Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/e0b02755-4215-385e-a4e2-b4b34df4c1b5.roa
File:                     e0b02755-4215-385e-a4e2-b4b34df4c1b5.roa (raw, json)
Hash identifier:          ABK1ZQzg3F0JeeMMTTC82EHPK32PmP911qq3CJW57cg=
Subject key identifier:   EC:09:E7:55:2B:6B:86:DC:C4:98:0E:A5:B6:BE:B8:B0:CE:34:6D:33
Certificate issuer:       /CN=821acbde-bbb2-4953-b4eb-6a706f6f3808
Certificate serial:       010D0C9F4328584EC907204D99C091057CCC4028
Authority key identifier: C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/e0b02755-4215-385e-a4e2-b4b34df4c1b5.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     12076
IP address blocks:        104.193.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:20:4d:99:c0:91:05:7c:cc:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821acbde-bbb2-4953-b4eb-6a706f6f3808
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=d8780906-9e14-47d0-9c74-975464cd699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:d0:8c:fe:48:a1:7a:ff:f0:fc:a8:64:07:
                    fe:62:4b:4e:51:30:8e:ea:7d:88:4d:47:e9:03:5e:
                    02:96:f2:6d:3c:b6:96:66:ba:0d:27:cb:63:21:56:
                    1c:ec:23:cd:d0:45:10:31:be:1d:31:e2:22:d1:4e:
                    5f:1f:39:3b:e5:67:a8:55:07:af:60:2f:88:61:b0:
                    a6:f6:03:d9:9b:67:fb:7e:11:ed:e9:2e:8d:de:cb:
                    f9:26:95:59:a2:ec:e5:cc:1d:e1:69:9e:07:02:5f:
                    7a:ac:9b:e1:2a:6a:34:c4:1d:9c:aa:c9:fd:cf:bd:
                    a1:88:c3:d8:6d:4c:ca:a3:90:e3:d9:e5:63:75:91:
                    fb:2b:2c:9e:5e:c5:09:e0:fa:f3:80:9f:71:75:fd:
                    7f:ac:1e:76:5c:fb:e7:58:92:87:af:eb:35:02:eb:
                    f6:c5:9a:a3:19:58:99:c4:20:45:cc:1d:68:ff:59:
                    26:60:92:64:09:03:67:fa:d4:83:42:4d:a6:28:90:
                    34:72:12:fe:04:79:59:c1:b6:00:ab:3a:7e:38:53:
                    94:2a:f5:f3:07:da:bd:93:89:ce:99:e4:80:d4:ff:
                    bb:da:6e:a7:0b:00:c6:ec:36:0d:ef:90:01:7d:7d:
                    bc:b7:de:d5:90:0e:7d:e4:7b:e8:c1:19:cf:2c:d6:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:E7:55:2B:6B:86:DC:C4:98:0E:A5:B6:BE:B8:B0:CE:34:6D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/e0b02755-4215-385e-a4e2-b4b34df4c1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808/821acbde-bbb2-4953-b4eb-6a706f6f3808.crl

            X509v3 Authority Key Identifier:
                keyid:C1:56:77:5C:A2:A0:8D:E4:68:05:4E:39:7A:C6:9E:85:F9:03:7A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/821acbde-bbb2-4953-b4eb-6a706f6f3808.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:a3:8e:b4:02:f6:24:51:12:b9:5f:2d:06:3f:f6:f6:e1:
         f9:f9:74:fc:ed:3e:0c:73:06:e2:32:58:95:c3:6f:35:36:b6:
         25:07:32:98:58:6e:84:11:37:fb:35:2e:c4:ae:36:8d:8d:a6:
         f2:26:bb:23:c2:17:ca:9b:89:c9:b9:65:e8:63:62:f8:ab:3c:
         6b:0b:23:e9:85:ef:88:ed:6e:86:23:37:6b:80:22:a8:f7:86:
         c5:08:66:25:e2:af:55:cb:fc:a2:45:ac:5a:71:e7:f7:9d:02:
         37:82:e7:fb:63:a6:04:cc:9d:8e:81:db:cd:e4:ac:9b:32:9b:
         0d:3e:6c:a3:72:d7:93:ec:61:93:d1:64:2e:f6:55:9f:80:a7:
         29:bd:64:11:6a:98:ab:50:1f:22:1e:6b:e8:f5:b5:71:e9:bc:
         03:ee:2c:90:02:84:0b:b6:6d:bd:38:54:f0:3e:eb:50:cc:63:
         13:e6:fd:6c:3f:57:de:05:0b:79:3b:c8:9d:8a:98:7b:06:19:
         71:66:e3:55:53:1d:4d:25:03:75:58:ae:68:23:d0:4f:84:29:
         fb:82:f0:49:e1:11:84:c3:27:f7:b2:86:8f:43:34:07:28:27:
         1b:e5:c8:6a:12:86:dd:c9:cc:54:45:9f:ab:17:85:18:c1:88:
         55:7b:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:10:26 2026 by rpki-client