Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d10067ef-0c32-3ef7-ac5d-2013e70fd44a.roa
File:                     d10067ef-0c32-3ef7-ac5d-2013e70fd44a.roa (raw, json)
Hash identifier:          MGTv1mjirrACk2MwzDwwB+lZiQKRdigyfOF6F5kT2Dk=
Subject key identifier:   D3:3A:1A:03:66:3A:9E:D1:CC:05:7B:0D:A7:B0:EF:46:01:BA:E7:FB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F9BCDE4C1B1B68279AD7918E0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d10067ef-0c32-3ef7-ac5d-2013e70fd44a.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     398478
IP address blocks:        104.233.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:e4:c1:b1:b6:82:79:ad:79:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=af06e626-4e24-442b-874d-644c1a80af59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:42:f7:bb:38:f7:e0:2c:3e:11:68:d9:ff:
                    aa:13:ab:f6:64:74:de:bf:b3:6a:99:82:cd:6a:da:
                    21:98:1c:7e:06:b9:3a:6c:3e:d4:c0:78:8c:db:ae:
                    24:46:5c:d2:0e:2e:8b:6d:aa:dd:a5:3e:fc:31:55:
                    92:b9:08:d6:ba:e2:8b:8a:5e:db:3e:e0:40:38:7c:
                    ac:ed:cb:56:3c:d9:fd:af:cc:fc:d6:94:00:01:dd:
                    a3:09:14:75:a5:3f:08:8e:31:99:39:84:b1:d3:9f:
                    dd:b8:7e:23:69:bf:7c:7f:89:ce:21:a9:56:1f:fa:
                    8e:3a:a1:8d:ed:cd:d6:fb:30:ce:ac:0c:a7:e0:19:
                    ed:72:60:29:47:db:ff:04:3f:25:4c:34:b8:19:07:
                    34:24:ea:dd:92:d1:9c:6b:4d:e9:8a:0a:fb:25:49:
                    23:fa:ee:95:df:22:c5:fc:69:8b:c9:c3:44:80:c0:
                    cb:3b:ae:1e:21:f2:d3:e7:03:e4:77:c2:0a:9f:cb:
                    ea:dc:27:37:38:56:d7:c6:00:64:df:4c:e4:cf:ab:
                    ee:d8:4e:b9:da:fe:a2:0a:a1:28:76:92:42:d2:ad:
                    43:b2:44:25:0c:1d:0a:ce:ec:59:bf:99:5e:4d:8b:
                    eb:f3:02:63:f4:7b:63:87:f1:a9:50:9a:78:5a:56:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:1A:03:66:3A:9E:D1:CC:05:7B:0D:A7:B0:EF:46:01:BA:E7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d10067ef-0c32-3ef7-ac5d-2013e70fd44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:c8:cd:7c:82:ec:c6:6e:0f:d5:7b:2d:cb:4a:a0:77:43:
         a0:bc:2d:29:ee:f2:83:c5:6c:dc:e8:a2:11:d4:14:75:6b:e9:
         79:63:1b:7c:1a:2d:e3:7c:32:66:27:0b:3f:a9:d8:6c:6f:da:
         18:b0:ce:e4:97:5f:47:35:9e:ed:7f:52:ea:75:6d:bf:25:f4:
         c2:63:a1:9a:30:32:d8:30:af:f1:ed:53:0a:48:1f:f7:9b:43:
         f1:b9:41:95:87:1f:0e:6c:2e:f4:db:00:5a:3b:d2:63:57:23:
         ca:80:3f:23:13:d2:82:73:66:59:b7:ff:74:07:e2:b9:2e:d7:
         d0:5d:94:3c:25:67:4c:33:78:96:c0:71:57:9a:a9:89:68:f5:
         04:0b:62:d1:46:c7:05:43:5c:9b:9b:8c:e4:70:d3:56:11:0c:
         da:bc:74:85:10:e8:33:66:b5:39:66:35:10:0e:d3:c5:29:f5:
         9b:22:df:bb:4a:68:f1:65:b0:f7:06:ce:58:cb:4d:fa:68:4c:
         5f:a4:67:a9:c1:37:e7:38:18:c3:f6:92:62:50:39:50:ba:be:
         91:3a:71:e5:46:e4:dc:e3:92:32:90:11:1e:08:33:7b:e7:b3:
         21:cb:6a:97:33:5c:e0:fd:c3:e6:ad:b8:f6:65:36:7e:2b:16:
         60:cc:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:12:37 2026 by rpki-client