Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa
File:                     61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa (raw, json)
Hash identifier:          bhLXA122WV8W0gWpY1T3VHAzOE0hQzsnpgGNlvPUmlk=
Subject key identifier:   A2:47:9E:BB:A9:F9:42:4C:34:9E:7E:21:8F:ED:C3:CF:62:D7:00:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E482499BBC7D6A9ECB991C200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.24.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:99:bb:c7:d6:a9:ec:b9:91:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=74db3124-e40a-4fc1-8aff-04c957e1224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:f4:24:1b:fe:1d:1c:05:39:05:b3:12:ae:
                    74:e6:80:f3:06:fb:94:31:ca:32:8f:a1:fa:7c:87:
                    e2:18:4b:2f:5f:9e:86:26:64:a9:58:a4:8d:68:2c:
                    7f:2d:d5:c3:e2:0d:8b:43:1e:b6:d9:44:27:97:3c:
                    b1:1a:17:41:85:2a:14:53:bd:06:62:21:0c:50:74:
                    17:bf:e5:06:9f:43:2f:32:dc:fc:db:ab:ce:30:fd:
                    f7:cd:13:8b:f3:e1:5c:6b:5c:6d:2c:2e:c5:8e:03:
                    09:19:5e:9e:c6:0c:05:17:9b:c1:4f:9d:e2:ee:24:
                    9d:3f:3c:9f:89:9a:b5:09:3d:de:f7:2e:f0:4d:63:
                    62:ec:05:ce:70:b1:52:f8:14:e0:0f:78:a9:a9:9a:
                    49:35:c4:2c:d6:3f:26:ab:f9:40:6c:67:45:74:7f:
                    9b:0f:c0:af:8d:89:22:7b:bc:5d:5e:58:fc:4c:65:
                    d8:64:b5:cd:9e:e5:6d:2b:35:12:68:77:49:74:4a:
                    29:94:03:0b:1c:6d:48:b3:fb:40:63:42:82:37:bb:
                    9e:48:d2:a8:74:d3:b0:e8:cc:ff:ce:a6:5e:0e:02:
                    ea:95:d3:01:90:55:48:66:70:78:27:a8:7a:c9:0f:
                    e9:8a:a3:e8:07:b4:64:26:b1:65:32:56:fc:cc:30:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:9E:BB:A9:F9:42:4C:34:9E:7E:21:8F:ED:C3:CF:62:D7:00:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:35:7a:2e:9f:c6:53:cc:8d:64:55:a5:9c:98:c9:26:30:8f:
         85:4b:9a:3d:e2:a4:cb:01:b5:3c:49:c0:f1:95:3e:b0:a0:e0:
         c8:96:65:ef:3e:de:32:c4:1b:f1:9e:8c:13:ce:c0:db:9a:8c:
         73:75:f6:27:27:8c:5b:e9:cc:f0:32:75:71:60:61:e9:7c:bc:
         c3:fe:29:4c:72:bb:73:69:f2:ac:d1:34:3a:39:12:26:45:cd:
         e1:7e:0a:49:1c:c9:b9:1b:b3:ca:2f:6b:eb:95:11:e1:d5:79:
         c0:78:ed:f5:1b:ff:18:c5:8c:49:e4:d7:46:11:e1:45:9c:ee:
         1a:72:a7:d9:2b:b5:9d:c4:90:b3:86:42:54:e1:cc:cf:9f:d3:
         b0:3e:40:f8:0c:e6:af:09:11:65:05:e0:ec:86:a4:f3:04:bf:
         ee:33:77:49:64:f9:00:ac:06:aa:ca:1b:22:16:7b:53:65:ff:
         66:59:6c:1e:62:76:1f:91:01:cd:18:2d:12:21:1e:75:60:97:
         4e:21:fe:00:af:1a:18:32:90:d8:5c:44:5e:5c:e4:38:57:49:
         46:96:cd:43:83:8f:98:a4:cc:a5:3f:a7:53:8c:86:66:8f:a1:
         85:6e:48:77:e6:e6:72:d7:e9:5e:76:40:ec:68:c4:ea:af:43:
         cc:78:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:26 2026 by rpki-client