ef:87:70:d7:3e:82:9e:
                    0a:06:f8:b4:30:0e:e3:dc:b8:83:3a:98:96:9d:ba:
                    14:33:c6:10:cb:0d:76:5b:a8:80:a3:db:2d:00:84:
                    ad:c5:33:61:d8:ad:72:bb:32:f5:ad:be:3a:5c:3b:
                    2d:d3:da:72:3f:91:bf:e1:4c:a6:28:f6:5e:b3:d6:
                    f0:a6:60:66:76:3a:b8:e3:9c:e0:33:90:be:0a:1a:
                    09:44:0b:ac:08:95:a1:79:16:04:33:0a:ac:a5:f7:
                    61:4e:1e:f5:29:40:56:86:33:f0:a0:30:7d:d0:2c:
                    db:c7:d1:f5:25:83:f7:5c:0e:b2:c4:54:00:5c:13:
                    2c:94:3a:76:70:73:af:76:74:fe:80:70:57:a4:52:
                    a6:aa:ab:93:e4:59:dc:89:08:d9:e0:85:97:82:5e:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:66:F7:B8:4C:C0:18:0A:44:DE:6C:CC:99:4C:70:D8:6F:72:B5:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:67:20:9e:bf:10:45:68:98:30:33:2f:da:b4:f9:25:4d:
         ac:6e:44:af:e1:dc:dd:92:7e:ca:fe:c2:39:29:37:dc:9c:6c:
         36:d7:6f:5e:ae:e2:e4:e2:4c:1c:8c:ea:8b:10:f2:80:bb:64:
         7c:9c:a0:1e:00:70:34:71:07:22:f7:10:44:97:c7:df:1e:84:
         64:a2:fd:94:e2:a6:c7:e2:54:fc:09:ba:23:23:32:25:c3:58:
         33:41:e9:ab:a9:55:14:90:3f:74:da:0b:8e:00:bf:d7:71:e0:
         23:0c:af:c5:37:dd:9b:c9:e0:ec:66:c7:f3:25:ea:fc:5a:4e:
         78:1f:07:0f:6f:31:7b:fd:25:97:75:9a:1e:c7:cd:90:2b:ee:
         31:80:50:b1:29:8c:5e:f7:75:c6:43:e9:62:28:56:d4:b6:fd:
         33:4b:85:b4:85:4d:47:db:ad:47:dc:a3:ab:50:47:6d:7c:87:
         8a:6c:6d:d8:8c:c7:ed:58:dd:be:1d:00:45:1c:1e:24:0f:e1:
         ab:4d:b7:70:39:62:05:55:ae:f6:06:3e:f1:12:1c:9a:e1:b5:
         f8:0b:f4:26:58:a3:a3:af:5e:ad:2a:17:4e:7a:ea:60:74:4e:
         73:6f:df:45:36:f3:f7:90:27:ee:21:43:51:bc:61:de:e7:55:
         f2:98:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:21 2026 by rpki-client