Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
File:                     e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json)
Hash identifier:          um4JPlpIRTUrFzINVdD8klrnpIM1WXCIgaZIVuKM7p8=
Subject key identifier:   27:34:5D:4A:97:90:13:14:96:D8:36:07:FC:8A:20:18:ED:86:90:56
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584E3A2F3445C12A8094EA2F7080
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16789
IP address blocks:        104.156.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:34:45:c1:2a:80:94:ea:2f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=7ce36f41-fcc5-4790-8582-5b716980ddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:4c:84:7b:12:ab:dd:5c:ca:a6:6b:2e:90:
                    42:e9:43:32:a9:68:bf:30:92:95:34:e0:2f:ed:12:
                    45:44:13:22:ec:14:79:fd:a5:bf:73:cf:0f:25:65:
                    d9:0a:2d:d8:9e:d1:d6:b9:d4:d7:05:26:50:9d:d8:
                    e0:75:76:9a:61:bf:19:0b:25:1b:37:69:1f:41:ef:
                    90:0d:66:ba:8a:d9:79:ed:20:63:b0:45:db:8a:9f:
                    ad:54:fe:27:59:ba:a5:43:4c:20:3f:c1:79:7f:86:
                    c2:c2:5a:dd:a5:cd:72:2e:82:0e:e5:30:ab:4f:ac:
                    89:21:de:bd:64:a9:df:05:73:90:22:8e:62:82:57:
                    1c:3c:3d:99:44:82:e2:d8:55:8a:86:90:c6:88:4c:
                    a3:84:5e:ca:db:67:b7:41:97:ef:cf:8b:32:d2:94:
                    a2:9e:8f:9d:ba:0b:c0:33:09:70:28:9f:cb:a2:9f:
                    96:91:c7:e3:d4:0b:e7:d3:b3:18:86:b6:ad:90:c1:
                    e9:06:b5:fb:48:03:9c:bb:4a:77:66:6a:45:f3:78:
                    24:0b:b2:da:4c:51:7d:4c:10:d2:8c:b7:24:ac:8a:
                    c5:80:6f:d1:39:f8:a2:55:55:20:9e:fc:84:d8:92:
                    78:ce:9f:77:4e:4c:9a:60:d3:2e:6b:15:e9:88:9b:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:5D:4A:97:90:13:14:96:D8:36:07:FC:8A:20:18:ED:86:90:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:98:98:38:45:0a:9c:c8:a5:c8:17:74:12:41:2e:03:89:
         90:33:08:f9:6e:7e:e7:b3:0c:22:cb:52:89:81:7b:2d:aa:d5:
         22:df:ba:00:9e:c2:9d:b6:f7:f1:de:6a:f3:aa:d8:a6:8f:88:
         02:54:4c:9a:d2:43:3c:81:ca:f0:39:c1:2b:b9:46:5a:73:13:
         1b:17:79:f1:1c:4b:26:14:24:d6:81:77:8c:ae:23:a0:9f:c8:
         9b:ac:c6:65:c7:2b:14:5a:a7:03:d2:c4:0f:fd:9d:70:fd:36:
         a8:f2:23:14:b5:51:c6:85:65:96:71:89:e5:56:ca:75:70:a7:
         72:b2:5d:8d:98:85:09:ae:b1:ab:0a:af:1d:85:56:d8:22:5a:
         8f:3b:5e:38:f4:3e:28:ec:2c:52:fc:0a:6a:a2:20:cc:3c:17:
         f4:3c:21:2b:db:ee:df:5a:27:74:8c:5a:6d:f2:54:d1:f9:6d:
         92:49:28:5f:5a:b1:47:7e:ab:f5:a4:15:b1:c7:9d:90:2a:8b:
         46:cf:93:97:da:e6:66:ff:20:62:41:a1:4c:f6:45:78:33:d3:
         c8:75:5e:c7:67:c4:74:8f:ab:24:ab:e4:92:69:ba:09:01:91:
         9b:44:e3:3d:31:b7:a9:f7:88:08:ec:23:0f:91:de:73:62:72:
         04:9c:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:58 2026 by rpki-client