Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa
File:                     74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa (raw, json)
Hash identifier:          o+/85zravTkFhVfzjyQq+qooO/qPFfjLlRx1NOXtU9k=
Subject key identifier:   A1:A4:55:3C:1F:63:7F:6F:94:DB:C2:60:70:08:12:DC:B7:92:F0:57
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584ECBD1DCDC30F7262BFC56F300
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     5645
IP address blocks:        104.246.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:dc:dc:30:f7:26:2b:fc:56:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=7a597468-b804-469f-8a97-253c94e72335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:f0:33:70:8f:c7:c4:6f:e8:6f:9f:74:1b:
                    2c:4d:04:61:b7:ab:75:62:e0:b2:a8:b4:00:4f:84:
                    de:76:1e:b7:bb:89:c4:9e:46:6c:fa:c0:0c:a9:82:
                    52:a7:e9:dc:15:0d:5f:0a:97:0c:3c:ec:23:e9:cc:
                    e1:98:8e:db:6d:66:0a:b1:99:4a:d2:ba:de:07:6c:
                    8c:c7:5a:05:49:cc:18:f6:74:e5:db:5e:f4:4d:16:
                    dd:aa:e5:14:48:f7:30:e0:2e:52:54:9c:8f:bc:89:
                    ed:54:e0:ad:29:a9:01:55:e2:73:72:f3:2c:56:0c:
                    fc:14:ff:e4:3b:a3:04:d7:d2:80:18:fe:bb:e0:b7:
                    75:f0:05:84:bc:a6:34:b5:84:44:25:7a:7a:7d:33:
                    ab:b5:e6:60:5b:4b:cf:f7:37:00:67:dd:be:2e:ec:
                    7e:e6:a3:19:bd:17:24:17:35:fa:ab:95:d0:d1:15:
                    7d:ec:bd:4d:f4:d0:e8:6c:0a:ba:b5:1a:53:a0:2e:
                    e4:5f:76:b4:1a:16:9a:85:f9:e8:4c:89:2e:66:0c:
                    a8:19:df:a4:25:ec:7e:1a:66:cf:c2:e7:4a:05:b5:
                    58:51:7e:f8:be:07:6e:e3:a4:6f:c5:44:91:ed:c7:
                    38:4a:c8:8c:a4:e5:13:2d:29:12:db:ff:86:a8:22:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:55:3C:1F:63:7F:6F:94:DB:C2:60:70:08:12:DC:B7:92:F0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/74c6c214-6aee-3ff1-9584-bfea1eba2eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.246.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:de:d8:c8:2e:85:ea:a4:c0:d0:b4:b1:a7:25:1c:97:69:c4:
         67:f2:2c:75:9c:19:b1:a8:2c:10:00:ab:ee:95:05:af:6b:77:
         c4:9c:de:94:ac:93:10:63:e2:88:1f:42:ed:61:7f:f1:7f:00:
         a5:23:85:8b:fc:0b:06:13:5a:97:b7:71:a4:eb:9d:75:62:bc:
         1b:77:28:51:c3:85:5c:db:67:57:56:4c:36:00:ab:19:89:ab:
         f9:ce:ae:68:60:2b:c4:c1:97:85:57:a1:bc:c5:ff:a3:6a:03:
         46:7b:6b:43:42:4a:79:46:1a:4f:96:05:b5:56:fc:8f:e0:b6:
         49:58:b3:68:9a:eb:8e:4e:22:bb:78:9e:f8:d0:b3:29:cd:08:
         c2:25:d1:f2:cb:93:fc:74:54:48:71:92:32:4e:29:f8:57:07:
         4b:15:38:f6:90:ba:63:2a:00:42:65:2e:28:1f:80:12:e9:ab:
         f1:36:cd:fa:a8:69:c8:80:5f:94:da:80:9d:02:61:22:bc:2e:
         e9:15:2e:2b:e5:3c:fd:dd:61:ea:14:c5:f8:32:93:56:b4:15:
         68:7f:60:6b:30:e8:c8:ca:b9:11:65:23:74:e7:1e:52:a7:df:
         65:74:1e:a7:58:5d:5c:2e:2e:46:e1:92:33:09:80:33:a0:55:
         04:01:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 18:05:31 2026 by rpki-client