Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cf8bc3-8654-3416-86ff-1492625ca586.roa
File:                     c4cf8bc3-8654-3416-86ff-1492625ca586.roa (raw, json)
Hash identifier:          EkUkAb3/rEz9bKWMyvuYNGyFgfjfVc9KDSPLYWZxB/k=
Subject key identifier:   69:DA:2A:41:59:2F:74:1A:C5:B3:31:6E:FC:BE:41:64:7A:81:1D:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF87CE241186F19CE30E04E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cf8bc3-8654-3416-86ff-1492625ca586.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.23.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e2:41:18:6f:19:ce:30:e0:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=e80cc5de-6bdf-454b-b765-a34c8812915b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:b7:8e:a4:4f:bc:fc:73:31:21:6f:7e:17:
                    3d:9b:d7:80:51:39:b8:54:43:15:e6:a0:cd:8f:15:
                    7d:19:81:f7:b5:02:25:e2:af:5e:64:7a:3e:ad:ef:
                    e2:12:af:70:30:43:95:3e:a9:6d:4d:7b:52:dd:7f:
                    ff:fd:3c:60:a6:6f:c9:4d:54:05:03:6b:52:ac:69:
                    bd:4f:79:8a:9e:83:f7:6d:41:b4:02:f2:99:cf:ee:
                    f2:8e:7d:3c:0f:49:96:08:28:49:9f:7d:25:ad:92:
                    66:d5:6f:ef:59:d2:50:03:5a:ac:40:e4:62:c9:be:
                    73:8d:89:99:0d:c4:3e:15:c0:6d:d5:b6:f5:6c:be:
                    a8:ec:3e:ee:0e:7c:32:07:03:3f:4f:97:7f:1d:66:
                    c7:4c:76:5b:cc:8e:26:2c:3d:fa:ff:65:46:ac:99:
                    16:10:7b:70:fa:82:ac:c8:e9:92:58:aa:f6:e2:65:
                    1c:6b:ef:58:e1:d1:5b:4b:ff:c8:50:f2:18:2c:a8:
                    47:ef:47:39:84:d5:48:4e:b2:5b:b8:86:c6:2e:9f:
                    22:c0:54:53:d4:e3:9a:9c:be:88:15:4f:3c:95:b8:
                    93:0f:e9:9d:4b:5d:d7:c4:34:8a:b9:57:af:f9:b6:
                    f5:04:e5:94:39:f2:c3:c7:93:55:ac:90:1c:2a:e2:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:2A:41:59:2F:74:1A:C5:B3:31:6E:FC:BE:41:64:7A:81:1D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cf8bc3-8654-3416-86ff-1492625ca586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:ca:b2:5d:43:72:97:38:9b:e5:69:34:4c:73:31:cb:bf:
         16:bc:85:88:4c:b8:63:dc:b7:44:a9:35:36:ed:8b:b0:f6:dd:
         5a:e7:4b:16:79:ed:48:fd:5e:0a:e1:81:eb:48:87:d8:30:2a:
         7a:38:8d:fa:1e:eb:7f:76:2d:7a:a9:dc:6f:64:fd:ca:e1:5a:
         17:f6:b6:fc:9f:36:c8:aa:b7:6e:c6:81:7e:32:95:74:52:e6:
         23:41:dd:ce:19:fc:0d:b1:9a:df:0b:bf:e6:66:cd:87:98:ea:
         d3:e2:69:40:49:43:4b:af:84:93:55:45:8e:8b:92:c2:68:17:
         e1:ea:97:17:e7:6f:dc:88:d2:49:03:3a:dc:ab:ae:2c:17:17:
         a0:27:59:1a:18:8d:93:54:8c:76:4c:ff:c5:1a:41:44:f3:49:
         23:1d:bc:e0:7c:e0:67:ac:c4:d0:14:ff:69:f4:8f:2a:43:24:
         42:32:8d:03:9e:b9:16:4a:2f:97:f9:73:04:d7:3d:9f:6a:b0:
         ba:c2:88:b4:da:3c:49:f9:50:09:2e:e3:97:a0:ea:44:a0:a9:
         20:a4:ee:33:e5:bd:29:2f:dd:a7:02:80:70:74:39:07:2c:15:
         bf:f7:65:8c:c8:47:9f:ef:96:32:3c:38:62:8b:b3:9f:c7:fe:
         e4:e9:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:58:17 2026 by rpki-client