Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d26fbfe2-b86c-34c7-a22c-c51253c1cf09.roa
File:                     d26fbfe2-b86c-34c7-a22c-c51253c1cf09.roa (raw, json)
Hash identifier:          nKI9KIB9PaRg9VZJluBTqh/aldneH1W39jmEGiE6A3k=
Subject key identifier:   B1:3A:7F:68:A3:4E:52:D3:77:40:BE:E9:0A:50:2B:04:A2:A0:DC:43
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584D1B1A075B3FA1C365E92CE330
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d26fbfe2-b86c-34c7-a22c-c51253c1cf09.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     201106
IP address blocks:        104.218.232.0/22 maxlen: 32
                          172.83.152.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:07:5b:3f:a1:c3:65:e9:2c:e3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e10e0f29-753a-4547-a28e-44024dd7b896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:7d:3d:b7:87:39:b3:0d:18:7a:81:2a:ce:
                    bf:2a:ab:c1:04:15:b3:11:eb:16:e7:8f:fa:5f:b6:
                    e0:3f:1a:f8:f9:aa:62:1c:a1:cf:9d:27:7d:3a:19:
                    8a:09:55:85:19:85:39:4b:f0:05:3e:38:4d:51:8c:
                    1e:56:f6:07:d9:f8:a5:31:c4:ed:e5:52:83:b9:37:
                    31:aa:bf:82:7c:0b:a6:f8:c2:7f:42:b9:3a:c7:a6:
                    0f:a7:11:54:c2:f9:ae:37:b0:47:15:6d:df:31:ef:
                    d2:99:a3:1b:28:a4:44:46:e3:d9:e4:f4:d1:e5:f4:
                    a7:46:1c:04:d6:5f:4d:c9:72:9a:21:cc:70:49:86:
                    e5:79:42:9f:de:24:4f:4e:a5:23:04:e8:c0:1a:88:
                    0d:e7:7b:6a:40:56:b0:be:17:c9:4a:5e:65:c6:41:
                    14:9d:6b:bf:f1:3c:ce:c9:a3:c6:ee:fc:e8:ac:9b:
                    2b:8f:67:43:8a:28:6b:af:1a:b8:2f:3e:5c:f1:5f:
                    39:f8:8b:e0:15:c3:d0:0f:b9:71:05:8c:df:dd:c0:
                    fc:05:62:ab:fa:2f:db:92:9d:3a:13:37:4e:e8:45:
                    f8:6d:0b:8f:2a:c9:1c:a5:d8:44:5f:81:e9:dd:4e:
                    67:4e:2d:c3:9b:c7:fa:df:60:55:88:2d:a2:c2:0b:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:7F:68:A3:4E:52:D3:77:40:BE:E9:0A:50:2B:04:A2:A0:DC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d26fbfe2-b86c-34c7-a22c-c51253c1cf09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.232.0/22
                  172.83.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:69:c9:1a:56:93:af:1f:94:53:d4:77:fd:76:5e:c9:59:
         7d:fb:38:7e:65:44:13:2c:ec:aa:2d:8d:6f:b0:f4:f7:c1:10:
         a8:c2:e7:ec:01:3d:2e:bf:7a:86:19:8b:89:f6:f3:0e:bc:3b:
         fd:16:fd:c8:32:7f:15:3e:1e:dc:51:7f:66:ed:75:12:9c:02:
         ad:1d:af:6e:a2:08:6b:1c:bf:76:ef:00:7b:ca:82:ee:86:2c:
         24:00:8e:6c:5f:62:f7:93:d4:e4:73:c7:fc:a2:81:d4:5b:7f:
         8d:4c:a2:59:84:c3:63:5c:84:be:62:38:96:49:53:4a:4a:53:
         4f:1a:6b:9b:10:22:8b:dd:4d:76:3e:cf:88:9f:d3:6c:40:11:
         a5:33:77:33:d7:d5:fd:68:5b:3d:33:42:1b:dd:75:51:9e:53:
         f6:99:93:25:99:ee:66:a4:05:fd:43:73:85:20:1f:9c:92:af:
         b0:a3:63:f7:e6:2f:d9:c2:91:15:10:ba:45:4a:93:3a:59:3d:
         bc:9f:54:45:93:3f:e1:df:a0:97:ac:db:69:ee:fa:45:90:10:
         ca:4f:ac:ac:04:97:5f:39:82:df:e3:7d:8c:31:e2:3c:69:5b:
         ec:8f:4e:f3:e0:97:96:36:f6:50:ee:eb:c8:be:b7:f8:6d:cb:
         e5:bb:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:55:48 2026 by rpki-client