Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa
File:                     29387d14-5369-3841-8b55-747cef9985b6.roa (raw, json)
Hash identifier:          w0luloK/k3O3SBs0rG2jTvxNp1mZBBKm+mS1Bdg5s6c=
Subject key identifier:   FB:F1:44:01:A3:8F:E5:27:DC:4C:42:06:9B:2F:45:3D:B6:BA:8C:88
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584D6AAA6C54154DA9F5D204E900
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     46562
IP address blocks:        104.200.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6c:54:15:4d:a9:f5:d2:04:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=d7138d54-602c-4dcf-808d-d3177f529c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:08:b7:61:09:85:da:22:88:24:56:68:d8:2b:
                    3d:9e:51:b5:83:27:a0:84:64:87:13:b9:ae:4a:b1:
                    21:d3:26:7e:a8:2d:a8:f1:1c:b5:b2:be:d7:f1:e9:
                    04:1f:90:09:a6:64:76:22:5a:42:ff:93:5d:24:0a:
                    60:f8:99:ef:a1:c7:0e:cd:ee:e8:88:2a:05:58:8c:
                    10:71:31:34:24:d0:03:3c:0e:3a:c5:f9:53:5a:78:
                    61:f4:88:8f:5a:63:28:1f:2b:84:97:21:f4:47:4f:
                    6c:62:43:c6:15:1d:3b:39:c0:19:4b:9d:d2:ab:f5:
                    95:c1:b6:01:c5:df:f9:48:b6:86:c4:b0:1e:b2:46:
                    32:fa:3f:d0:a1:59:6d:6c:86:9c:62:c4:d7:c0:f9:
                    ff:01:48:ab:6a:f7:2c:c5:60:1a:53:70:01:20:56:
                    f9:6b:36:aa:b8:09:25:a5:bc:23:d9:f2:00:eb:e6:
                    da:4d:bf:4d:bb:0e:83:f0:9c:fd:bf:28:73:6c:1a:
                    42:e8:90:3c:b0:e2:c1:37:2a:25:39:c0:be:21:5b:
                    04:c3:ec:66:57:8a:a7:ae:bc:c4:a7:59:61:f1:a2:
                    90:bc:e1:cd:96:c9:8e:6e:e4:3d:54:0d:ec:4f:0f:
                    d4:8c:52:6d:f8:d1:e9:bd:ff:74:bf:2a:cc:a1:f2:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F1:44:01:A3:8F:E5:27:DC:4C:42:06:9B:2F:45:3D:B6:BA:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:99:f5:dd:4c:6c:a3:bb:b1:2c:24:70:1a:2a:3c:7e:d3:
         95:0e:49:6d:80:7d:76:83:7e:c5:81:06:ab:99:8e:d1:a1:00:
         49:d5:01:13:71:d7:00:d1:fb:b7:5e:2e:d7:8d:2e:b1:4d:44:
         36:e7:f6:3e:fd:ab:bd:81:73:db:48:72:f1:07:6a:88:c5:6c:
         b2:04:98:1f:41:46:8e:cc:f4:0c:a7:81:85:48:da:5c:a2:ca:
         5c:94:88:c6:8f:82:32:d2:ec:a5:b9:e7:a2:0f:b2:2a:a1:fb:
         76:6e:be:32:29:9b:f4:ee:3c:7a:66:ed:7e:32:34:6f:76:66:
         82:bb:e7:30:c6:95:2f:42:73:a9:73:2f:9b:ef:7e:2d:82:d0:
         fc:0b:9f:de:44:ce:c8:01:f6:98:2c:56:7e:c3:97:27:76:9a:
         e8:72:b6:a6:17:77:4d:8e:0e:9f:48:12:d2:b0:64:ea:5b:50:
         c8:a9:85:e7:71:9c:0d:ad:f4:6c:90:77:e0:0e:f3:18:ee:ab:
         39:b3:e4:15:62:16:15:d3:80:cb:d9:7c:9c:45:61:1f:5d:60:
         ff:bf:5f:f0:79:c0:d0:c4:5d:d7:1f:4f:53:19:53:09:9b:9b:
         d3:d4:26:b4:c2:d4:26:01:5e:6a:5f:16:4c:c9:8a:10:15:f1:
         91:64:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:08 2026 by rpki-client