Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa
File:                     47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa (raw, json)
Hash identifier:          m9lJe4bvAnJI+X+oMw2MV4WKmEF26Q8djNLugj7K1Po=
Subject key identifier:   1C:20:7B:1E:07:F9:0D:D6:74:0E:59:12:EB:27:A0:C7:80:77:D9:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876FFC6CB9F6E37D83C580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.29.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6f:fc:6c:b9:f6:e3:7d:83:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=337a722e-4ec1-457d-8198-a3df29899b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:0d:c0:80:58:9a:82:70:76:4a:2f:90:c1:
                    c7:bd:fd:86:43:1e:d9:4d:4b:18:3f:ae:78:23:81:
                    93:3f:9e:c9:dd:14:3c:83:a6:ca:0e:ec:07:c8:49:
                    ea:f2:57:54:b4:5a:ea:fc:2b:b6:35:42:16:b5:d8:
                    ae:b7:66:1d:0b:9c:ce:3e:16:d8:93:ff:33:a7:66:
                    76:1b:af:f0:8f:ce:78:2d:78:38:da:26:2e:a7:92:
                    2b:d8:45:53:28:31:17:37:48:c3:d6:34:54:fa:5d:
                    13:e2:a6:7c:79:9f:f6:55:e1:92:7f:bd:14:01:c8:
                    69:41:8e:9c:6c:8e:d3:2a:d4:2e:00:bb:58:c2:ef:
                    e4:d8:4a:a6:d9:24:8e:2e:7f:3b:36:0a:5a:b6:07:
                    fa:95:33:ca:c2:a6:03:c4:94:a4:f7:9f:d0:ef:60:
                    06:64:88:cc:72:e6:a6:e0:a5:ef:42:d5:8f:df:0f:
                    6d:00:8c:4c:87:76:d8:b6:6c:da:e0:79:ca:a3:9c:
                    45:fb:5c:ff:6c:bf:16:39:8d:6a:5e:ef:a7:22:4f:
                    d0:4e:84:a8:d0:2a:e2:44:cb:10:19:ba:0e:e0:2c:
                    50:c8:11:5e:7d:67:dc:b2:a3:ab:6f:c0:8d:2a:22:
                    58:a7:6a:0b:11:1e:24:c7:c6:48:e6:e2:d3:54:94:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:7B:1E:07:F9:0D:D6:74:0E:59:12:EB:27:A0:C7:80:77:D9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:2f:4c:71:cd:bc:5e:70:16:1f:d0:ad:3b:4d:ad:cb:47:
         d5:3b:44:b3:77:49:6c:39:ae:ad:3d:a6:07:cd:1e:c9:b5:dc:
         66:57:1b:aa:19:6c:cd:a3:de:d6:68:00:14:8c:d6:d4:30:32:
         8f:9a:7f:d1:35:5a:f3:bf:d6:bb:73:49:3d:61:79:0a:2f:c2:
         e7:e6:24:5d:0c:ee:48:79:a2:dc:40:6b:db:4b:b3:14:4d:95:
         c2:23:fa:57:5f:38:6b:30:b5:86:ab:c9:3b:a8:9b:5c:bb:c4:
         63:c9:be:c0:f1:24:e9:4a:12:99:ab:45:c0:83:b7:84:43:3c:
         12:87:70:f4:14:19:e3:c1:fb:5f:80:44:bc:ff:1a:2c:c9:6d:
         b9:b7:ac:04:b8:2f:35:7f:51:93:b7:fa:c8:6e:69:f4:5e:d7:
         52:b9:85:36:a0:1b:62:c0:be:cf:88:4e:73:14:8a:35:ba:90:
         e2:31:af:fa:21:87:de:d3:8b:de:54:57:ac:bc:a9:89:11:68:
         01:d2:ee:5f:ce:d2:7e:93:8e:6d:97:44:52:6e:af:dc:14:c6:
         dd:c5:48:67:d4:45:3d:9e:97:5f:bd:19:de:d8:71:ec:78:40:
         28:9f:d3:39:34:ed:b7:f4:db:4f:7a:82:49:51:38:40:db:6f:
         62:dd:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:09:45 2026 by rpki-client