Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa
File:                     bb08152e-b32b-3310-9bce-be12c11c8498.roa (raw, json)
Hash identifier:          tUsW6KE+7P2GL08/31uuKKt5LJ/woCUHKnNWRjEIUM4=
Subject key identifier:   C1:3C:EE:BA:09:6B:91:9B:D7:3C:E4:12:7E:88:AD:91:F9:F3:D2:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6B0A2707AC2B520B19262700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.70.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:27:07:ac:2b:52:0b:19:26:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=07b08bb1-fb5c-4587-a81d-3a1aabac00ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:67:d5:85:14:53:39:4f:94:48:f3:34:e7:
                    bc:dc:6a:0a:ac:02:9a:52:17:70:8d:06:bb:c1:4f:
                    cd:c7:b9:f4:e2:29:c4:4c:04:95:21:8a:96:e7:cb:
                    3e:f1:81:28:63:98:54:e8:91:71:fe:55:af:f8:71:
                    93:d8:77:0e:d3:6e:75:17:00:97:32:7f:9e:7f:4d:
                    62:9e:16:14:25:f6:5a:e0:2c:50:9f:2a:d7:f5:0f:
                    c1:8a:51:47:7f:cc:5a:6f:a1:57:35:34:8e:05:95:
                    15:c3:da:f1:83:22:2b:d2:a0:a9:b7:f3:c1:19:7a:
                    7a:47:d5:93:3f:77:18:51:92:23:43:d1:4f:4a:88:
                    71:67:b8:b1:0d:0b:a2:02:48:23:67:70:66:9a:7f:
                    57:fe:af:e7:92:5a:c7:72:d0:83:03:ba:f1:b5:0d:
                    ee:71:f0:84:48:5c:4c:2b:51:ee:b3:a8:20:e4:bd:
                    24:57:10:0a:0b:19:fa:14:15:26:6c:82:28:de:76:
                    1d:ae:36:54:5e:72:93:96:8c:b5:42:2c:a3:6f:b0:
                    95:5c:1d:37:21:79:5d:36:4a:3c:24:19:1f:d4:89:
                    48:cc:67:5e:c6:2f:cf:7d:c1:b4:d2:e4:d9:7f:ca:
                    1f:4e:8d:e3:8c:30:2e:27:e9:83:71:93:4f:84:d9:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:EE:BA:09:6B:91:9B:D7:3C:E4:12:7E:88:AD:91:F9:F3:D2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:80:65:d0:dc:2b:d8:8d:fb:66:87:b1:74:60:d7:78:93:
         35:77:b2:88:26:4a:3c:2a:af:05:9e:cb:b7:f1:7c:ce:2b:e2:
         dc:e8:d1:ef:fb:7e:e9:03:66:22:8b:3d:f7:4e:75:b4:a0:31:
         2b:e3:10:77:1f:7c:db:5e:cd:c3:33:68:fb:57:af:1c:8d:aa:
         c5:ae:67:d1:81:1e:6a:63:c4:27:e0:19:50:f9:47:c9:e7:06:
         7b:36:22:41:03:17:e1:66:df:0b:54:4e:97:02:ea:a2:2c:a2:
         a8:0a:69:cd:ae:08:6c:b7:a2:b9:ff:e7:72:62:1e:d1:29:3c:
         2b:b2:ff:22:01:42:c2:1c:ba:cf:0a:b1:7f:aa:54:d1:f7:3b:
         70:55:49:79:a9:e8:74:97:f4:ca:19:14:e5:ee:cf:1e:c9:ab:
         34:9d:9b:2e:a0:ce:38:36:64:e5:7e:6f:48:f8:a8:e0:7d:1e:
         88:2d:d0:89:43:c7:bc:f2:8d:23:53:71:8e:ce:1e:de:d0:6c:
         6c:3c:aa:1e:86:bf:3d:d6:67:cb:d6:3a:be:27:0e:59:ca:10:
         fc:99:87:25:e9:f4:f5:30:fe:15:1f:63:40:aa:09:5f:c8:42:
         af:b8:6d:82:9a:e4:94:49:a4:bd:d4:ca:85:94:31:5f:5c:08:
         5c:18:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:16 2026 by rpki-client