Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa
File:                     a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa (raw, json)
Hash identifier:          GYG2gnY9gW9hEqpQVWhLvSg4ziJjcXqMVTT1hKspBf0=
Subject key identifier:   C3:13:EC:1D:FE:1B:8E:C2:38:8B:4E:95:18:31:35:54:68:0B:A8:D0
Certificate issuer:       /CN=f7f612e5-0c3f-434e-9c26-642bcb3bbb76
Certificate serial:       010D0C9F4328584D7B6A7EB0F058058640ADDF00
Authority key identifier: D2:7C:28:4C:28:1F:08:37:5E:27:95:D5:CE:2D:0E:59:5A:7F:E4:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     30455
IP address blocks:        104.128.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7e:b0:f0:58:05:86:40:ad:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f612e5-0c3f-434e-9c26-642bcb3bbb76
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=383a14f8-418e-4638-a7f4-c4dbda2418f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:f5:ee:cf:e8:93:55:83:79:c5:b8:bb:50:
                    de:8a:b6:20:89:63:a8:94:c6:77:54:a2:55:6c:4f:
                    3d:11:eb:dd:18:e2:ca:22:0a:fb:e2:0b:87:27:8b:
                    b4:70:e4:80:bd:8a:6a:24:d6:31:01:c6:3c:69:b4:
                    d2:ab:ca:aa:fc:81:40:6b:af:c7:13:62:73:fb:a7:
                    ad:58:db:9d:9c:37:f7:22:cf:3f:0b:42:9d:fe:33:
                    97:1c:6a:b2:85:51:b2:65:d2:6c:e9:73:c5:c3:f0:
                    b6:93:77:0e:39:9d:42:44:32:f6:91:a5:fd:16:f8:
                    8a:25:ad:17:af:ec:61:4b:b7:f1:84:6a:6c:3f:4a:
                    97:cd:5b:8e:a1:fb:b2:2d:04:f7:45:cd:4b:03:78:
                    7d:0a:1f:24:e5:ca:3b:72:9b:00:d1:2d:31:1b:9f:
                    b5:01:35:12:2d:cb:5f:4f:49:b1:05:e7:41:fc:bf:
                    3a:17:5b:18:56:82:ef:07:30:69:91:da:dd:8a:ae:
                    cb:27:64:2f:19:c7:5e:60:8d:35:6d:eb:c6:f4:52:
                    79:75:f8:cb:29:74:6d:ab:d9:90:a1:50:cf:b6:64:
                    20:7c:2b:32:16:a5:dc:d8:ed:15:10:5c:f7:10:e5:
                    44:79:f0:8d:2a:1c:6e:3e:0f:a5:cd:ec:f8:ed:20:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:EC:1D:FE:1B:8E:C2:38:8B:4E:95:18:31:35:54:68:0B:A8:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.crl

            X509v3 Authority Key Identifier:
                keyid:D2:7C:28:4C:28:1F:08:37:5E:27:95:D5:CE:2D:0E:59:5A:7F:E4:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:64:76:92:be:e6:8e:31:24:6f:25:fb:38:6c:b5:44:24:
         5b:b4:fa:66:93:89:eb:2b:2b:f9:4c:ce:6f:e1:66:c3:a1:01:
         c9:e8:ab:19:b2:a8:cb:b1:a1:08:0b:c2:2e:55:b2:5f:6a:69:
         53:66:6c:d3:03:e5:f3:dd:f5:c4:cf:19:53:c1:37:6c:a0:8e:
         0c:3f:d4:65:ad:c7:ad:b5:47:6f:ff:63:55:0e:6d:ab:e7:f5:
         55:ee:08:96:14:ad:c6:b2:8c:8e:16:09:d2:13:58:b5:8c:a6:
         61:2d:0d:55:62:0b:c0:2a:ab:b4:f0:ad:3c:e9:bd:a7:08:f7:
         e3:db:e9:ad:42:a3:71:29:8f:64:7b:02:8d:12:86:62:88:30:
         88:b5:36:a0:62:fd:39:74:f3:10:8b:0b:4c:b1:79:0e:0a:55:
         59:0c:6e:09:2c:e4:a7:94:df:f7:02:4d:d5:cb:b9:0a:4b:ab:
         96:17:f4:50:d4:55:3e:35:2e:13:28:4a:6f:9d:65:9d:39:97:
         89:1e:27:2b:b6:4d:79:7a:f4:e8:5b:b6:76:69:82:c4:f8:41:
         bd:d0:cd:f1:4d:ca:31:6c:8b:26:9b:d7:e0:77:fd:4f:3a:02:
         a0:98:ce:ab:d3:97:4e:63:09:89:eb:d7:19:50:bc:2d:8b:1d:
         2b:71:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:27 2026 by rpki-client