Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa
File:                     21a2f866-23dd-3998-ad4c-b46a870d4e48.roa (raw, json)
Hash identifier:          0qwblzAfkbN2RX+GI6wY4JZCX5jot2e1Q4dG7WGDMsY=
Subject key identifier:   2B:C6:A0:A5:2D:91:F7:5C:FB:BF:91:9B:5B:26:50:9B:45:E5:81:A4
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64DB954BF96DC5F9FC8E40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        104.206.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:db:95:4b:f9:6d:c5:f9:fc:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=cd40d47f-7591-494a-bce1-479bd4b9225c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:fb:05:6e:b8:62:42:86:cb:f9:84:74:d4:
                    3f:9a:55:56:eb:51:56:3c:66:3f:62:91:ed:e8:64:
                    86:b8:a6:43:cf:57:ff:1a:de:8a:39:c1:ea:22:16:
                    e9:7c:fc:dc:7b:42:28:3a:7c:39:b3:1c:50:89:85:
                    05:ea:ea:51:11:cf:27:c0:7f:fe:c4:48:e8:8d:7e:
                    de:05:c6:e0:ee:81:c6:c3:53:cb:af:cf:c3:87:c6:
                    3e:1f:76:46:e4:f3:39:d0:81:6e:94:56:d4:80:25:
                    a9:86:28:38:54:a9:bf:7a:03:c3:5d:fc:82:6a:8d:
                    c9:cd:16:24:69:98:d9:52:8f:7a:29:35:05:0d:36:
                    1c:13:f9:2a:d2:d4:65:56:68:e7:e2:b9:86:90:46:
                    7e:31:85:3b:ac:f8:ff:ab:4b:bf:eb:ae:c8:95:3b:
                    cf:52:5d:fb:b1:69:6d:78:b7:99:07:69:5c:12:78:
                    94:34:1d:52:12:35:98:90:16:1d:d1:73:68:e4:c9:
                    8e:ae:02:80:71:92:a6:c5:97:0e:3f:45:e3:9f:c4:
                    93:f6:13:9c:06:bc:b1:ba:78:f9:35:13:66:00:d0:
                    5a:e5:29:58:77:f3:6f:73:e3:d2:cd:23:f5:0f:ec:
                    db:ed:14:61:29:d6:2d:95:e5:5e:f2:29:85:f9:34:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:A0:A5:2D:91:F7:5C:FB:BF:91:9B:5B:26:50:9B:45:E5:81:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.206.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:0b:4d:0f:3d:17:37:bd:37:15:2c:9d:af:02:96:fc:92:
         26:8a:1d:79:47:62:bd:77:e4:56:b9:35:40:0f:8e:13:00:e0:
         41:b5:5b:e4:d0:dc:ad:57:89:fa:53:66:e7:80:22:11:c0:64:
         4d:cc:cb:2d:25:0e:e5:6f:02:d2:89:54:f6:49:d0:d1:8a:bf:
         cb:86:36:7c:38:1b:7f:21:22:52:a6:29:72:bd:df:dd:50:c4:
         b0:88:d6:c5:00:e7:7b:52:fc:7d:b5:c0:a4:a4:48:fc:15:84:
         e6:62:e8:b2:46:b2:d5:52:e3:63:8a:1b:d7:08:f5:40:38:5c:
         a3:7a:26:51:fc:b6:8f:74:54:30:1b:29:67:14:eb:28:4f:e6:
         83:53:cc:4a:80:64:8d:9d:c3:7f:af:0e:0e:34:f3:95:c7:b8:
         33:07:e2:58:bc:55:10:98:fe:0d:f7:0b:5c:29:65:fb:e2:98:
         18:bf:33:e6:f6:db:69:1e:d7:e4:60:aa:82:95:af:26:b9:d2:
         54:e4:c1:73:7a:65:81:be:ab:f3:84:d9:25:ac:a4:9c:4d:f0:
         4e:f8:55:34:fd:11:41:9c:16:35:21:9b:67:b5:f9:95:f3:45:
         8c:2f:ed:fe:05:28:e2:d5:d8:40:1e:15:99:7c:18:f6:3c:90:
         af:a7:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:57 2026 by rpki-client