Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
File:                     b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa (raw, json)
Hash identifier:          1c4WdfoW3LpLSL0hMYslG0RJKdsYImopwCHrhVPDmIo=
Subject key identifier:   72:30:1E:9E:39:12:16:54:9F:41:CB:B2:CF:3B:2D:AB:39:3D:E2:D4
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F4328584EC371C88527613C0D366EA000
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     22857
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c8:85:27:61:3c:0d:36:6e:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=29d3765d-7d85-43f8-96bf-c972d039af86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:0c:9f:69:7b:35:ce:96:70:9a:a7:7d:fc:
                    5e:fe:ea:89:99:9b:30:af:ff:60:31:27:e7:9d:39:
                    70:61:7f:93:b6:de:b0:bd:8f:8b:a6:7e:51:9a:64:
                    7a:b0:69:8e:b2:f1:90:7a:10:b7:4b:7c:2d:0c:a6:
                    96:2f:b8:8b:b1:89:ec:0f:42:a9:ee:07:95:13:60:
                    41:fd:35:f0:c1:bd:c9:f4:5d:99:28:64:6c:77:bd:
                    b0:8a:f2:fe:73:55:86:98:02:c8:ef:98:df:e3:f1:
                    fa:8c:d0:6c:1e:17:c6:ae:14:f9:73:b4:21:56:59:
                    ee:1a:bf:97:0b:2b:e6:76:57:be:48:da:8d:14:b2:
                    cc:5d:ed:6b:6d:96:b7:a5:af:42:dc:a9:41:2c:d0:
                    0f:04:fa:76:ac:72:51:2e:01:50:0c:19:98:49:25:
                    36:84:7c:59:b4:43:39:49:5d:13:0f:d8:83:ad:f1:
                    d6:90:16:d9:62:6a:ad:5f:0a:f3:ef:57:2f:44:7b:
                    23:f0:bb:9d:29:5d:d5:7b:43:32:5b:f0:8b:96:dd:
                    5d:d6:a4:68:d2:6a:14:33:8f:01:6e:c5:d4:5c:83:
                    2a:4c:d1:62:d7:d3:69:14:30:eb:e7:f8:3f:dc:8f:
                    2c:c2:da:46:f4:33:1e:f6:49:af:61:b0:c3:fd:f4:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:1E:9E:39:12:16:54:9F:41:CB:B2:CF:3B:2D:AB:39:3D:E2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:9b:28:6f:c8:a3:12:19:32:95:ac:dd:6d:6c:5a:26:08:
         da:9e:6a:9c:13:91:d2:d2:fe:90:69:14:da:0f:0a:76:52:23:
         9f:cb:10:f1:46:25:4b:d4:19:96:35:cc:10:b2:04:4a:e1:de:
         d6:c1:18:74:bc:e6:10:f4:b4:94:f6:f0:29:67:e6:01:57:93:
         f1:a9:9c:e3:03:11:4e:f4:50:d9:52:e1:4f:92:1b:52:56:17:
         e9:ae:f3:ef:83:95:f2:cd:be:c2:cb:63:91:5f:03:be:6f:46:
         5c:3b:5e:41:3d:af:69:70:c8:72:0d:13:e5:83:76:32:80:c8:
         d0:6f:9b:b7:d8:15:44:89:b5:bb:be:e5:04:fa:11:d1:25:db:
         6d:15:34:33:b7:61:db:91:b5:0a:75:86:17:fa:f5:f6:3b:78:
         39:01:aa:d8:f5:fb:46:d2:e9:f3:bc:73:c7:31:c3:69:43:a2:
         ee:ee:ec:15:2e:68:bf:cb:8b:be:3f:03:17:d4:e0:a6:e4:6a:
         15:0f:4b:11:e8:50:46:df:19:e8:06:ac:c9:cc:2a:35:56:0d:
         f5:18:9c:a9:e5:d8:77:e4:5d:f8:2e:84:d3:81:d8:f3:39:6b:
         f8:c0:3a:ec:bc:76:6e:2e:23:f2:e9:fa:75:25:21:d5:92:aa:
         e6:77:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:35 2026 by rpki-client