Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6a0d8377-2efc-3210-a2a3-9d7356c4d891.roa
File:                     6a0d8377-2efc-3210-a2a3-9d7356c4d891.roa (raw, json)
Hash identifier:          lyiyEhtCG6SPtcYMnr3PLpZgzc6lVXzwo+LqFYE4WmA=
Subject key identifier:   2C:90:52:B0:E1:35:E7:BD:2F:70:05:99:D3:F6:C7:4A:72:5F:E7:4B
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584E39F5B747BDAFB555B3F07DA0
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6a0d8377-2efc-3210-a2a3-9d7356c4d891.roa
Signing time:             Fri 19 Jun 2026 19:04:41 +0000
ROA not before:           Fri 19 Jun 2026 19:04:41 +0000
ROA not after:            Thu 17 Sep 2026 19:04:41 +0000
asID:                     393406
IP address blocks:        104.224.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:f5:b7:47:bd:af:b5:55:b3:f0:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Jun 19 19:04:41 2026 GMT
            Not After : Sep 17 19:04:41 2026 GMT
        Subject: CN=0fb8a2e2-fe03-4da5-85f4-4cd33f7ba21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:bc:07:33:4c:d6:31:6b:5e:89:10:c8:e9:
                    65:10:69:be:05:05:d6:3c:ca:9c:b4:0d:95:2b:65:
                    0a:c8:2a:63:0d:be:0b:08:fc:3e:d0:e1:e2:28:bb:
                    8e:6f:de:0e:ae:ff:6a:33:25:ca:1f:1a:af:63:53:
                    89:0f:6d:77:83:4b:32:0d:a9:fa:c1:71:ee:1d:19:
                    e4:a9:de:ca:86:b7:a8:f7:02:f6:38:fb:fd:e1:63:
                    97:09:42:ae:b0:9a:71:00:41:56:bc:db:a5:5c:c5:
                    de:12:f3:e7:25:93:ec:9a:db:88:07:91:8d:5d:cb:
                    1a:0f:04:28:61:c6:f0:97:d8:67:22:aa:86:51:ab:
                    79:c7:f0:63:eb:3e:dd:3a:5a:97:48:84:b3:bb:ba:
                    96:cc:9d:25:17:a4:62:70:88:b1:df:f3:9a:a6:61:
                    b4:4c:76:fc:a1:72:e8:78:1d:f0:33:a3:87:87:06:
                    68:14:32:60:ad:b6:0c:2e:9e:43:9c:1e:a7:0c:03:
                    56:e8:56:58:4b:69:88:57:a6:2c:33:0c:db:7d:ee:
                    e4:3d:74:8a:15:03:36:a0:11:53:9e:0b:7a:e8:29:
                    7b:b4:e2:d6:c7:65:f8:67:c4:42:89:9c:cd:fa:e1:
                    b9:1c:e7:c2:46:60:f8:d5:0c:18:25:9f:55:8e:dd:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:52:B0:E1:35:E7:BD:2F:70:05:99:D3:F6:C7:4A:72:5F:E7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6a0d8377-2efc-3210-a2a3-9d7356c4d891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:06:2b:6a:25:db:d9:34:3d:09:56:bf:c7:63:a9:2a:52:
         d5:aa:ad:5e:f4:b5:d7:49:29:b4:1a:30:3c:f4:46:94:6c:27:
         cd:45:30:1f:38:b8:02:b6:32:da:22:31:cb:05:87:cf:67:d5:
         08:f1:8a:bc:a3:4d:e7:6e:38:80:b0:11:26:72:4d:04:2d:45:
         fc:f0:22:c8:29:50:23:a8:53:b3:b2:02:ec:13:67:4a:22:a6:
         1b:cf:08:96:8a:ee:79:db:e1:7b:c1:95:d4:b8:ee:ae:1c:38:
         8c:03:9f:91:f9:a8:98:5c:e5:dd:44:9f:14:db:94:a0:72:a1:
         92:0c:fb:26:ef:55:ad:1e:1b:85:19:4f:a6:b2:43:16:09:e9:
         ab:99:e7:85:63:6e:20:69:c7:ee:06:41:8c:f4:f9:cd:2d:1b:
         ba:59:b1:1b:31:81:f6:2f:61:ca:6d:8a:53:d6:e5:48:d1:3e:
         db:09:f4:6a:7e:59:74:27:2e:63:ad:b9:9b:a3:cf:cf:97:f6:
         f4:da:58:7b:ac:94:3a:52:23:ab:ba:c3:e6:59:6b:20:92:86:
         10:9a:cf:45:7a:f8:9a:fa:e7:7d:5b:89:aa:bc:c5:21:49:ce:
         fd:7b:cc:e2:dc:47:3e:bb:09:13:16:da:79:d1:f4:e7:34:e1:
         1e:3b:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 22:41:37 2026 by rpki-client