Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa
File:                     b0b79048-232c-3882-9b3a-b655dc0ac343.roa (raw, json)
Hash identifier:          G/115LUwsAy6ySONUr2C8xoD7y1sNfgNN9eECAglxRo=
Subject key identifier:   0F:F6:37:36:3D:E8:F0:4F:71:7D:4B:67:21:6D:5F:8B:AA:FB:5D:09
Certificate issuer:       /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Certificate serial:       010D0C9F4328584DD1F5B62289C0F189577BD2B4
Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     400260
IP address blocks:        104.232.0.0/24 maxlen: 24
                          192.231.84.0/23 maxlen: 24
                          2602:fcac::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b6:22:89:c0:f1:89:57:7b:d2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=9bb86c18-0300-4381-b209-40db83f3f793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:9b:71:e1:64:52:2b:93:a6:13:d4:c2:a0:
                    89:80:32:6c:41:9b:ab:26:d3:b4:0c:6a:57:01:8f:
                    b1:63:ab:f9:87:1a:4f:24:cb:a7:1d:fb:e0:ea:7f:
                    b6:f6:6f:f8:72:b4:6b:21:d4:fb:19:3f:09:bc:73:
                    d9:e7:71:fc:84:f3:04:d9:10:47:dd:f0:ff:53:9f:
                    64:4f:53:39:f3:24:c0:1e:fb:a5:9e:51:0a:30:82:
                    ac:a3:cd:63:00:7d:7b:f1:72:49:35:af:ee:d0:b7:
                    5b:5f:25:59:54:4b:87:c9:27:19:0d:20:a7:c2:24:
                    4e:55:7f:8e:0f:21:52:28:6b:4e:39:9a:70:f4:bf:
                    12:bc:4b:62:1c:3d:96:ac:09:6c:55:c7:62:e5:aa:
                    05:85:ff:f4:7c:40:ad:fd:f5:77:96:47:40:4a:d7:
                    49:08:c9:bc:ea:1d:31:08:6c:51:a8:a0:d4:26:86:
                    de:1c:de:a6:66:80:9a:17:20:b1:77:cd:30:f0:72:
                    e6:1a:56:ce:ae:b2:ea:f3:69:9f:a4:11:88:0b:0d:
                    b0:d6:6b:b3:91:d3:c1:22:a2:40:c4:c5:63:46:b6:
                    c2:52:90:ee:10:33:26:d2:ab:96:cd:e3:90:4a:cd:
                    4b:ae:7f:d0:d8:c8:25:8a:a8:11:cf:9c:34:55:5c:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F6:37:36:3D:E8:F0:4F:71:7D:4B:67:21:6D:5F:8B:AA:FB:5D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/b0b79048-232c-3882-9b3a-b655dc0ac343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl

            X509v3 Authority Key Identifier:
                keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.0.0/24
                  192.231.84.0/23
                IPv6:
                  2602:fcac::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ea:c7:d0:79:b3:04:b9:3b:cc:1a:32:bf:89:3e:61:90:f5:
         1c:90:7d:56:f2:05:9f:ec:7f:c9:41:62:9b:7f:68:c1:10:9b:
         fd:b5:6d:22:65:c1:f5:86:92:29:c1:29:bb:9e:cf:1d:bc:56:
         40:f6:1b:e8:90:bd:df:48:df:68:9a:7a:48:49:9c:6b:f9:95:
         34:14:f8:33:fa:1e:c9:d1:08:07:e6:e1:fd:e0:91:01:52:b7:
         c5:77:9a:b5:0f:86:92:c8:fe:d6:7b:a2:f3:ab:6c:42:22:a1:
         f8:43:57:ce:f4:e7:af:c1:c6:4b:04:cd:3d:0e:3b:86:05:1e:
         ac:0b:ef:27:36:2c:eb:ea:f9:25:aa:99:66:02:cc:bc:dc:a9:
         fb:b9:44:5b:7a:bd:bf:fc:08:11:80:f8:a8:0a:67:a6:e6:1d:
         be:6e:28:c5:fb:be:31:6f:19:c8:f6:e8:3b:2d:35:e9:da:b5:
         ce:5e:39:6e:47:18:93:21:ba:bd:82:93:fa:cf:e0:91:70:aa:
         58:d6:46:9e:da:5f:d0:c8:10:3d:e5:25:1a:9a:98:f1:e7:f1:
         f4:66:3e:89:4b:0f:3a:cd:6d:4d:18:76:f6:14:9d:c1:cb:5e:
         1d:1e:99:58:42:54:99:18:dc:7e:3a:ea:3e:69:a7:2d:06:a0:
         21:b1:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 02:38:13 2026 by rpki-client