Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa
File:                     b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa (raw, json)
Hash identifier:          MrJ+oWBhMTa+njECNZeyVQ1Fua/jaTmmcZtiGX46xOY=
Subject key identifier:   1F:A6:F0:50:0B:69:E8:B0:7D:34:58:DE:6B:36:28:F3:5C:37:1E:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CB81C939D60B8728264874240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        104.110.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:93:9d:60:b8:72:82:64:87:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=acc670f2-7dbc-4a02-9516-7d1c1fde806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fa:04:b1:7d:db:c2:f7:f8:56:0d:1b:01:9e:
                    62:6a:24:bf:93:bd:5e:b5:92:6e:09:45:8e:8f:70:
                    dd:67:e3:db:f5:28:f8:cc:41:a4:35:03:bc:17:c3:
                    26:1e:43:e4:3b:82:fc:6c:b0:ac:2c:51:6e:1e:d3:
                    ae:c6:1f:60:29:57:a7:cc:10:cf:57:56:90:23:bf:
                    c8:27:eb:d6:fd:b2:f8:11:6f:bf:7b:fb:8e:cc:d5:
                    3a:c7:b5:2c:48:25:30:b9:5f:e1:df:b7:62:46:38:
                    70:67:01:8a:48:11:18:e5:90:9a:81:42:33:dc:39:
                    49:79:e4:ca:d0:5f:b1:75:15:2e:ba:c6:52:b5:59:
                    59:a3:ff:4d:dc:6c:d7:ed:ec:25:4b:77:f7:e1:33:
                    f8:30:bb:32:a7:c4:cb:e1:b3:da:fe:08:54:96:04:
                    13:be:ce:69:31:b5:4e:a3:97:ab:43:81:78:8b:fb:
                    b3:64:f7:96:03:7d:c4:72:35:9a:f9:f4:a3:d6:59:
                    58:a7:54:c9:2c:a4:32:42:a6:81:c8:b9:5c:f5:f0:
                    16:bd:4b:f3:9b:fd:3e:53:db:bb:d2:28:f3:9e:e9:
                    ea:39:3b:b1:92:38:b2:cc:30:af:2b:0c:1c:8e:89:
                    93:cc:92:30:be:18:58:8f:14:fe:92:32:23:c0:72:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A6:F0:50:0B:69:E8:B0:7D:34:58:DE:6B:36:28:F3:5C:37:1E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.110.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:6a:3f:f4:cf:e6:c6:73:29:3c:39:39:83:e1:be:f0:91:
         20:fe:3e:47:d6:1a:7e:83:b9:d8:b3:f0:64:67:df:2d:c3:0e:
         9e:8f:d1:ee:51:1a:4d:5c:25:b4:61:a3:84:ed:ff:67:4f:c5:
         7d:f2:2b:be:49:e1:7e:24:4c:f8:87:3c:46:78:0d:09:64:af:
         8a:18:fa:9b:88:74:07:62:4b:94:3e:5e:6d:d6:93:70:d4:92:
         c2:64:48:f4:fe:a7:db:a6:f7:8f:0c:a6:fb:df:5d:0a:af:b2:
         b8:3b:0f:1f:20:b5:cb:6a:88:eb:e1:23:55:26:3d:ab:df:10:
         90:b7:70:53:9c:ef:cb:fb:f0:ed:fc:84:77:3c:27:97:d5:94:
         a8:50:50:ba:ae:e4:20:07:6a:14:20:13:78:bf:8d:8c:a3:19:
         4c:b2:d8:03:7e:ca:d7:4c:4c:ac:2a:1b:c5:66:b7:1c:cf:d4:
         22:03:d4:15:6b:55:00:83:50:04:bd:d3:d6:37:3d:7a:be:2c:
         66:4a:be:fa:b3:8c:cc:8c:1b:04:08:aa:98:e7:c1:51:af:7f:
         62:44:0b:76:79:7f:5a:38:5e:5a:ba:aa:73:78:d3:c2:61:f7:
         5c:ce:22:a7:db:ff:98:74:c5:7b:45:f6:83:3b:19:91:57:6a:
         03:35:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:13 2026 by rpki-client