Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
File:                     18929dd0-8abe-380b-8457-8fd0f487c7b5.roa (raw, json)
Hash identifier:          7ScfH1EK6DepsF9qHaXWzRVqHKoIBuBF1LRi6AXO4g4=
Subject key identifier:   E3:39:64:54:92:09:44:4D:1C:88:FC:4F:2F:81:3A:A9:35:CC:51:E9
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F4328584E2D9F0C900C6304C68A87B900
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     46650
IP address blocks:        104.245.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0c:90:0c:63:04:c6:8a:87:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=11fb9d56-3daf-43a3-b19b-0a99bb03dd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:3d:82:fb:c9:bc:1a:a9:88:73:e7:ed:ca:
                    61:11:26:da:2d:87:cf:1c:f0:71:5a:7f:ca:23:68:
                    bf:4e:21:42:96:fa:64:59:8c:10:df:69:02:83:0e:
                    b3:a4:d6:37:fc:77:0e:f7:b0:b1:10:50:30:5d:f7:
                    e3:de:14:42:79:9b:27:e1:aa:97:f1:6e:2f:2f:d7:
                    7a:49:38:91:37:9c:88:27:51:ee:70:c5:ef:fc:ab:
                    97:49:27:fa:cd:76:b8:77:3b:a3:19:9e:cf:df:e1:
                    3f:c2:48:b9:d7:3a:3e:41:2f:34:7c:e7:71:db:d8:
                    ab:10:f8:08:e0:cb:65:65:ae:f7:1c:fa:a3:18:e4:
                    d1:f4:c8:cb:6c:52:5a:12:58:8c:d8:9b:a5:66:08:
                    d3:89:af:a9:a8:6d:8d:67:90:0b:78:47:7a:24:c5:
                    43:2d:b9:e6:bf:56:00:a4:91:12:26:40:5d:1e:8e:
                    b8:9d:b0:64:cd:69:b8:49:01:67:32:b3:3a:3d:0d:
                    d8:c0:5b:5e:2e:c5:5b:0b:6d:31:da:65:fc:14:69:
                    ee:bd:30:9c:36:94:ca:73:72:6b:e2:21:ec:7c:88:
                    71:c8:d8:e8:11:4c:e1:01:66:72:e7:02:dc:1d:8c:
                    81:1b:8a:04:3c:94:f7:f4:c9:9e:6b:59:58:2c:86:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:39:64:54:92:09:44:4D:1C:88:FC:4F:2F:81:3A:A9:35:CC:51:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:4e:7b:0a:2c:cc:cd:72:d5:df:d8:61:f3:70:b0:1d:eb:7e:
         2d:74:c7:bb:f6:e0:f0:61:4b:58:f8:b4:b2:46:57:c5:f1:70:
         a7:f2:12:15:d9:3c:7c:f4:71:c3:45:f0:6f:fb:93:f7:16:c1:
         b7:27:54:7b:7d:36:08:08:db:5c:af:9d:e1:c8:33:d1:8f:71:
         50:c4:6d:61:2b:b7:34:51:4d:27:9a:d5:56:90:90:92:da:be:
         32:ba:89:c0:6d:80:a9:10:6f:63:de:a5:3b:d1:0f:6e:b0:d6:
         9e:81:58:b7:82:f8:a0:ec:cc:dd:49:e3:f2:a6:5b:55:a3:8c:
         5e:54:e5:6a:52:5b:32:79:c3:61:ea:5c:90:a0:e0:3f:2d:ab:
         e7:bc:be:c3:af:5d:05:32:15:72:32:fc:61:70:2c:c4:5a:b4:
         c5:30:0f:ba:bf:19:b0:0d:99:db:80:e3:ec:d1:03:46:86:0a:
         37:23:c9:9d:c1:a2:e7:78:b8:6d:34:12:1d:0e:f0:41:e7:b1:
         40:c0:5c:24:fe:b2:01:45:a7:61:f9:8a:3a:28:34:0b:c6:9d:
         6e:a5:db:b2:4a:07:93:52:dc:4c:f8:da:41:02:cd:43:81:58:
         26:8c:d3:fc:88:54:13:a2:22:5d:52:b5:74:16:c3:a5:a2:08:
         d7:ad:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:35:55 2026 by rpki-client