Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
File:                     f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (raw, json)
Hash identifier:          Z/v7f6IAqw03JAErKIK0wTEQB9j8tUDgkdxFINPESYE=
Subject key identifier:   1C:05:68:6F:E3:45:35:F2:A0:FC:59:BA:A4:67:4C:09:13:85:42:1B
Certificate issuer:       /CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Certificate serial:       010D0C9F4328584DBE6B26FBFE3A58A0FF3B7580
Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     394690
IP address blocks:        104.247.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:26:fb:fe:3a:58:a0:ff:3b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=f8b0c29d-b38c-44e7-8dbc-2283a4c1dc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:fc:5a:b2:3d:f3:cd:22:4b:9a:81:ba:a5:
                    b8:9d:21:fa:db:c3:b6:9f:42:1d:ad:48:e0:bf:45:
                    e7:51:23:b3:0b:ad:b1:e6:18:6b:7b:26:2e:98:54:
                    54:bb:ec:3b:d4:31:d7:14:b7:7e:3e:0a:a1:65:02:
                    a0:f9:41:73:cb:a6:7c:e8:5c:e9:34:31:aa:6e:34:
                    10:a4:2a:42:bd:76:2d:38:aa:ac:54:1a:82:1c:be:
                    5f:ad:de:bf:c3:ae:1b:2a:f3:d2:b6:d2:ad:6e:1e:
                    89:2d:99:ed:b2:3b:0c:25:c8:f4:55:88:31:c4:1f:
                    1a:a7:fd:43:b7:ed:f7:51:7c:88:a2:fb:2e:32:61:
                    55:1a:59:47:47:32:8e:2f:a4:f7:cb:fb:4f:80:15:
                    9e:e6:b2:cb:69:a1:9e:37:f0:5e:78:93:64:12:7e:
                    e3:0c:71:b6:f1:18:3b:27:bb:7b:1b:63:59:39:f0:
                    92:91:5e:9c:06:0a:03:06:8a:af:49:c5:d9:b0:da:
                    78:9c:cd:cc:dc:a7:dc:e9:69:02:e4:38:f2:d9:b7:
                    e8:7c:e6:b8:e0:71:c4:5e:8f:e5:f3:fe:30:af:28:
                    68:fe:b7:a7:2e:a8:68:48:d8:8a:a6:86:b2:f7:4b:
                    e2:e4:ab:cc:68:12:c0:74:b3:45:49:3c:e5:87:13:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:05:68:6F:E3:45:35:F2:A0:FC:59:BA:A4:67:4C:09:13:85:42:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl

            X509v3 Authority Key Identifier:
                keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:19:21:b2:98:3d:eb:c9:5b:44:7b:9f:ec:51:3f:09:62:
         00:c2:11:76:e8:90:ec:c9:64:60:12:cd:09:76:80:35:53:55:
         db:49:17:f5:77:f5:05:08:5d:c1:26:7e:fc:76:00:b0:7d:5f:
         f3:87:f6:60:64:a5:cf:26:21:e7:c3:57:98:2b:de:c2:25:2d:
         ba:e2:42:bf:df:73:a0:48:95:e4:6d:f0:bd:21:79:22:dd:8f:
         f0:52:50:43:8d:14:01:fe:7c:d6:29:46:60:80:8b:46:b9:a8:
         47:15:28:2b:cf:32:3e:31:7f:24:ed:8c:b6:4b:79:0e:8f:2b:
         2d:32:c2:85:32:41:06:ba:df:8e:6f:a2:6c:70:ad:d8:0a:92:
         a7:05:40:72:df:f6:81:1c:44:be:11:60:a7:42:38:64:f5:9b:
         0a:24:6a:db:9c:04:81:e8:6d:59:7a:ef:3f:19:7f:ff:a0:67:
         1e:13:a5:d9:4b:18:67:45:a9:dd:79:d0:37:3e:c0:82:79:8e:
         b1:ac:03:86:d0:7d:a6:19:fb:3c:6c:91:e5:fa:78:d7:03:5a:
         2b:ab:de:38:dd:fb:9f:14:e2:d9:54:2e:5f:f4:c0:9f:57:9e:
         11:58:4e:89:31:1b:6e:81:48:fa:49:80:68:d2:91:ee:4c:a1:
         2b:16:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:15:35 2026 by rpki-client