Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa
File:                     4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa (raw, json)
Hash identifier:          Ojxt9fyFO6NvCxg3l3pnAJ8L3TSM7GVVRLt3DyWMrPI=
Subject key identifier:   F0:CE:DF:B4:EB:F0:96:69:51:F2:0C:40:9B:97:28:41:AA:0D:71:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA32E7AD1219A0E5910A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        104.103.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:32:e7:ad:12:19:a0:e5:91:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ff91e7b5-9776-4438-b737-1c8c20acde7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:34:52:00:4b:08:78:ea:e5:7d:3a:cd:b2:
                    7d:5a:de:c2:20:32:70:80:3d:c2:68:0c:db:79:e5:
                    d3:40:9c:88:46:0d:8f:fe:f4:1b:49:8d:fb:b8:51:
                    70:dc:8e:c5:21:97:e0:f7:45:47:fe:79:a3:e2:9a:
                    77:1c:96:87:de:ca:4a:4c:e6:de:44:1c:0a:13:81:
                    09:39:0f:e7:25:df:7a:22:6f:70:ea:d1:1f:96:28:
                    94:84:c3:f2:e5:77:dd:83:41:38:45:7c:e4:88:5b:
                    ea:51:8f:f6:00:5d:1a:32:f8:bb:be:68:ba:a0:4a:
                    5c:28:1c:41:51:58:8d:b2:e4:b0:31:67:3d:3a:52:
                    06:a5:98:f3:66:d2:d2:8d:80:ba:3e:e1:e6:de:1f:
                    5d:79:73:c8:70:79:34:46:b5:a7:5c:e9:f4:b4:da:
                    01:1e:03:b3:93:95:1a:b2:18:a0:9f:7c:56:f0:29:
                    ac:32:ac:02:c6:d3:99:6e:04:52:68:2e:d1:c8:c8:
                    3d:de:b8:d7:a0:5e:91:e8:41:04:d7:a4:32:e7:92:
                    2a:90:b9:bb:02:20:8e:d3:38:2c:c1:c3:7e:f4:d8:
                    b9:7a:b4:53:c0:05:81:28:be:b6:47:33:70:a2:31:
                    6b:02:a5:47:0c:b0:c8:10:99:6c:eb:ed:e3:b4:e3:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:DF:B4:EB:F0:96:69:51:F2:0C:40:9B:97:28:41:AA:0D:71:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ba5ae14-e5f7-3b3c-9cce-eabb8e347920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.103.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:60:bb:b8:9c:20:c0:97:3e:0a:d7:45:c0:6a:2e:7c:3d:ed:
         38:60:ea:bd:6c:2d:50:15:f5:f8:eb:ac:8b:71:24:a3:2a:97:
         9e:65:f1:64:d4:f1:f0:fc:63:32:13:e7:92:46:65:b3:94:7a:
         a5:2a:9e:61:39:9d:89:7d:30:4d:32:f2:7e:9f:78:f8:be:7c:
         74:bc:96:f1:29:c7:8e:f2:01:f0:ea:6d:a8:26:30:f5:97:38:
         65:29:55:4a:c2:f8:f0:80:05:bb:97:a9:92:c3:de:16:ab:76:
         59:cc:1e:15:0f:e2:2c:7d:59:e6:e2:5e:18:b3:5a:40:2d:ad:
         cf:c7:18:10:57:a0:3c:e7:56:5c:00:88:75:71:04:4b:7a:a1:
         ed:e7:a6:a7:05:74:b4:4b:18:cd:99:9a:ae:b0:df:66:8a:7a:
         e2:e1:6c:4d:c5:67:d4:64:fc:62:57:0b:e8:8d:50:01:13:2b:
         3b:1c:ea:96:16:43:73:51:e4:6e:7b:cc:a2:54:1e:92:d8:f2:
         23:66:a0:9c:c2:cc:2e:1c:b4:81:d2:f1:e4:90:f1:43:73:c0:
         dd:06:d2:1a:4f:12:2d:1e:73:22:f4:42:39:c5:f7:4a:89:58:
         db:54:d3:a9:3e:23:8a:e8:60:76:8d:49:bc:a3:c9:12:7c:7b:
         93:41:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:17:12 2026 by rpki-client