Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa
File:                     968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json)
Hash identifier:          IB36fbtPTUkZQvYQjhxh/aLvrmU+lofbdVaBDGLQHxI=
Subject key identifier:   47:96:9C:96:B0:BB:6A:C3:9D:5C:81:69:24:48:E0:4D:CC:A1:3B:01
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E2D9F25BD0B5F29B0A37C16D0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     3223
IP address blocks:        104.37.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:25:bd:0b:5f:29:b0:a3:7c:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=1845347a-51c6-47d9-ba24-3a1301a68400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:e8:4d:45:e6:4b:f8:88:22:b9:6c:35:77:
                    c6:d6:90:14:e2:ee:a0:f4:31:27:fd:e6:4b:3d:79:
                    d0:9b:f1:f4:3d:f7:34:62:ff:da:ab:1e:52:ad:39:
                    88:3c:11:73:54:c2:ba:90:4e:f3:58:48:2f:8b:89:
                    8e:de:24:a7:1f:7e:d4:98:26:73:27:8f:7b:c5:3c:
                    85:c8:3a:ee:5c:10:a9:07:b7:39:e6:11:75:79:6a:
                    c9:ec:6e:16:cb:61:2a:04:fd:b9:a7:5e:86:32:2c:
                    3e:71:b7:2e:d9:f1:aa:fe:ee:ad:64:69:78:73:65:
                    49:8e:5f:87:77:43:89:03:45:a1:b4:09:4b:8a:2c:
                    45:35:0b:0b:29:a0:ff:1a:a1:b2:87:72:c6:e3:36:
                    ba:ce:f3:62:05:08:b3:8b:31:4f:15:bb:06:d7:60:
                    2b:d1:68:a4:51:ac:b5:d1:d2:5f:85:44:31:9f:32:
                    42:87:5f:b0:e2:09:2a:81:4b:e5:3a:71:cf:4c:0d:
                    ed:22:a7:70:ce:64:22:de:70:46:82:73:a5:e6:52:
                    46:2c:87:3b:54:ad:cd:ff:df:d5:91:53:21:62:76:
                    1d:43:a5:77:52:a9:cb:15:c6:3e:c0:2d:6e:4d:5f:
                    15:b1:44:59:10:2e:79:aa:96:ec:e3:14:0b:52:95:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:9C:96:B0:BB:6A:C3:9D:5C:81:69:24:48:E0:4D:CC:A1:3B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:41:3a:a9:11:ca:47:13:ae:67:85:b7:4f:45:3f:cd:2c:
         0a:4e:59:4c:a7:3d:5c:cd:4a:f3:83:9f:b8:2a:1b:6d:75:19:
         be:42:3b:bf:21:d8:35:ff:38:80:20:81:86:43:04:59:b8:f9:
         59:5e:37:f8:32:20:37:f1:ee:19:36:93:98:36:e6:ca:fa:a0:
         0f:b0:3b:cf:20:fe:a6:ca:3d:6d:73:2f:89:1f:ab:70:11:1b:
         50:77:3a:51:ee:aa:c0:d9:c6:44:bb:4c:71:46:3c:65:df:99:
         cd:62:e3:52:1d:83:4e:c1:d3:e3:8e:74:77:31:42:ef:4e:25:
         4f:31:20:ce:2a:b9:e7:28:a0:11:5f:9e:24:dc:f7:01:58:36:
         6f:74:4a:41:64:db:de:f0:c1:97:64:82:0c:b1:05:44:fe:06:
         7c:a8:63:8d:78:8d:1b:57:bb:90:a7:4f:93:9d:8f:b3:6c:1c:
         07:2c:87:9c:85:6e:d3:12:4b:d1:56:9f:55:db:11:f7:67:6a:
         27:83:a9:ad:2f:98:3f:b4:4a:b5:64:82:7b:c3:ef:79:fe:b9:
         e6:75:c6:71:11:2b:8e:db:04:02:4a:b9:59:84:a1:64:5a:97:
         de:f2:0e:17:f1:99:a3:25:98:1f:e2:07:0a:27:00:ad:13:e5:
         fe:63:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:33:43 2026 by rpki-client