Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00054bb8-9144-3ca6-893c-bf52388769c9.roa
File:                     00054bb8-9144-3ca6-893c-bf52388769c9.roa (raw, json)
Hash identifier:          Q3XwZG8JHrAJT6+qTeXHSi+363Dl2OSbGltETyltuUw=
Subject key identifier:   B5:19:D4:CB:88:AF:10:D0:AF:06:46:DB:5D:E8:43:12:90:46:03:10
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DF4DB3848D787EDB930EF8800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00054bb8-9144-3ca6-893c-bf52388769c9.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        104.29.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:38:48:d7:87:ed:b9:30:ef:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=056f172e-a16d-4934-9fef-6a5a6444e667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:d6:71:34:de:fd:61:d5:33:24:a8:9f:2e:
                    d5:d2:e1:a3:85:d7:d9:b0:10:a7:46:09:fb:da:df:
                    e0:32:6a:39:33:44:5f:0b:0a:c8:a7:60:60:54:84:
                    c9:c3:66:0c:e0:e4:bc:67:92:ba:c1:f2:78:3f:5b:
                    38:ca:12:8d:01:91:a3:81:c5:7f:c6:51:a4:47:7f:
                    57:a5:de:7f:52:b6:73:f3:42:e2:89:7f:4a:36:10:
                    2e:b2:75:8a:61:09:c9:f5:b7:da:c3:b1:96:87:83:
                    69:02:20:f3:c2:8f:32:ec:dc:b6:22:10:06:22:48:
                    1d:69:97:9a:48:a0:88:95:7f:4e:ab:92:dc:55:66:
                    5e:6e:4f:29:af:4d:5e:fe:5c:8a:fc:18:0c:54:e4:
                    76:5e:0f:fb:88:3f:4a:b1:82:0a:3e:b7:84:a2:9e:
                    5e:fa:ba:c6:08:ff:15:d3:94:c3:55:c2:1d:dc:76:
                    14:d9:47:cc:bf:1d:4b:46:ee:ca:d0:ea:a8:61:e1:
                    b2:fe:e5:cd:0c:d9:8a:9b:14:7e:83:23:3b:06:92:
                    81:4e:e5:ff:c6:1f:89:a1:b7:ea:52:d3:56:30:fa:
                    d8:e0:aa:eb:a3:24:c5:84:41:65:a2:f1:38:7c:27:
                    9d:b2:cc:3e:74:0a:23:5c:6d:c1:6a:db:1c:8a:d6:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:D4:CB:88:AF:10:D0:AF:06:46:DB:5D:E8:43:12:90:46:03:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00054bb8-9144-3ca6-893c-bf52388769c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:be:41:fd:b1:2e:1e:f1:1b:a0:99:ff:d9:c0:7a:31:49:90:
         f9:86:ff:25:03:44:9e:36:7b:53:ed:a8:5d:be:02:a2:f7:24:
         0a:16:e8:bd:19:52:37:6f:13:69:bd:45:64:39:5b:78:a3:2e:
         22:c1:96:5f:0a:ca:59:e7:3e:b2:2e:84:67:7d:be:58:59:37:
         f0:ab:e9:46:26:c4:d8:7a:a5:66:05:ae:9f:76:52:8f:07:00:
         88:39:8d:5d:82:30:ca:2a:7c:c1:0a:8e:95:2e:c5:ec:8e:a2:
         eb:26:08:90:d5:bf:80:d7:17:01:7a:f2:1e:c5:bc:d6:96:bb:
         7f:55:77:96:c2:6c:64:eb:5e:bf:65:8e:91:90:fe:bc:3b:3a:
         40:f7:92:cc:df:32:d5:2a:97:3e:31:1d:57:a4:da:8c:c1:ac:
         c0:f2:67:c7:dc:76:83:b7:ae:0e:58:be:55:e6:cf:35:55:fc:
         16:e8:f9:ef:d1:60:0b:6e:d5:26:7e:70:1b:bd:e2:25:e7:88:
         cc:03:11:e7:18:be:5f:55:52:c6:52:99:5c:a4:b3:5e:8c:63:
         67:79:8d:3f:c2:b5:88:4a:ad:77:83:9b:39:aa:c8:8c:e1:d1:
         2d:e4:98:b4:d5:70:bb:7a:94:9d:38:9a:f8:82:cd:13:c2:3f:
         63:40:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:38:03 2026 by rpki-client