Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa
File:                     0be7383b-f039-3a0e-be05-09237e81c39d.roa (raw, json)
Hash identifier:          TG8J7Leu5TObpoHRd9gMbI//1gsxTNMXR5Jy68sxGZI=
Subject key identifier:   9F:7F:DC:55:AF:FA:AC:E4:E4:E6:67:54:7F:9F:B4:3A:79:A5:75:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64E3C47FDF55A3314C6A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     16625
IP address blocks:        104.123.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e3:c4:7f:df:55:a3:31:4c:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=f2eb4d29-15e0-4495-9eec-231d5db57785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:f8:6f:ab:6a:20:3a:d3:77:5d:81:ac:ef:
                    f7:75:d7:c3:80:66:f2:84:78:41:30:9f:27:11:b2:
                    75:90:b6:d9:6a:c6:20:b2:a7:c5:b2:75:70:f7:21:
                    fe:eb:c6:da:2e:89:f0:fc:b1:82:19:1e:35:07:78:
                    73:7f:05:1a:93:4b:bf:67:d4:3b:67:94:47:93:7b:
                    c3:5c:ef:98:8f:83:9f:c8:c5:38:54:31:0a:52:dd:
                    54:48:ec:18:76:c0:9f:2b:cf:b7:79:0e:bf:41:43:
                    ca:c7:fb:b1:a2:e0:dd:2f:0d:76:bd:cf:f3:f1:6f:
                    7e:9b:c6:6a:bb:13:7a:c2:b5:c5:33:83:4e:d5:4c:
                    fd:e2:72:39:45:d5:ec:00:dd:f9:1f:25:d8:06:00:
                    5c:3f:ac:1b:87:f8:e5:b0:72:8f:8f:ca:3a:2b:43:
                    cd:64:ca:44:e1:f0:e9:3c:8a:e9:22:d0:31:4d:26:
                    df:dc:9d:11:a6:76:26:96:6c:1e:08:e5:a6:07:c2:
                    26:3a:9a:d4:4c:1c:7b:72:84:35:1a:24:df:cd:d2:
                    e9:3e:d8:22:3b:27:a7:54:a2:32:da:e5:c2:21:e7:
                    a3:cd:de:af:75:3f:0d:9b:12:bd:d8:96:ab:4e:4b:
                    d8:9a:c6:53:8f:94:4d:31:87:93:f3:ab:19:64:a5:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7F:DC:55:AF:FA:AC:E4:E4:E6:67:54:7F:9F:B4:3A:79:A5:75:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:be:cb:61:9f:fb:c7:14:9f:ab:13:21:7f:1d:da:88:bc:06:
         3b:14:ef:00:5e:d2:b5:8b:a5:6b:cc:e9:c1:ed:67:d9:02:36:
         84:12:c5:6e:37:79:5a:0f:38:7d:a0:72:ab:51:f1:00:fa:4e:
         82:6b:47:69:4a:b7:fa:a3:ad:53:5c:cd:dd:b7:f7:62:01:3b:
         80:98:48:86:2b:6f:ce:cf:4d:26:6f:af:96:c9:bc:cf:90:0e:
         f2:96:d6:d7:50:45:9b:7b:d2:8a:34:a2:7a:24:5b:99:59:10:
         f5:ab:58:e5:8a:98:c8:e5:e5:9e:c0:3c:a5:75:c7:e5:a1:ac:
         ef:17:55:11:a0:ce:1d:4a:59:44:cc:96:cd:1b:ee:b4:cd:bc:
         69:ec:51:a7:85:00:e0:d9:ae:79:a8:cc:08:95:1d:ed:00:af:
         2c:19:3d:a7:9a:3b:2b:d5:44:cf:fb:a3:3d:76:9b:8b:46:22:
         f9:3f:20:10:77:66:aa:3c:91:72:70:25:b5:12:d6:24:42:98:
         8b:75:cf:a5:a3:cb:92:0a:1c:14:9e:e5:c5:ec:52:c0:a0:cd:
         17:19:86:62:7a:4e:85:dc:80:81:f7:fd:25:62:38:2f:7a:b9:
         81:6f:7e:86:38:15:82:aa:99:c8:69:5a:c0:1b:76:7d:6e:04:
         54:89:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:23 2026 by rpki-client