Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa
File:                     1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa (raw, json)
Hash identifier:          Ci0u2UGiHpqigzh/0HMVUhBCTGxd+JBk/DXTDv3BkQs=
Subject key identifier:   FD:A7:7B:F5:A6:FF:BC:3B:28:6A:76:A3:D6:7F:BE:A8:7E:AA:38:60
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584E6C6F65430E776E5087500480
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     62874
IP address blocks:        104.37.24.0/22 maxlen: 22
                          104.37.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:65:43:0e:77:6e:50:87:50:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=a2a4f5d4-9d47-4fd8-bc13-2d12c2a6b951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:bc:a1:a2:0a:ab:4c:21:74:60:21:e7:4b:
                    88:13:dd:1a:5b:8d:bf:8a:4e:9f:cf:08:f9:0e:00:
                    32:b0:42:c3:c8:fc:a1:82:e0:19:d5:c4:66:74:70:
                    24:5c:cd:87:a6:c7:05:6f:d6:27:e6:35:19:db:6a:
                    e0:57:2a:1e:85:64:86:cc:97:0f:a4:39:0a:4d:a1:
                    57:21:18:4a:40:ec:4f:83:f5:a5:8b:3a:70:95:0a:
                    56:a1:22:6f:b3:ce:0f:1f:03:36:16:8d:7e:a1:22:
                    24:2d:d6:cc:ad:78:4e:25:7d:52:f7:e0:52:83:c3:
                    cb:2a:09:b2:b3:bf:f3:30:b8:55:bd:b5:5d:5e:d0:
                    8d:d6:63:33:c4:b2:5e:b3:78:63:94:cd:30:34:ac:
                    5e:e3:af:9b:e3:0b:25:bf:50:97:c1:7f:d7:e7:c5:
                    d2:67:21:2b:63:f1:24:93:68:3c:bf:30:98:e6:bf:
                    ea:57:c4:61:6e:fe:aa:f1:e7:5f:16:99:c4:7e:50:
                    d2:23:76:38:81:a0:24:c1:e5:ce:60:f3:30:88:3b:
                    d4:10:11:95:46:7c:dd:da:77:78:6a:9a:3c:5a:1a:
                    00:86:cd:70:d7:3b:ab:02:21:dd:9e:f9:2d:8c:37:
                    4e:94:5d:d8:0f:3b:16:fd:e0:15:3d:52:cf:aa:f0:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:7B:F5:A6:FF:BC:3B:28:6A:76:A3:D6:7F:BE:A8:7E:AA:38:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.24.0-104.37.28.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:95:bc:69:38:b9:94:5f:a3:9a:2a:8b:84:b3:db:59:2f:1b:
         39:97:66:56:81:2b:71:ae:05:56:f3:5b:8b:bd:f3:8c:70:1f:
         ce:1b:26:80:33:af:21:9a:13:a6:4d:52:5d:a7:21:00:34:77:
         8d:c5:b3:a4:cf:64:f2:ee:94:0c:bd:4d:da:05:72:9d:0e:96:
         c1:12:ed:7e:9e:d9:d2:2d:7c:ea:67:11:93:a4:2b:b8:04:8c:
         47:a9:39:a0:c1:ed:56:17:27:b8:67:84:cd:b4:38:c5:7e:72:
         e2:41:d5:53:c3:bc:55:f2:0a:f2:7b:95:6b:64:ef:f3:d9:4a:
         b9:dc:eb:5d:c0:f1:2e:5b:6e:2e:74:ab:27:5b:e6:4d:7f:b9:
         fb:b3:49:e9:20:10:8b:94:96:3c:b2:7e:ec:f3:9a:2c:f6:9f:
         7e:67:58:4b:49:d8:f7:d5:a2:45:f1:7e:68:72:c2:c5:cf:e7:
         83:fb:9a:a6:fa:61:f2:66:71:06:aa:b4:f3:bb:f1:d3:30:8e:
         a7:a8:92:72:eb:2b:12:72:25:c8:3d:d5:c8:9d:f0:c1:42:e3:
         53:53:74:5c:43:d4:ff:a6:a6:66:f0:b2:2d:9d:a7:2e:75:df:
         1c:9c:89:84:b8:8b:00:6b:3d:4d:62:83:aa:23:87:6a:89:92:
         8c:62:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:30:18 2026 by rpki-client