Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
File:                     85f972da-dbfc-3722-afd9-96721c209d87.roa (raw, json)
Hash identifier:          GnI2MAlTwrPjh/1rrDd+pkANtifZEDA4/4MDlNo6Lq8=
Subject key identifier:   EE:70:E2:65:B9:25:A5:46:BB:15:8A:B7:6F:87:22:BD:73:9C:5A:C3
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584E5A49F6FF67B4398C53F0D640
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f6:ff:67:b4:39:8c:53:f0:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=fa815440-60ed-4c5c-bfaa-1e0d6b53b8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:f5:58:71:4c:60:97:7b:18:39:51:5f:b1:
                    1d:65:0e:c7:bd:7a:1a:f9:c8:b2:99:f5:49:34:1a:
                    97:01:03:09:08:3a:61:00:6c:4d:ce:31:aa:5f:1b:
                    ee:2a:5a:73:26:05:95:80:7c:64:26:be:60:12:ce:
                    73:f4:b2:33:f1:84:7b:5e:9d:d9:cc:74:60:6a:eb:
                    39:61:38:f5:87:b8:4f:eb:94:72:08:c3:28:ff:a6:
                    9a:e0:1e:26:97:9d:37:a9:26:40:fc:80:e2:95:fd:
                    96:dd:76:4c:af:d5:f9:1f:3c:4f:61:75:f0:4a:4f:
                    5d:8c:b8:da:49:ab:ec:26:5e:a1:dd:eb:eb:47:3b:
                    05:91:98:1c:d1:3e:7e:39:ff:d9:cd:ad:93:d9:99:
                    ea:ab:dc:8d:f3:7f:23:43:88:4d:db:69:ac:1c:4f:
                    cc:d2:94:88:2b:80:96:b6:c3:3b:bb:5b:44:e3:65:
                    cc:2c:50:c5:27:58:61:4b:62:99:91:07:28:7f:f5:
                    93:67:6a:bd:7c:3f:07:6e:00:a6:a5:81:28:fd:8a:
                    59:c9:75:ed:49:a8:e3:35:e0:ac:34:8d:76:81:62:
                    e1:f1:d8:51:0f:f4:6d:8b:d6:ca:5a:1f:79:40:b5:
                    bb:46:59:70:e9:3d:1f:a6:51:7a:34:3d:f1:ab:67:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:E2:65:B9:25:A5:46:BB:15:8A:B7:6F:87:22:BD:73:9C:5A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:c5:23:3b:bd:bb:8d:33:d2:f0:0f:23:5f:93:3d:91:1c:
         2a:57:c8:ce:04:00:92:25:77:e9:cf:9c:e6:7b:6d:56:2f:0c:
         1e:bb:f0:da:cb:19:6a:4d:6d:9d:79:75:ce:80:b9:11:53:2b:
         eb:7b:f9:fa:d6:49:6a:ca:9c:38:18:e1:eb:cc:64:06:8b:a0:
         c6:4f:e4:00:3b:c3:c7:80:40:b8:e4:be:d8:cc:a6:15:11:5c:
         1c:a0:03:92:4f:be:58:80:4a:6a:ba:b0:55:41:34:a6:50:da:
         8a:3c:a7:5e:03:52:50:32:fe:b6:6b:a3:a4:88:0c:01:cc:0c:
         b1:4c:45:33:90:c8:ad:f4:90:cb:5a:99:c1:e9:0d:5d:31:00:
         75:c2:b0:16:4f:f0:59:b8:45:84:dc:bc:cd:47:79:74:f5:4b:
         a1:4b:7a:37:03:f0:6e:09:54:c0:9c:20:54:cd:14:47:a4:f8:
         ef:e6:77:c9:ce:f8:25:87:04:65:5b:41:3f:b6:f9:8c:28:e3:
         5b:17:b7:06:eb:ec:c9:b6:39:8b:d7:66:66:45:36:39:3e:a1:
         e2:a4:f0:7f:f5:2f:ab:f3:4d:b6:19:5e:fe:ca:80:ad:1f:70:
         34:d6:bb:a8:d9:c2:85:fc:62:58:2b:d1:b7:60:2c:01:23:f2:
         56:2f:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:34:02 2026 by rpki-client