Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa
File:                     33ed5294-5a11-3b28-98d3-492f7645ef6b.roa (raw, json)
Hash identifier:          uD2TvtaLdAh4n6KfQhpI074R/w2U8KyUrJDDwkdbL4k=
Subject key identifier:   66:2B:1F:34:2C:F7:BB:ED:3A:92:DC:BC:CB:6F:16:A4:F3:BB:74:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64EB0DE00B63AD0045E480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     3786
IP address blocks:        104.123.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:eb:0d:e0:0b:63:ad:00:45:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=f39e1a73-95aa-4454-bd1a-75fcd590ce1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:67:1c:d0:a9:a2:dd:1a:90:df:a0:b1:ef:
                    63:61:71:91:4e:e4:0b:b0:f7:15:14:bc:6d:25:bb:
                    bf:fa:79:c2:4a:3d:9e:9c:04:7c:90:31:2a:37:86:
                    65:ea:4c:1c:bd:2f:39:52:8f:e6:ef:23:f5:b6:c7:
                    b3:d8:9e:e4:f9:cc:ac:6f:eb:d0:33:05:06:03:5f:
                    16:89:dc:c6:e9:cb:58:15:82:ee:cb:34:c2:a2:91:
                    dc:db:69:49:ad:b7:1f:81:a1:03:50:9f:62:5b:f2:
                    35:21:5f:3c:0f:c1:9a:82:36:26:8b:6c:44:bf:d4:
                    03:49:8b:77:06:1b:4c:3d:38:ec:f8:2c:48:32:9d:
                    cb:09:e8:7a:91:88:f9:ec:02:3d:69:5f:31:62:0e:
                    8a:25:23:9f:b7:01:79:cc:bd:f7:f4:e1:4e:d0:58:
                    9a:93:f8:66:76:3b:15:96:cb:68:ec:fd:97:b7:a6:
                    d9:71:02:b1:8e:41:01:25:56:bb:60:f1:ce:49:ff:
                    14:b8:8c:a2:bd:70:ff:fc:fe:d0:74:ae:4b:fb:f0:
                    de:76:36:62:b6:5c:c8:df:25:d6:5d:57:98:8e:a3:
                    ca:37:a7:92:c8:a8:40:8a:d1:b8:1a:46:89:52:c2:
                    d9:c2:53:98:26:34:12:2c:88:fa:2b:9d:cc:ba:4a:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:1F:34:2C:F7:BB:ED:3A:92:DC:BC:CB:6F:16:A4:F3:BB:74:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:b2:a2:0d:5b:45:39:5a:da:52:45:bd:b2:85:3c:b0:5e:
         45:ad:74:9f:80:ad:79:1d:f7:3f:de:56:2e:0f:9e:72:23:79:
         88:9d:4c:07:6c:6f:b4:8e:ec:74:56:4d:9e:48:a5:0b:7a:a9:
         9d:40:4a:fb:9c:d3:aa:7c:67:88:8f:d9:03:be:c2:56:8a:b9:
         be:cb:5f:be:16:22:06:2e:a4:5d:00:8f:24:bb:52:2d:62:19:
         42:a2:f0:f5:b7:5e:42:26:26:45:85:fd:81:5d:a4:9f:60:c5:
         9c:9d:c4:e2:50:60:92:6f:46:43:22:8f:16:e0:98:1c:81:fe:
         f8:8f:ca:a6:b9:ba:9d:a2:ab:e3:48:6a:a8:ad:63:1d:67:fb:
         a2:ba:9b:73:06:0c:4c:b2:2d:d5:8d:da:3d:41:74:d4:2b:31:
         80:79:ee:b4:0a:30:fa:5e:02:fe:74:9f:6d:68:f1:34:de:5d:
         39:c3:f1:d4:87:32:d7:84:e2:a9:08:bb:03:95:cd:ed:a6:11:
         68:0e:b7:d5:34:4f:f3:8a:1d:b7:c7:94:bf:eb:89:25:47:93:
         e1:14:d6:92:ca:95:97:60:16:b9:39:05:07:d4:49:7d:c1:4d:
         9b:e6:d0:ac:c3:54:af:35:b5:16:1c:a7:7c:b9:b7:54:a2:ec:
         1e:9a:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:38 2026 by rpki-client