Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59294f7d-e5bc-38c9-a6d5-b111869db17c.roa
File:                     59294f7d-e5bc-38c9-a6d5-b111869db17c.roa (raw, json)
Hash identifier:          99RPh7YVTYEBfwEQz1apT62hr9ERV3FY2r1pOientsU=
Subject key identifier:   16:50:D4:63:A6:13:E4:15:03:4E:FD:67:E0:8A:43:AC:77:53:AA:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64E808DBB79F957E4FA580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59294f7d-e5bc-38c9-a6d5-b111869db17c.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     20940
IP address blocks:        104.115.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e8:08:db:b7:9f:95:7e:4f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=56ae3438-2cc1-4609-b768-95ca1de246eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:60:c0:ff:31:88:e6:81:f7:49:24:dd:a6:
                    e7:7d:02:db:af:41:a1:8d:0e:7d:c3:6e:11:e8:24:
                    12:10:a6:00:a5:80:41:a1:ae:bb:cc:bd:d7:73:53:
                    5f:09:06:8e:81:0c:d0:7a:97:8e:37:2b:e6:58:61:
                    fb:cb:02:87:f1:7b:26:f2:32:50:ce:69:16:c5:69:
                    a2:ab:01:8a:28:0e:e6:de:0b:7f:ca:d5:62:01:bc:
                    bf:52:5d:66:c4:e2:50:60:40:bf:09:e2:95:07:9d:
                    86:29:20:2f:0b:e1:45:64:f8:3a:fc:bd:42:38:a3:
                    be:18:5d:c6:c5:91:83:c5:bc:a0:6d:06:c7:8b:ae:
                    75:cd:a6:81:7f:60:9b:3c:d8:20:99:48:48:8c:f0:
                    4c:c8:93:2d:52:91:68:bb:9d:69:dc:af:61:90:89:
                    5b:2d:ff:d6:42:e2:29:be:14:7f:c9:97:1c:ce:3e:
                    8c:52:4d:62:ba:41:84:86:59:20:b4:af:1f:2c:85:
                    8f:9e:b1:d4:aa:0e:43:f1:1e:f2:09:35:9d:3a:93:
                    df:8a:f9:ea:b4:1c:0d:87:7b:79:aa:c0:13:67:6c:
                    ea:86:d4:f2:42:c5:fb:5c:30:ef:47:48:73:12:bb:
                    a1:71:8f:2e:27:f3:42:9f:96:c5:39:df:d7:99:f8:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:D4:63:A6:13:E4:15:03:4E:FD:67:E0:8A:43:AC:77:53:AA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59294f7d-e5bc-38c9-a6d5-b111869db17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.115.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:30:ff:84:b6:28:32:d3:74:7a:3a:bf:90:6f:e1:57:b8:
         49:12:d8:a5:89:d7:24:cd:d4:ed:9e:67:82:57:9e:6d:31:f1:
         76:94:94:99:d7:f4:b6:de:a8:b5:6a:e7:f8:2a:61:84:03:46:
         e2:ef:d5:0f:1e:e8:d9:c4:2e:32:a5:ab:2e:1e:0b:5f:9e:36:
         0e:9a:16:91:53:4a:42:8f:d7:a5:0d:4d:41:9f:06:fb:1b:7b:
         b9:62:3c:e1:5c:74:34:de:fd:d6:eb:8c:b5:55:fa:4a:1a:bb:
         03:f9:97:4f:02:45:e0:d7:d2:f6:b2:72:86:f1:f4:e5:e1:58:
         10:31:53:c6:39:c0:d4:76:6f:8d:d1:49:17:8f:35:25:50:4c:
         2d:f6:7e:e5:ad:48:bf:7f:b9:77:96:60:a9:a7:e0:59:5d:cf:
         62:3d:86:a8:b2:95:47:fc:2b:7a:20:30:3a:bd:7d:ae:90:75:
         18:e1:b6:38:ff:6b:9a:5c:6b:b6:01:12:3a:ad:86:0a:c2:12:
         ea:08:dc:f3:48:21:c4:ab:b1:ac:45:8b:b7:0a:6b:42:3b:8f:
         5d:b9:e0:80:95:34:b6:0f:ee:95:b9:f0:4e:97:3b:2e:d1:d2:
         a3:41:dd:2d:22:c4:2a:8a:36:84:9c:97:d2:11:18:0d:b1:ec:
         b1:74:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:54 2026 by rpki-client