Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24f86ac6-c14f-340f-9e27-d153a5b531e7.roa
File:                     24f86ac6-c14f-340f-9e27-d153a5b531e7.roa (raw, json)
Hash identifier:          hG2gsnMiJHwxcuUWUos6fDIc5UaT4JbgFU3iKkQVJhY=
Subject key identifier:   7F:3B:72:BC:DB:57:98:56:69:72:AE:47:D2:E7:F6:CA:36:9B:37:F1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F5EE693ED5B93C0D1191A2440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24f86ac6-c14f-340f-9e27-d153a5b531e7.roa
Signing time:             Fri 02 Oct 2026 17:26:01 +0000
ROA not before:           Fri 02 Oct 2026 17:26:01 +0000
ROA not after:            Thu 31 Dec 2026 18:26:01 +0000
asID:                     13335
IP address blocks:        104.22.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:e6:93:ed:5b:93:c0:d1:19:1a:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  2 17:26:01 2026 GMT
            Not After : Dec 31 18:26:01 2026 GMT
        Subject: CN=59bed1b3-ef0c-4bde-9986-489c82754d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:e0:46:92:98:e9:27:50:d1:5b:cc:d5:0f:
                    11:e2:13:d8:13:ef:a4:dd:24:5f:bb:e4:b5:73:7a:
                    02:3d:d0:88:fd:bb:2b:f8:8c:9b:9b:fb:26:7e:f1:
                    c7:76:a6:04:ce:0e:b0:25:f1:1a:d0:6e:66:0b:50:
                    1e:d6:72:90:b9:b7:32:83:27:ca:f5:80:68:17:8e:
                    6b:6c:7f:bf:d0:8f:6b:c0:56:ca:78:39:47:fa:ad:
                    10:50:ef:14:36:c2:5e:0c:f9:85:77:8e:3d:84:71:
                    77:22:1a:e9:54:a2:d7:60:c3:37:3f:ee:36:20:ac:
                    c0:06:fe:92:8d:e3:99:56:bf:d6:85:99:01:83:66:
                    c8:bd:f9:f1:f6:99:d0:c0:11:09:30:8c:a9:54:3f:
                    3a:c2:5c:57:b0:dd:ed:cc:31:d0:ef:f3:20:c8:8b:
                    b2:d7:b1:13:b5:1a:ea:78:cf:1b:8c:5b:a5:28:46:
                    13:ff:47:95:fe:6b:e0:d9:39:a2:58:bd:21:e4:8b:
                    ca:fe:1b:68:05:3d:a8:64:d0:1c:49:32:0a:19:4e:
                    91:21:7f:8a:98:33:c1:3c:21:2e:b5:09:93:40:0d:
                    54:36:49:e7:8a:cd:4a:cd:76:7d:2e:22:a5:15:75:
                    10:fe:6a:21:4b:41:a1:42:5d:84:35:cc:1e:fa:7a:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:72:BC:DB:57:98:56:69:72:AE:47:D2:E7:F6:CA:36:9B:37:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24f86ac6-c14f-340f-9e27-d153a5b531e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:90:64:25:32:02:9e:db:d0:cb:78:cf:9a:9a:18:bc:d1:68:
         c9:7f:2a:bd:b4:0a:6a:b1:1a:f3:cb:ef:03:68:e7:96:93:ce:
         52:3a:06:77:40:a3:af:5a:40:1c:8d:e5:09:78:c9:7f:3b:6a:
         89:17:de:3e:ed:4b:2d:54:62:96:6d:6d:cb:18:ac:2b:ba:78:
         80:eb:94:28:cd:d1:23:ac:6c:dc:85:71:13:3a:06:ae:68:40:
         7d:9f:8a:95:de:c3:33:6a:99:7b:77:77:a1:a2:4e:a9:56:40:
         f0:f3:24:49:e1:93:ce:bf:f8:1b:f8:3b:e3:8e:ee:f8:9e:f5:
         b3:b1:4b:ba:0b:a1:1b:9a:1a:07:8f:58:ed:2a:0c:a1:ff:fd:
         45:77:eb:43:68:57:64:36:c5:ec:e4:f7:ea:65:6f:4f:40:cf:
         c4:2e:34:9f:72:a1:d6:3c:b0:df:31:bf:12:d9:f3:81:1c:61:
         71:4d:e2:e6:30:ac:46:f5:fd:f9:d8:77:05:6e:7a:4b:aa:d7:
         24:e3:10:05:11:29:28:21:2a:c7:f0:58:d6:5d:69:4a:0e:18:
         a3:96:37:91:b3:44:6a:d6:33:2b:09:7d:b6:ee:f1:ca:47:60:
         dd:1e:43:1d:75:97:82:d7:a8:e8:2b:b7:1c:bc:14:06:aa:2d:
         27:ba:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:16:14 2026 by rpki-client