Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa
File:                     635e6db7-1362-30a2-8977-7a31641bbb6c.roa (raw, json)
Hash identifier:          mwuZx2u3qdWsfAwhdSx/xBY+5APiIeZCJG5ypyjYe5s=
Subject key identifier:   27:59:78:B2:B0:71:9C:63:C9:A2:A3:64:CA:E0:BB:5C:8B:C9:22:D4
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584D20AF55C68A91119855FFBE00
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     931
IP address blocks:        104.224.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:55:c6:8a:91:11:98:55:ff:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=65151fca-763b-4511-84fc-ba9e69f83c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:fd:e5:b6:74:38:00:39:52:3a:19:5e:2c:
                    30:fc:be:8a:9f:63:97:75:90:c4:2a:4b:51:f6:66:
                    bb:23:6c:2d:90:28:bc:37:d6:af:77:b1:62:ed:cb:
                    ee:c2:5e:47:3e:d3:af:1e:62:1c:dd:63:10:f7:38:
                    cb:7f:61:b2:ff:06:72:cc:34:15:19:71:2e:47:f4:
                    26:43:9d:8e:8b:2e:54:1d:92:4e:fd:ca:eb:30:f6:
                    79:48:19:e3:89:54:5c:61:e6:33:b9:87:34:41:e8:
                    39:18:3b:53:5f:fe:17:1d:68:ea:9e:0d:e7:1c:4d:
                    64:4a:6b:a2:52:a2:6d:d0:4b:c7:4f:96:d4:41:35:
                    67:4b:3f:ba:87:2c:96:e3:05:a2:b8:c5:07:0d:ea:
                    d8:72:ae:fa:f9:d0:9c:1e:f7:84:32:0c:f0:04:cf:
                    f6:77:82:bd:c0:ca:15:d7:b8:cb:21:62:24:5d:39:
                    99:60:6a:3d:ec:95:f0:20:10:4c:22:62:3d:68:bc:
                    ca:78:bf:30:af:15:6e:8d:b1:a0:2c:ea:e4:f0:a4:
                    5d:b6:ca:48:e4:b4:dc:66:1d:ea:8c:1a:df:94:ac:
                    ca:af:4d:d9:f4:a1:91:b9:84:c3:c4:37:6f:62:33:
                    b2:37:a4:28:ee:4f:af:de:41:72:87:05:e1:db:72:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:78:B2:B0:71:9C:63:C9:A2:A3:64:CA:E0:BB:5C:8B:C9:22:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:df:05:c2:8f:11:38:54:7d:7c:c6:fa:20:b6:09:f1:6a:
         bf:e7:7e:5f:92:88:8b:48:51:7a:fb:05:9d:44:17:62:7c:5a:
         f3:6a:19:1b:27:36:55:f7:2a:22:99:e2:63:ab:92:ac:6d:df:
         ab:c4:16:89:8f:6d:53:d9:27:1e:a0:45:53:b6:a5:5f:bd:e9:
         91:9d:7f:e3:a2:5a:87:86:36:18:1b:e7:1d:08:3c:63:cb:3e:
         15:94:15:ef:a0:3a:25:2c:19:f0:54:57:6e:06:08:68:c1:99:
         d0:57:b4:83:ca:d1:53:4b:a2:a8:f5:7c:03:75:24:dc:cb:11:
         ca:71:07:b5:45:20:53:02:88:d7:43:42:1d:a6:c5:36:9b:83:
         60:05:93:30:74:89:82:99:4e:c9:2b:27:bb:e6:16:ff:9c:5b:
         ce:6b:7b:ce:8e:84:a8:ed:a5:0c:7c:5a:08:52:c4:2b:b4:ec:
         a0:5f:c2:ef:44:5b:c1:65:e5:fb:96:63:16:ac:8d:55:e9:a9:
         d8:4b:39:0d:e9:ec:c1:89:0a:cd:ec:7d:6e:03:c0:21:06:ee:
         8a:e6:76:54:a1:83:7c:9e:8a:4c:21:c7:87:f6:7a:c2:14:6c:
         e2:f7:9a:1d:f2:d0:f6:ce:a6:99:0e:07:e7:88:05:87:cf:0d:
         15:1f:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:00:50 2026 by rpki-client