Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e78633d-59a1-396b-bcea-d3ab94a3bbf0.roa
File:                     6e78633d-59a1-396b-bcea-d3ab94a3bbf0.roa (raw, json)
Hash identifier:          1ZYgxZMfJxFCuBM1fZ8Oxk6uJ1KLZWLCLdatVLif900=
Subject key identifier:   F9:5D:66:EF:AB:14:ED:6A:D0:4E:46:0D:A8:6C:84:A2:8E:B2:A5:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DD3E6032891D7AADA6A6D0168
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e78633d-59a1-396b-bcea-d3ab94a3bbf0.roa
Signing time:             Thu 14 May 2026 05:40:35 +0000
ROA not before:           Thu 14 May 2026 05:40:35 +0000
ROA not after:            Wed 12 Aug 2026 05:40:35 +0000
asID:                     13335
IP address blocks:        104.22.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:e6:03:28:91:d7:aa:da:6a:6d:01:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 14 05:40:35 2026 GMT
            Not After : Aug 12 05:40:35 2026 GMT
        Subject: CN=d68854ed-6122-44a4-ac89-2edc5c8d7211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:54:d0:14:45:09:c4:20:17:7c:fa:61:34:
                    82:1f:a9:ac:53:54:97:50:9c:cb:bc:bc:8c:d6:d8:
                    ab:9c:19:53:3e:a9:63:3c:6b:dd:04:97:0f:e8:f4:
                    c7:86:69:99:f0:f3:a9:c8:af:9f:29:3a:31:42:64:
                    4c:fa:df:c5:cd:84:35:85:c9:fe:cc:8a:55:77:8d:
                    cb:4e:9d:68:42:ad:b2:16:bd:ed:83:cd:6f:61:66:
                    bd:b7:fb:fb:ea:d9:eb:b5:4d:b3:bf:68:ac:16:3c:
                    b1:b7:aa:09:7e:5c:95:3e:38:f6:0e:27:7a:8c:38:
                    1f:e7:c8:e6:a2:51:38:4b:02:80:00:ac:a8:f4:d9:
                    4f:c8:19:5b:04:7d:66:67:e1:e4:87:68:c1:40:a5:
                    0b:d2:69:8e:61:80:fe:23:0b:8c:e7:47:01:06:6c:
                    5c:6e:a3:49:01:35:c7:d3:16:c5:36:c2:23:2f:fb:
                    df:10:da:c4:ec:b6:2d:81:33:75:3f:e7:52:9c:22:
                    87:cb:da:9d:f6:08:67:a0:2f:e4:2e:81:7a:ea:13:
                    28:88:f9:da:8c:8b:ad:a0:8e:32:42:8e:70:1a:07:
                    5a:b3:c0:5a:9a:c3:d4:4d:d6:39:02:d1:2d:7f:d1:
                    eb:04:63:3a:0e:a1:45:57:7d:19:d9:14:0b:76:da:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:66:EF:AB:14:ED:6A:D0:4E:46:0D:A8:6C:84:A2:8E:B2:A5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e78633d-59a1-396b-bcea-d3ab94a3bbf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d4:bc:b8:38:7f:9d:c6:b3:01:5b:d4:77:03:37:da:01:10:
         88:72:dd:20:4c:2e:a4:43:59:5f:a2:6b:42:ee:9e:8a:17:4a:
         9f:dd:1e:77:bb:71:1c:ea:f4:62:9c:fb:24:c5:01:36:2f:fb:
         f1:a5:7f:7e:df:ab:c9:e1:6e:00:28:a3:bb:04:be:b4:53:81:
         03:fa:41:64:41:1d:d2:a6:a3:c2:0d:a5:7d:3b:30:8d:e5:2b:
         77:16:fa:e5:22:be:ca:0e:75:72:99:8f:c3:d8:18:fd:14:9a:
         28:0a:0a:18:9a:88:0b:e1:9f:7f:b1:05:18:26:ca:72:db:3f:
         7b:7b:bd:93:e4:8f:de:91:f2:cb:0c:99:30:fa:49:d9:f8:b9:
         ad:8a:a4:68:f5:cc:d9:28:75:74:1f:b8:cb:15:77:08:35:b3:
         7a:82:fe:13:77:aa:1c:87:e7:9e:c9:af:0d:88:94:b0:f0:dc:
         e0:ee:6b:f6:1c:4e:3d:60:2c:61:dd:03:15:b4:2a:e9:ab:bb:
         4b:37:46:fb:ff:d2:cd:0e:a0:fa:36:89:c4:b8:ea:a0:92:8e:
         b8:d5:df:59:75:73:ef:8d:aa:1f:0d:eb:64:83:91:9d:6f:3a:
         b1:4a:f9:ea:6b:91:6e:dd:35:75:d1:c5:b5:06:9e:86:e8:8e:
         a3:54:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:10 2026 by rpki-client