Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa
File:                     c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json)
Hash identifier:          hURh1sgJa/+BGKAupl5aCbgj9ymdODkvJaT5EsXyVSY=
Subject key identifier:   97:2A:F2:93:55:F5:3A:48:A6:E4:28:5A:CE:8F:1B:DB:90:9A:77:97
Certificate issuer:       /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial:       010D0C9F4328584EB2B1C0E43C4892C9C2477600
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     23393
IP address blocks:        104.37.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c0:e4:3c:48:92:c9:c2:47:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=0b10acac-9d34-4daa-bb19-e341bd37863d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:58:98:0a:2e:9a:f3:cf:b7:56:f3:12:0f:
                    cc:ae:45:43:28:b9:24:f9:0d:fc:6d:26:5f:01:95:
                    d4:6c:fc:55:3b:32:23:21:ee:0c:95:82:60:d3:dd:
                    72:29:73:9a:42:84:60:7a:d2:3c:31:d8:d6:12:56:
                    ed:f1:79:6f:bd:a6:81:36:6a:e9:34:02:90:71:51:
                    87:9f:76:8c:f1:bb:ac:2a:88:6e:0d:71:e6:7a:21:
                    48:65:a2:f3:f1:7c:72:03:8c:e6:4d:89:58:02:f4:
                    09:a0:45:9e:ac:fd:45:ab:72:9b:65:90:87:41:8d:
                    7f:ef:d7:4c:f6:18:34:dc:e8:1c:69:71:b2:c9:70:
                    b2:90:44:c1:b5:75:07:0d:a2:14:c2:c1:6c:35:54:
                    b1:48:4b:e3:88:34:08:b3:bc:c5:9c:43:85:4d:f0:
                    74:f7:c9:54:77:4b:8c:cf:7c:cd:7c:ff:84:f6:b0:
                    7b:5a:df:56:80:3a:88:45:ab:68:86:57:b4:03:8e:
                    56:31:cc:fe:0d:81:67:9d:36:e7:ac:b8:16:2c:0e:
                    b3:d5:ea:98:93:ab:08:ff:fa:6b:cb:0e:7b:41:f8:
                    d8:70:ec:45:73:b7:14:c0:b9:41:57:8c:a4:ae:fd:
                    6a:a3:56:47:37:79:93:8c:83:69:5e:cf:f3:f9:55:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:F2:93:55:F5:3A:48:A6:E4:28:5A:CE:8F:1B:DB:90:9A:77:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl

            X509v3 Authority Key Identifier:
                keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:35:41:b4:b5:ea:45:a5:1f:2a:eb:9a:75:b2:8b:84:ae:bc:
         67:cb:1f:23:bb:5f:da:49:5e:c0:f3:5a:da:35:fa:db:9a:d4:
         75:ac:17:8f:4c:d8:89:e2:fd:15:e4:a8:7a:f3:3f:55:9b:a1:
         5f:fa:9c:c8:7a:77:b8:bd:82:4f:74:7c:60:7a:dd:b9:bf:a8:
         db:34:5f:3e:e8:71:2c:39:de:b9:25:68:7b:83:9f:89:84:6e:
         5a:3b:7b:03:e3:a9:79:f7:ca:48:92:77:2e:76:d0:fd:22:ae:
         79:7f:bd:5d:01:84:7a:37:90:d3:c8:5e:b9:d4:b8:0b:ae:10:
         7b:e1:49:de:19:52:16:1b:f3:2a:c5:0c:c1:d4:d8:e7:0d:c0:
         fa:06:f7:a1:10:4f:11:9e:65:64:6f:ae:76:38:8c:78:c0:2f:
         41:29:a3:61:ab:4e:55:0c:e2:27:e1:ac:53:cc:7e:e3:83:4f:
         b6:4b:56:8d:2f:7e:53:9e:d0:ae:b2:de:0d:9b:30:4b:52:33:
         c8:ed:d8:33:21:b1:b1:54:c7:8b:89:e5:4b:cd:a0:61:de:76:
         a4:0a:be:2a:b6:ef:cc:27:ce:15:03:db:8c:97:46:4b:7e:0d:
         0b:9b:ef:78:06:f7:ba:67:24:d8:73:c8:9c:74:90:fa:88:ec:
         5a:ce:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:45 2026 by rpki-client