Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9ba8e3ca-3dc1-37c9-a80b-fb9446655084.roa
File:                     9ba8e3ca-3dc1-37c9-a80b-fb9446655084.roa (raw, json)
Hash identifier:          OulQMkR436zIV9m7Z5rWPJDPgWSpfuClkKqqlcS7DXc=
Subject key identifier:   62:A8:DF:ED:BE:46:B0:4C:43:0C:15:4A:59:C6:69:1A:28:29:93:88
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4078C7A552EC4D851163600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9ba8e3ca-3dc1-37c9-a80b-fb9446655084.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        104.156.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:8c:7a:55:2e:c4:d8:51:16:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=7d3ea639-2adb-48c4-8eea-0f6ed24278e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:d4:78:82:db:12:c1:d8:34:da:2a:47:47:
                    bf:2c:79:72:30:25:09:fb:dd:5a:a6:7e:98:b8:8b:
                    5c:79:a1:ca:ce:ed:d2:ef:9a:57:9e:07:08:f4:3e:
                    ab:1c:f7:bb:a3:85:b9:b6:4b:69:1e:be:87:da:92:
                    5c:61:64:16:e3:aa:1c:e5:01:7f:ab:f0:2a:81:5d:
                    c6:8c:ce:c9:11:e5:bc:80:41:6c:a6:66:15:89:34:
                    a0:cb:a2:a2:29:a7:49:b1:0a:41:f2:f8:72:e3:5b:
                    91:f5:fc:ec:fb:5c:27:96:22:de:82:5f:4d:93:e9:
                    56:3a:b2:72:af:fe:79:94:5b:24:2c:27:84:31:21:
                    f1:89:a9:71:09:d8:d0:de:f2:11:41:6d:5a:91:73:
                    96:43:ad:a1:5b:61:2d:29:b3:7e:35:cd:5b:11:4f:
                    7d:5b:47:ff:84:9a:54:be:43:09:7b:ae:0d:70:37:
                    b1:33:d8:91:cf:c6:8b:4e:87:49:19:e7:59:7e:18:
                    26:70:9b:2c:27:ae:9d:d9:86:bf:23:2e:68:bd:de:
                    55:c8:87:18:e6:87:1f:3f:37:b7:08:2d:5f:9c:55:
                    23:11:83:fe:35:ae:53:1f:75:37:54:dc:ab:bb:4d:
                    d2:82:5e:1e:15:1d:d1:84:f9:f2:ba:ed:b1:8a:10:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A8:DF:ED:BE:46:B0:4C:43:0C:15:4A:59:C6:69:1A:28:29:93:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9ba8e3ca-3dc1-37c9-a80b-fb9446655084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:86:ab:66:56:74:5b:00:dc:e3:fe:ed:ab:da:2b:e8:34:
         97:02:d6:a2:7c:74:d1:1c:38:55:8c:01:e7:8d:54:9e:67:74:
         01:b3:a6:64:0b:e7:7c:ad:84:68:80:5b:60:be:36:88:57:c4:
         3a:3c:f5:b8:bf:cc:59:c5:a3:ba:7e:a0:63:b4:75:c5:1e:f5:
         20:53:3c:2a:df:cc:58:ea:0a:55:b5:cb:0a:3a:37:da:51:07:
         d2:d2:2a:21:24:64:42:63:28:94:39:e1:17:ca:b9:98:37:cb:
         90:6a:8f:11:49:0e:26:e1:27:c7:ba:6c:f7:08:ec:83:8d:60:
         f0:40:9e:c2:e2:94:42:8c:ee:f5:46:e4:c6:ce:a8:59:90:b9:
         76:8e:cd:5d:70:a2:b7:f6:48:24:cf:9d:a0:83:77:65:24:f9:
         36:0d:ce:cb:70:42:6a:80:e2:96:8c:c1:0a:d7:a2:24:1e:23:
         95:52:72:85:03:d2:40:3d:c1:0a:f2:c4:87:d5:6a:5a:e0:65:
         ba:8b:30:a9:ff:8c:6c:00:13:78:4c:eb:58:6b:aa:6c:a1:20:
         33:83:e6:fa:8d:ad:9f:be:c4:b7:94:4c:6e:a5:18:97:2d:84:
         7b:5a:66:08:72:f5:97:a5:85:d3:89:b8:e1:34:40:5e:c7:16:
         1b:a9:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:56 2026 by rpki-client