Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa
File:                     a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa (raw, json)
Hash identifier:          h9SSfbjkjf/sXhaLeJYZegxlLwHusvfTPoB83k3m1WY=
Subject key identifier:   CB:BF:7C:14:2F:50:29:D8:DF:80:8E:5E:C6:79:A0:BB:92:BD:D5:7C
Certificate issuer:       /CN=f7f612e5-0c3f-434e-9c26-642bcb3bbb76
Certificate serial:       010D0C9F4328584EFE12195A356953EC96A14100
Authority key identifier: D2:7C:28:4C:28:1F:08:37:5E:27:95:D5:CE:2D:0E:59:5A:7F:E4:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     30455
IP address blocks:        104.128.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:19:5a:35:69:53:ec:96:a1:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f612e5-0c3f-434e-9c26-642bcb3bbb76
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=aa0ea69e-a5cc-4370-991d-d7eb88ae97db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:31:4d:e2:22:79:8e:a0:03:c5:77:54:9f:
                    36:f7:f7:01:73:28:b0:f7:49:df:bc:ac:07:bd:2e:
                    af:2d:82:9b:12:37:a4:98:5d:f1:bb:2c:7f:79:ab:
                    29:5e:6f:58:19:a6:a0:32:85:4c:9e:61:a6:4c:b8:
                    79:43:b2:ea:1a:cf:75:02:77:6a:bf:78:6f:4b:af:
                    7a:c5:f6:7e:e0:c2:db:00:09:a8:74:bd:2c:65:e9:
                    fe:62:76:a8:d7:f2:fb:9f:d8:f8:ef:b5:d7:0c:2f:
                    4d:67:15:4d:d3:3f:58:df:b3:d2:4c:8d:7c:87:d3:
                    54:e3:ce:85:b1:fd:7e:12:78:da:3d:3b:de:6f:99:
                    89:1d:04:22:2c:9a:58:a5:62:51:58:d5:19:99:bd:
                    10:3c:65:b6:d5:51:86:ad:64:cd:70:bc:fa:6e:de:
                    eb:0f:e5:b8:92:6c:59:e6:2f:26:1a:ea:47:37:fd:
                    6f:71:70:26:6b:c2:ed:0c:ec:76:e4:3d:5f:9f:5d:
                    21:8a:63:13:3f:96:81:bc:66:86:be:59:06:25:c4:
                    09:59:26:af:83:de:2c:71:0e:14:44:a3:2d:7f:f5:
                    de:a6:69:13:84:6e:cc:f2:88:5e:89:29:3b:33:35:
                    4d:62:8b:1d:25:7f:a5:41:36:81:01:21:84:4a:d1:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:7C:14:2F:50:29:D8:DF:80:8E:5E:C6:79:A0:BB:92:BD:D5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/a9a6441a-64bf-310e-b4d4-381c4ca824ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.crl

            X509v3 Authority Key Identifier:
                keyid:D2:7C:28:4C:28:1F:08:37:5E:27:95:D5:CE:2D:0E:59:5A:7F:E4:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f7f612e5-0c3f-434e-9c26-642bcb3bbb76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:23:da:ef:e6:0a:a3:76:e7:d4:35:99:95:a3:79:51:a0:
         9b:fd:9c:91:ec:a5:79:0b:38:96:b8:84:5a:29:2f:a2:1a:f0:
         0c:72:93:6f:98:d9:f0:bb:58:23:e7:b9:5d:c2:89:02:f3:b2:
         75:f7:4f:52:fc:a9:0a:cf:ad:66:bb:42:5f:93:18:e5:6f:0a:
         38:79:cb:d1:46:eb:18:43:6e:d5:c6:dc:32:b3:bd:ea:22:0f:
         ba:e4:3a:2a:45:3c:c1:f8:cc:f0:92:52:fa:d0:24:0c:1e:2c:
         26:03:0e:31:7f:32:0b:e9:2c:03:56:57:9d:bb:0e:52:46:99:
         eb:57:c8:80:be:05:a0:f7:14:ec:7f:95:fe:5e:15:1f:f3:46:
         62:f1:6c:f2:e2:04:27:cd:27:3c:6a:0a:07:6b:e3:55:87:b0:
         6a:9d:2f:1b:59:c8:a3:9d:36:6c:1b:37:85:a7:80:cf:18:d3:
         21:d3:35:1e:99:70:05:04:9b:ed:3c:4e:73:0d:e4:e7:1b:67:
         f5:86:45:67:ff:37:71:03:87:44:40:b4:c2:18:e1:e2:e8:3e:
         a4:c8:f0:e0:01:e0:af:ff:af:41:5e:91:29:bb:8a:74:29:78:
         c3:18:21:27:93:e3:14:c1:5d:53:be:23:38:98:ab:82:74:37:
         c4:72:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:36:09 2026 by rpki-client