Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/c072a411-3fb4-384b-80c2-1317c4f276b8.roa
File:                     c072a411-3fb4-384b-80c2-1317c4f276b8.roa (raw, json)
Hash identifier:          W1XwwypdRWUBSk+SmpexlOx9khJ03iZd+cfR/pxGdDs=
Subject key identifier:   0E:53:3D:1E:C5:01:7D:A8:4B:AF:00:25:4B:A2:C4:80:AC:D9:F1:3A
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584E4AEF5303301C86489526CB00
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/c072a411-3fb4-384b-80c2-1317c4f276b8.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     399883
IP address blocks:        104.247.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:53:03:30:1c:86:48:95:26:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=0fea0e32-db41-4ff5-a520-ff5668e24dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:42:69:ec:35:c7:3d:83:be:df:ba:24:bc:
                    58:7c:80:04:ce:9a:d5:f7:bb:28:ed:f5:ea:9b:13:
                    d7:9f:3c:ba:24:8d:0b:e9:5c:5a:5a:04:ba:d8:68:
                    ed:32:d4:2e:ae:fd:f8:9a:8e:66:67:c7:6b:95:10:
                    95:e0:11:e9:07:76:43:f2:76:17:c8:33:52:fc:6d:
                    90:40:b0:5f:48:23:1e:f6:27:0f:65:31:c6:cb:d2:
                    03:9f:e3:d4:65:3d:40:2c:44:a8:d7:e8:00:d4:4b:
                    5b:f5:ae:9b:89:51:71:7b:92:46:9d:63:06:af:5c:
                    b0:db:0a:02:35:eb:ca:b7:88:2a:cf:49:2c:a4:25:
                    60:87:67:fd:76:71:94:2d:a9:90:e2:66:71:da:92:
                    9a:05:8f:3f:f3:34:67:1b:39:f4:f6:9b:16:75:26:
                    98:63:ba:8c:0b:9d:2c:04:95:7d:2f:32:be:b6:f6:
                    e1:c7:ea:f3:c9:47:d5:50:e8:75:9a:bd:99:7e:f7:
                    74:9a:b7:46:a6:15:89:7b:91:31:c4:1c:b6:0c:82:
                    13:7d:75:37:78:52:5e:e3:ee:82:67:78:f1:09:70:
                    05:a8:39:ce:7c:49:e3:f4:0c:77:04:f8:8d:14:b2:
                    71:9f:a5:8b:1a:2d:b1:d1:54:2d:50:24:84:fa:b4:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:53:3D:1E:C5:01:7D:A8:4B:AF:00:25:4B:A2:C4:80:AC:D9:F1:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/c072a411-3fb4-384b-80c2-1317c4f276b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:21:46:80:0e:5d:3b:38:de:25:79:e5:6c:ca:cc:d4:a9:
         af:d3:9d:5d:ca:2a:70:22:fc:c2:d0:33:ff:12:b7:1c:2c:17:
         aa:71:3d:39:cc:17:35:83:94:b5:b0:59:c0:37:bd:ca:6d:f8:
         dc:a4:30:9f:9a:55:a8:d7:60:52:d2:4e:5c:bc:0a:dc:08:d0:
         4f:cd:b2:2b:26:64:e3:03:19:67:fc:61:45:f1:51:4e:bb:27:
         c0:6e:66:fc:45:a5:a6:96:15:44:35:c2:7b:4a:db:55:cc:91:
         c8:b9:00:51:05:f3:38:ac:28:67:1e:7d:f5:87:39:e7:52:89:
         ec:3d:38:c2:d1:42:80:6b:94:09:2e:aa:78:8e:ae:0a:49:8a:
         2f:66:9b:a1:ba:df:33:0c:d8:ac:78:99:bd:60:9e:24:77:a9:
         9c:f9:b5:0a:4f:52:3f:c2:5d:ea:8c:d5:de:30:f3:4c:a9:e5:
         60:63:7e:c0:02:84:ce:b6:ad:2f:44:fe:5f:e3:9a:f7:89:f9:
         2b:2c:c1:37:ec:c3:70:1b:07:32:a5:53:5f:59:53:a7:f8:a4:
         bc:57:b1:cb:9a:f6:6e:3b:26:17:19:26:14:77:dc:86:be:48:
         5d:2e:b7:18:d0:7c:34:e1:38:77:b9:d2:7b:61:d4:2f:3e:f1:
         d2:44:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:10 2026 by rpki-client