Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
File:                     68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa (raw, json)
Hash identifier:          zAGUlio3L7F/0qLFFpiRpVpjCx7voeSMz4rEymveEHE=
Subject key identifier:   C3:AE:49:51:15:A4:35:56:17:14:EF:9F:89:B0:47:B1:3C:0C:D6:39
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584E3E5F4918D82519F53479AC00
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     399883
IP address blocks:        104.247.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:49:18:d8:25:19:f5:34:79:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=90909920-3398-4822-82fb-325e42fc9689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:08:e8:63:2e:b3:f2:d4:31:28:81:be:20:
                    ed:2c:e0:ab:dc:a1:39:86:19:c5:30:60:4d:c5:93:
                    54:96:bd:17:c9:df:da:94:39:7b:7f:a9:86:7e:2c:
                    85:90:64:28:64:46:b6:2f:9c:c4:ab:96:6d:67:b7:
                    ea:03:91:1f:13:3e:1f:87:cd:a1:ae:52:b2:eb:6b:
                    c2:ff:79:07:5b:3c:68:d4:d5:5d:e5:86:08:a0:41:
                    c4:e9:b3:bf:04:56:9a:2c:d6:67:73:2f:f7:b6:07:
                    50:a6:85:27:92:69:26:93:8d:ee:c2:9d:ab:32:b8:
                    cb:2e:55:98:6a:ab:9d:67:44:11:db:ac:44:af:5d:
                    eb:a9:a5:5f:5f:4b:f3:7f:fa:87:6d:14:cb:fb:51:
                    67:9c:47:70:48:6e:47:e6:30:6b:bb:5a:5e:5f:35:
                    35:f0:14:6c:38:5e:66:26:b5:1a:38:19:25:ac:1a:
                    ca:64:d5:f6:0a:f9:96:10:19:0e:5d:44:a5:e9:c0:
                    14:46:71:1b:f2:49:bb:a5:42:19:7f:ee:72:d8:de:
                    4b:e1:9b:4e:f5:20:a7:7b:e2:79:6a:5b:c4:2b:58:
                    56:66:64:cc:0b:0e:5d:37:98:b2:7a:39:0d:eb:ab:
                    06:ed:e7:1d:89:00:e5:fb:81:2e:a8:15:e4:9d:5c:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:49:51:15:A4:35:56:17:14:EF:9F:89:B0:47:B1:3C:0C:D6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:f2:f8:6c:cf:28:ac:3b:b4:35:fc:7b:1b:73:b7:50:56:
         1f:53:c9:d7:db:1c:8a:55:66:e2:b4:71:e0:47:89:2b:21:47:
         76:67:3a:1c:c4:fb:f4:f6:1e:6c:91:a1:f9:99:a3:9f:d6:32:
         56:dc:b4:03:f9:1b:f6:71:9a:51:53:6b:82:2a:19:11:45:6b:
         59:9a:d6:ae:9c:2b:f0:de:44:2a:9e:14:e4:6b:2e:57:03:9a:
         74:48:9b:d3:70:cd:74:49:24:78:0e:a4:0e:12:6f:e0:ce:4a:
         4a:b1:59:94:45:60:67:c4:71:fa:93:6a:66:b2:ca:5e:b3:d0:
         b5:79:86:8d:90:9d:f0:89:d5:19:52:55:db:7e:6f:ee:e1:fa:
         69:db:83:92:49:1f:88:eb:c7:c9:f8:2a:7b:10:a7:05:ea:b5:
         a0:f6:a2:6a:29:12:5f:c0:1a:c7:13:60:0d:25:d1:a0:31:88:
         84:f3:e3:9d:7d:24:ff:7b:66:ea:b6:b0:6b:59:dd:9b:5c:1d:
         97:4c:88:c7:d8:fc:35:39:5e:80:57:49:7b:71:5f:fb:3e:a0:
         2d:1b:73:f4:6a:cc:5e:3f:42:fa:59:65:8e:e2:ac:20:5c:c0:
         88:75:0d:2b:bf:db:d6:ab:6d:7d:bb:b3:e1:44:02:30:79:fa:
         f4:26:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:04:19 2026 by rpki-client