Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa
File:                     58154fe6-99a6-34ed-b145-84b8f9aa4536.roa (raw, json)
Hash identifier:          8csVFAl+A1LTciSFnStYwwEuk2ppl/N/YDTrycIg7/c=
Subject key identifier:   E9:C1:40:C6:D7:BF:88:72:C9:27:0F:44:C5:F5:FD:19:EF:98:86:0C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E90D987A48E7A21D8E2F4D180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa
Signing time:             Mon 20 Jul 2026 22:03:13 +0000
ROA not before:           Mon 20 Jul 2026 22:03:13 +0000
ROA not after:            Sun 18 Oct 2026 22:03:13 +0000
asID:                     13335
IP address blocks:        104.22.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:d9:87:a4:8e:7a:21:d8:e2:f4:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 20 22:03:13 2026 GMT
            Not After : Oct 18 22:03:13 2026 GMT
        Subject: CN=39749488-3135-4fa4-bde3-f5fd979cda82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:d9:72:b2:d3:d5:63:4f:3b:97:f3:9c:f4:
                    cc:5e:9c:4d:f9:2c:89:a9:62:12:58:05:cc:62:c4:
                    20:96:e8:15:c0:b0:10:8b:bb:6a:e4:7a:22:d8:49:
                    c9:f7:62:63:ec:f8:7b:05:e1:e2:87:ce:fd:f1:7e:
                    be:f4:37:55:55:3a:73:dc:7f:27:b8:bf:41:d4:30:
                    26:a2:47:bb:de:f1:37:f1:cb:f5:34:ce:14:1b:e1:
                    76:e2:f5:e3:a0:9f:60:1f:25:e7:af:24:2c:5b:0b:
                    59:8e:96:29:b9:1d:ce:a3:3c:a5:0d:a1:a2:ca:a5:
                    8f:c3:fc:e0:16:4c:4b:02:94:a5:ba:95:75:cc:d6:
                    a8:6a:4e:4f:a7:e8:7b:ff:5d:91:b2:45:9c:13:ee:
                    53:35:15:f2:a4:b4:68:b1:16:1a:85:8f:8a:80:0f:
                    25:35:c9:87:71:d2:58:59:33:32:a1:83:c1:76:3a:
                    47:52:a2:e1:c3:a6:f8:d0:c9:85:b7:fd:d9:9d:64:
                    79:67:23:e6:f8:72:d2:98:38:6d:c4:ed:3a:75:15:
                    bd:ac:0f:e7:53:f8:c2:38:75:c2:52:0c:71:a2:74:
                    30:44:cc:bd:b3:40:41:de:3c:b2:30:6a:d8:47:56:
                    e9:9b:68:b0:dd:09:5d:d0:89:c7:83:45:a0:60:39:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C1:40:C6:D7:BF:88:72:C9:27:0F:44:C5:F5:FD:19:EF:98:86:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58154fe6-99a6-34ed-b145-84b8f9aa4536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:99:71:86:3b:26:a8:0a:1d:a6:bf:e6:23:86:ad:a9:fe:3c:
         2c:03:21:82:38:9f:b4:4b:15:1c:84:42:46:bd:69:12:ba:33:
         06:61:57:65:26:74:93:6a:b9:cf:4c:c2:3d:08:80:66:20:57:
         b9:8c:d0:23:46:6f:e4:89:9b:21:a8:25:aa:02:48:d5:a4:36:
         38:3b:87:7b:8d:19:f0:cf:19:96:3c:45:5c:59:3d:18:f5:a3:
         7f:c0:c0:09:63:b1:51:1e:6a:46:a8:77:ed:23:bc:2d:94:ff:
         0b:2e:e4:66:37:03:fa:4e:9c:c0:b8:64:78:97:a3:12:b0:42:
         b8:7a:b2:df:fa:aa:dc:7e:44:17:50:ba:47:20:91:16:3e:9f:
         98:a1:25:47:7f:89:95:f6:16:8f:9e:2b:2f:61:3c:b8:e5:83:
         fd:aa:f5:df:be:36:2f:33:ce:a4:a3:c2:3e:1e:95:52:67:58:
         49:4d:17:76:79:8a:3a:8d:05:76:a9:4c:ee:06:87:6d:87:f3:
         79:cd:bf:2c:61:2e:f6:f5:b0:6d:aa:a4:8e:ad:2c:59:49:a0:
         a7:05:9c:57:02:dd:4c:c0:cd:22:30:2a:01:1e:55:12:fb:d3:
         7e:05:ab:82:3e:bc:40:2f:6c:75:ae:33:c8:df:61:c8:25:70:
         d2:4c:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:49 2026 by rpki-client