Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa
File:                     c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa (raw, json)
Hash identifier:          SejxIFHA9AEvCwDDhdjzwrfWtLHqDFbtP8Li7f2qLVI=
Subject key identifier:   13:C1:59:C4:1F:A4:D3:CA:16:1E:F5:EB:5D:6B:D4:CB:12:13:C0:58
Certificate issuer:       /CN=11763f86-1681-42c2-95da-8df74d7e18ed
Certificate serial:       010D0C9F4328584EC7A1CB211F00E78CFEB7C000
Authority key identifier: 31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     3223
IP address blocks:        104.152.44.0/24 maxlen: 24
                          104.152.45.0/24 maxlen: 24
                          104.152.46.0/24 maxlen: 24
                          104.152.47.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cb:21:1f:00:e7:8c:fe:b7:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11763f86-1681-42c2-95da-8df74d7e18ed
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=f73fdaf8-f108-4730-9ceb-69815daf2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:3a:08:fe:70:be:54:8c:7a:de:12:b0:53:
                    fd:bb:c2:e7:71:6d:f1:db:a2:46:1c:b0:e3:4f:a1:
                    45:f7:23:67:c0:29:68:72:ed:ad:4f:7f:f8:d2:48:
                    00:b1:dd:37:81:b8:a6:f2:97:67:bc:f2:45:81:21:
                    9c:3a:56:91:93:ee:ad:ff:ec:01:ee:38:c8:86:4b:
                    38:8f:43:4e:e5:21:8c:04:91:ae:4f:a8:60:f0:27:
                    33:6f:91:4b:f5:ae:38:c5:9d:b3:61:3a:44:98:bf:
                    89:76:c0:e0:30:68:33:17:51:76:c5:52:5c:8e:26:
                    78:66:cd:82:c3:36:54:45:85:75:d2:b5:63:01:1c:
                    f3:26:30:bd:f0:1d:88:5e:50:08:d3:52:70:98:ed:
                    b1:12:31:62:54:2a:1c:8e:0a:35:8c:0e:6f:c7:4e:
                    fa:d5:ec:4b:c5:e4:ea:29:f3:ac:71:83:73:61:f7:
                    b5:a5:cc:f4:c7:0c:d8:53:da:ff:c7:f0:6d:98:a4:
                    6d:01:74:0e:67:6a:07:68:d6:cc:3d:33:74:77:70:
                    a8:c9:42:a1:ef:22:78:a7:27:2e:81:0c:2f:63:ba:
                    92:3c:ba:94:19:7d:d1:64:eb:23:7b:0b:f0:ea:d4:
                    b7:5d:db:cb:fa:94:16:31:53:01:e2:71:e5:61:b9:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:59:C4:1F:A4:D3:CA:16:1E:F5:EB:5D:6B:D4:CB:12:13:C0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/c94a3a6c-612d-3d99-b9f8-c1b0db2b426d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.crl

            X509v3 Authority Key Identifier:
                keyid:31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.44.0-104.152.47.31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:9d:9f:4c:13:03:90:f1:2e:d8:72:ff:42:90:06:1e:f7:
         d4:c7:51:7a:76:41:c8:18:6f:76:89:93:35:81:10:7b:60:d9:
         58:5f:de:f3:d2:ac:d1:9e:cf:a5:9f:0b:a4:98:18:b6:98:47:
         4d:4f:14:53:c8:9e:2a:b6:ee:f1:1a:1a:f3:4c:11:64:2c:0b:
         e5:d7:15:fd:d5:b8:da:cd:7c:8a:8e:ce:f8:87:62:46:13:01:
         94:da:c8:9e:4a:96:ff:68:2a:67:9f:ca:ac:af:76:fa:f6:3d:
         9a:fe:c3:fb:bb:18:84:7e:ce:34:0e:f9:46:f4:c8:20:7a:a6:
         76:16:62:4b:c5:91:42:c8:7d:74:f6:31:16:ba:c0:58:c1:ce:
         fc:98:2a:78:d7:18:a8:ee:47:b7:bd:cd:ce:f4:81:d6:b8:e3:
         24:1d:b0:b6:c8:c8:42:11:ad:4e:32:c8:ef:95:ac:a4:38:73:
         e3:77:13:8a:a5:c7:b9:79:e9:3c:2b:d8:a2:2b:64:53:e0:11:
         78:a1:38:f4:48:5c:8c:99:c6:a6:4a:f9:85:0b:9b:a7:70:9d:
         c1:8e:70:8f:c7:88:5d:63:01:8b:dc:16:f1:56:a0:43:5a:33:
         06:3f:b7:2c:25:6f:b3:a3:6f:7e:2e:9e:db:a1:d1:f6:26:95:
         63:4b:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:43:52 2026 by rpki-client