Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa
File:                     ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa (raw, json)
Hash identifier:          Aa/05w1/vp42COKDvKapVx43cd6yDG+nJ0F5yuwycY8=
Subject key identifier:   71:1A:60:C0:FB:C1:42:23:BB:FF:C2:84:AC:2F:8E:71:3F:5F:B1:73
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF87CC16AB988E22C5537A680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.23.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:c1:6a:b9:88:e2:2c:55:37:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=46a6c03d-3d58-4f42-a5f9-6137c3987733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:ec:06:9e:0b:08:4e:35:67:37:4c:7a:d2:
                    ed:90:bc:ac:32:f2:d6:1a:0c:4c:e8:1b:64:82:be:
                    d5:72:1c:22:eb:94:1a:38:6e:62:b8:23:c4:c5:5b:
                    dd:9a:89:4d:e4:30:7a:23:17:22:9d:9e:96:bf:63:
                    c6:12:02:ec:14:73:92:fe:01:7c:18:2b:82:b0:34:
                    c8:57:3b:ca:ec:77:2a:51:bf:8f:fd:3b:e8:24:42:
                    31:12:d2:3a:e0:54:3d:67:15:0e:db:e4:45:2e:af:
                    71:b7:d1:d6:f4:68:e4:3d:20:6f:f4:1d:09:b2:99:
                    ef:44:2a:61:7f:90:69:44:e7:1b:20:c0:c0:ab:a4:
                    9f:ab:9d:1b:98:d5:08:e7:23:e6:0e:38:6f:e6:35:
                    c6:f3:12:c6:d7:5a:69:11:9f:61:3a:10:b5:c6:04:
                    98:8b:4a:fa:49:81:57:e9:38:1e:e3:d2:8d:98:10:
                    92:09:d2:50:ce:71:60:5a:49:4a:96:5d:bf:07:c8:
                    d8:90:48:3a:46:33:c9:70:6d:ce:21:6f:88:9b:b0:
                    87:8a:dc:18:dc:a2:93:61:47:56:64:01:25:d7:63:
                    34:8b:2c:d5:60:62:ed:72:06:e8:86:94:20:07:6a:
                    fc:df:4b:b4:a1:1a:33:e2:b9:85:2a:33:50:9a:45:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:60:C0:FB:C1:42:23:BB:FF:C2:84:AC:2F:8E:71:3F:5F:B1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad5dd41d-ba80-30f2-8055-892bdc0d4536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:be:15:1f:b7:f5:aa:b2:4e:8f:8f:d4:fd:44:e2:68:6f:71:
         15:cc:8f:74:f1:e0:73:c6:3e:23:6c:4f:ef:11:4b:4d:80:db:
         fb:b2:fb:8b:90:2f:94:be:b2:33:5b:f1:01:69:ad:25:b4:26:
         ea:5a:59:2a:dd:c7:30:bc:09:2f:0f:4b:1c:24:7b:54:33:df:
         d6:fa:25:c4:45:a1:76:e8:c7:c3:ff:86:96:7a:7e:fc:5c:58:
         4a:7c:0c:3d:92:b0:41:1c:6f:e8:26:81:49:55:6f:fc:c5:16:
         8e:7d:fb:b6:91:07:c5:5e:7c:da:04:23:8d:78:05:35:12:6b:
         3a:a3:40:1e:ea:99:47:fb:07:54:4b:fd:bc:f0:42:cc:45:74:
         0e:13:de:b8:b8:e2:21:db:8a:12:64:5e:f8:04:74:63:87:0f:
         19:30:62:32:3a:d3:0d:1a:ce:fa:b6:21:80:e7:c4:1a:fe:f0:
         5a:f9:f2:2b:54:14:00:c9:1e:cc:f6:b2:3d:67:a1:bd:31:ee:
         ff:62:69:d2:75:e8:41:4c:03:55:33:79:dc:60:f6:b8:01:9f:
         07:08:fa:5f:d1:84:27:f5:df:94:80:7c:5c:b5:38:99:b6:a1:
         ed:b4:57:1a:aa:a4:2c:51:da:0f:fc:f0:2c:5c:29:ff:f1:1e:
         a2:be:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:26:07 2026 by rpki-client