Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84f9d068-6ac7-3fb1-b4ef-4da0c98295f5.roa
File:                     84f9d068-6ac7-3fb1-b4ef-4da0c98295f5.roa (raw, json)
Hash identifier:          k38vHQWzsyBfoEYNryjpDP4r2dH6Jnq7KmOaGZWANts=
Subject key identifier:   92:4F:03:38:58:C7:E9:47:68:4A:75:07:1E:8A:05:15:79:9F:EC:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC90727637926A6C81AC90B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84f9d068-6ac7-3fb1-b4ef-4da0c98295f5.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     63949
IP address blocks:        104.105.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:27:63:79:26:a6:c8:1a:c9:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=086908ca-cfa8-4a88-a5d5-c14a7b113fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:b9:28:18:dd:68:a3:90:60:ae:38:b0:02:
                    28:46:d1:56:69:44:71:48:ef:ff:2b:6c:c8:fd:ef:
                    03:f2:5d:e3:ec:58:b8:67:c5:1d:02:6e:c4:bd:60:
                    68:3a:c9:ec:47:6d:74:48:77:86:1a:f6:a2:58:4e:
                    a4:76:78:75:28:db:a2:fa:b3:3b:17:68:da:46:c2:
                    36:66:0d:f5:a1:d6:64:21:27:b1:2e:76:e2:47:62:
                    34:18:3b:d5:2d:b1:50:37:3c:75:aa:c8:6a:5a:88:
                    76:c6:e8:b6:de:89:c3:45:24:72:cc:7b:41:4d:c2:
                    da:1a:57:b8:00:04:d6:98:59:27:36:de:4c:c3:ff:
                    05:96:81:4c:c6:bb:31:41:73:39:e4:3a:58:f6:d6:
                    1b:34:8c:e2:a9:84:da:74:ee:f0:e1:64:93:a7:cb:
                    ec:29:fc:36:7f:a7:00:76:d0:c9:f3:4c:25:ea:71:
                    64:cc:23:49:fe:9a:34:01:80:61:de:f2:c9:36:a6:
                    07:05:b6:51:57:97:85:ce:7f:d4:c2:1c:75:4a:1e:
                    56:d6:84:f6:fc:c5:e3:95:e7:c7:c1:e0:e1:c0:36:
                    f7:c8:2c:35:49:f7:48:8b:20:ce:62:2b:86:35:7f:
                    b4:57:25:5b:11:ec:2c:a6:e5:d9:ff:39:f1:61:60:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4F:03:38:58:C7:E9:47:68:4A:75:07:1E:8A:05:15:79:9F:EC:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84f9d068-6ac7-3fb1-b4ef-4da0c98295f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.105.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:9c:71:18:f4:be:cd:f9:d8:f7:a7:a1:7b:76:27:df:d0:
         79:60:e1:c4:7c:60:a9:da:92:dc:c6:f8:ee:f4:09:ec:a3:fa:
         6f:ee:ce:aa:bf:45:1e:4e:f3:d1:6e:d5:16:bb:50:34:ea:64:
         2f:7a:08:0d:21:b5:9b:f1:2a:b3:30:8d:e5:cf:13:f3:56:d2:
         57:67:f5:bd:95:b6:5f:57:38:fe:86:7d:ca:af:7f:3b:c3:a2:
         f4:c2:b3:6d:35:48:08:89:9b:42:d4:0f:61:43:ce:c7:e1:a1:
         0e:ef:e5:cb:07:e8:fb:7a:73:7e:e6:73:b5:2b:a8:d9:a3:4a:
         0d:64:70:7a:74:ca:52:46:c7:3c:42:94:9e:22:b0:3c:ab:20:
         58:4a:22:b5:b3:6a:93:49:cd:fd:31:9d:56:b0:16:df:52:18:
         00:43:44:6b:05:0e:48:79:0e:7d:79:5c:82:1a:19:3d:ba:fe:
         9a:e8:82:a3:8a:cb:df:1b:cf:24:66:5d:b4:69:ac:cb:e8:3b:
         9d:2f:5b:0d:e6:01:e3:0c:85:9c:7a:61:d2:96:fa:fa:f9:a4:
         7b:aa:c4:09:0c:eb:2d:be:a9:92:a7:7c:bb:54:57:fa:98:20:
         8b:40:d4:df:5d:dc:52:d1:1a:e8:60:bc:5c:5a:1d:f5:88:a6:
         d6:45:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:05:56 2026 by rpki-client