Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa
File:                     237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa (raw, json)
Hash identifier:          zLf8taUq9xbzoGL+hLhDDcjBnfei3FT9W2j92QTu4s8=
Subject key identifier:   93:8C:7C:CE:72:C9:58:C6:F6:72:40:7C:44:A8:B7:AF:EA:97:E5:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E86F510388B18D16EFE558E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13335
IP address blocks:        104.22.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:10:38:8b:18:d1:6e:fe:55:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=29ff1813-9514-4508-a012-5250402290cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:de:dc:cb:e3:b8:5b:27:33:0e:04:72:42:
                    83:ef:ee:8f:ee:17:c6:a4:42:96:d6:b9:c7:df:b3:
                    07:44:32:4e:3c:62:6b:80:86:51:5f:bb:b7:d1:f3:
                    5b:bf:ec:0b:2a:fc:e2:d2:1b:7a:fe:17:da:3d:8c:
                    d0:33:ee:fd:30:85:c5:fd:76:81:65:6e:c1:64:9e:
                    cb:f1:26:b4:f6:8b:c5:ea:3e:00:e0:bd:a7:d4:61:
                    c9:1d:d2:14:1f:27:6d:21:f9:5b:22:f0:d4:e5:bb:
                    29:6d:cc:07:a9:55:17:52:05:2a:63:c4:53:7a:45:
                    93:82:aa:2f:6a:fb:17:a0:c3:44:fd:92:f4:fb:c6:
                    0a:59:37:2d:e2:75:08:82:5f:85:11:5d:4d:88:e9:
                    c7:ca:5a:b4:ee:80:20:06:d9:77:ce:ef:70:53:c9:
                    21:60:db:3a:42:13:a8:35:91:ec:ad:fb:05:4c:3e:
                    5e:7b:30:6d:01:d1:5a:a7:63:54:7d:68:ca:65:59:
                    e4:26:52:0b:57:c8:76:cd:e8:aa:ac:db:53:58:5c:
                    d2:82:ef:a1:10:27:a4:03:24:4c:94:31:81:1c:6f:
                    e3:71:f6:6f:45:2a:3a:67:b8:0f:fd:b9:62:c0:85:
                    51:a6:0b:98:dd:22:ff:7c:d3:cd:a1:ed:1e:a5:9e:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8C:7C:CE:72:C9:58:C6:F6:72:40:7C:44:A8:B7:AF:EA:97:E5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/237bb5ee-b644-329f-a60d-ee1315d4b1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:c1:7a:d6:0a:39:42:f3:a0:ad:af:76:08:7d:5c:ca:47:
         5e:3b:7a:44:71:52:de:ea:99:3a:73:fe:0c:e0:9f:7f:c5:a1:
         d8:74:6c:c2:f2:0f:1f:8e:c3:ad:f6:ff:0a:95:e5:9c:de:a6:
         4f:3c:85:f5:e7:18:de:f8:43:13:64:68:3b:4f:4e:41:c2:1e:
         a9:ee:50:b4:cd:c8:41:ed:84:65:4d:c5:b9:a8:7d:65:49:cf:
         39:ba:2e:78:5f:c8:00:27:3b:e6:03:9a:fe:55:5a:9c:91:65:
         84:92:09:3e:ac:68:3b:ac:18:e3:44:bc:ab:e5:6f:de:d0:1e:
         93:58:d0:19:9b:3f:f7:b8:35:5f:0b:21:27:d5:88:ea:03:c2:
         b9:ab:16:72:9a:a2:31:06:2c:ac:22:61:90:47:dd:8f:45:2c:
         fd:f8:fc:70:e4:e3:26:de:1c:49:13:83:39:bf:43:e6:31:a6:
         9f:45:42:77:b0:ce:ce:4e:0f:ed:7c:7d:2d:cf:b7:ff:ac:f0:
         f9:d3:e7:dd:00:6e:31:0b:c8:40:51:4b:e3:7f:85:e5:3f:88:
         cc:04:ff:0d:ae:e1:37:1c:d5:71:09:ed:ee:e9:c5:d8:15:ea:
         48:75:4d:51:d1:fb:12:51:bc:a7:61:eb:b6:81:c8:6e:e1:f5:
         78:bc:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:07 2026 by rpki-client