Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/e379ba6f-ba26-3670-8d8d-2df14aa5d96d.roa
File:                     e379ba6f-ba26-3670-8d8d-2df14aa5d96d.roa (raw, json)
Hash identifier:          U845uxEutGwfcGW1csKsyAx8f2/u6d0MP4PVJjT2iiE=
Subject key identifier:   61:C3:87:7F:EB:54:DB:C6:2A:0C:9E:D9:42:66:F6:DE:B6:59:AC:1A
Certificate issuer:       /CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f
Certificate serial:       010D0C9F4328584EBAA21E3CD632FFD453A92D80
Authority key identifier: DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/e379ba6f-ba26-3670-8d8d-2df14aa5d96d.roa
Signing time:             Tue 04 Aug 2026 21:15:31 +0000
ROA not before:           Tue 04 Aug 2026 21:15:31 +0000
ROA not after:            Mon 02 Nov 2026 22:15:31 +0000
asID:                     395846
IP address blocks:        104.129.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:a2:1e:3c:d6:32:ff:d4:53:a9:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f
        Validity
            Not Before: Aug  4 21:15:31 2026 GMT
            Not After : Nov  2 22:15:31 2026 GMT
        Subject: CN=ff4ee31e-101d-435c-a62e-cb20219d291b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:e4:f8:fd:5d:a6:71:53:e3:3f:ec:52:d2:
                    9a:55:34:75:80:ff:a2:07:59:ef:27:d2:2e:e6:28:
                    30:06:16:9b:5c:dc:4b:11:fb:a2:c4:09:ae:cd:5b:
                    06:83:a2:f5:b3:77:78:dc:ca:42:ad:d7:4a:1d:e6:
                    3d:33:67:db:11:7d:4d:69:60:9e:14:0a:fc:29:67:
                    85:e1:ae:68:df:b2:a8:46:ba:36:45:df:1e:c5:98:
                    0e:0e:fd:ba:eb:7f:b1:a3:15:68:3c:4c:64:9d:0a:
                    02:f4:91:6b:22:43:a6:e4:97:87:41:0e:0d:9e:50:
                    35:38:d1:2a:a5:e3:e5:66:07:08:38:c2:4d:b2:55:
                    2c:ca:9c:5c:83:2d:db:ec:ee:e9:43:18:ab:ea:23:
                    0c:13:5f:1e:68:77:10:23:a1:18:38:a3:04:57:2e:
                    f4:bd:65:f4:da:0e:27:05:33:de:59:27:5e:99:47:
                    13:c5:3a:fd:ab:4b:50:e7:87:99:4c:33:f5:eb:dc:
                    4f:d7:0a:a4:71:e7:d3:e4:e3:e6:c1:a1:e2:3e:13:
                    ab:22:ba:8e:e2:04:bb:85:59:71:3a:6d:3a:b9:88:
                    37:58:31:66:af:78:99:2f:6d:ac:f5:95:a3:cd:d0:
                    a2:9a:87:b9:f8:88:7e:6c:4d:38:f3:98:48:da:fa:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C3:87:7F:EB:54:DB:C6:2A:0C:9E:D9:42:66:F6:DE:B6:59:AC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/e379ba6f-ba26-3670-8d8d-2df14aa5d96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl

            X509v3 Authority Key Identifier:
                keyid:DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:1e:72:39:5e:7d:2a:76:8f:76:b0:8e:03:bb:25:a6:81:
         77:d6:dc:98:bb:09:b0:05:f8:f1:f0:e0:59:0c:47:4f:da:bc:
         d3:a6:b8:8e:a3:59:f4:15:44:82:03:24:81:73:96:3f:c9:c4:
         04:7d:52:a3:b7:c0:b9:c9:3b:55:34:43:fc:13:a7:bd:bf:2c:
         91:ec:0c:f0:67:9a:4b:61:ef:8a:0e:2c:aa:92:e6:fa:05:74:
         80:47:70:da:9b:55:13:cd:de:a7:d0:f2:f4:05:ab:21:1e:3b:
         70:2e:66:13:3d:a1:88:fd:df:c6:23:5e:16:e8:45:a9:21:a3:
         e6:12:5d:fe:09:b0:36:5e:44:f0:b7:ec:98:73:a7:b7:c4:e0:
         76:47:1f:de:8a:77:b2:5d:ee:a2:f8:e8:b5:f1:37:b5:fc:1c:
         40:65:ea:bc:d2:7d:25:bc:16:54:6b:ef:0e:7f:f1:86:7c:3e:
         64:73:16:d3:3e:74:cd:cb:ce:ca:67:b8:a0:d5:06:3a:57:13:
         9b:72:91:f1:16:77:83:58:b4:3a:62:ab:71:32:4a:05:23:be:
         6d:e8:72:8a:47:9f:e1:cc:f1:d0:75:89:3e:dd:95:f9:cb:92:
         02:88:6c:73:c6:a8:48:e8:87:77:c9:30:da:41:b5:4a:9f:0d:
         0e:fa:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 12:35:00 2026 by rpki-client