Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
File:                     79b649e5-7d33-3922-8433-6718a2039a8b.roa (raw, json)
Hash identifier:          humu6G+bYaEcUuYmO0PNgZ3ybgheGKa3HmOPgH5uYr8=
Subject key identifier:   64:8B:02:C7:52:C3:17:63:F6:B2:0C:E9:18:CE:84:0D:91:DF:05:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824AB7EE407EEC8D9EA8C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.24.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:ab:7e:e4:07:ee:c8:d9:ea:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=da85cc31-b533-4e96-909f-b79a0f4f2e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e4:15:49:b4:ef:58:1b:95:0d:27:ab:5b:69:
                    63:00:dc:c3:c0:e6:33:94:04:dd:fb:7d:0d:91:69:
                    61:89:90:80:bd:c8:b4:11:d0:dd:a2:f7:d5:9d:43:
                    16:47:0a:40:fa:68:5b:ed:59:b1:a6:50:9a:97:7d:
                    c1:f2:cb:de:1a:be:4f:be:f1:a1:2c:f6:26:7a:e1:
                    87:4a:bb:95:d6:a0:76:67:c9:f4:3e:48:61:16:9b:
                    d3:81:bf:42:e3:19:d2:0e:54:ac:85:be:5a:50:ab:
                    51:94:c6:14:e8:64:e8:a4:67:09:50:90:c4:45:50:
                    9b:91:dd:89:48:f7:0c:50:0f:70:64:f2:b8:f9:e8:
                    8e:54:ac:35:aa:4a:42:2e:d1:34:2b:ff:3f:5a:a8:
                    5c:a6:8a:a6:db:42:c7:1a:ff:ef:c5:04:11:7b:09:
                    f3:1e:1b:f7:a9:0d:c4:ac:fb:54:a2:91:22:5f:8b:
                    f2:b5:5a:89:a5:cb:a1:2f:7d:8f:c4:85:9a:29:5f:
                    56:85:14:4f:95:2d:00:b7:d4:df:6b:0e:c5:c7:97:
                    cd:ea:6a:05:84:60:cb:5c:66:29:a9:85:3b:fd:72:
                    2e:59:80:64:0f:b2:9b:92:7c:43:e4:2a:00:b3:aa:
                    62:01:aa:af:98:58:1b:69:e4:6d:f0:d6:81:d3:b9:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8B:02:C7:52:C3:17:63:F6:B2:0C:E9:18:CE:84:0D:91:DF:05:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:9c:ad:13:39:6b:56:be:40:ee:7a:4e:1a:36:4b:2c:43:
         3f:90:6a:9f:90:b9:5b:44:d0:48:9c:02:9d:be:3c:6e:4e:64:
         3a:39:8a:c2:0a:a4:75:75:bf:05:f7:b2:f4:3b:c8:50:c8:88:
         f8:f0:6e:bf:5f:fb:68:02:4b:92:f7:c0:98:f3:ab:7d:89:62:
         3d:51:37:b4:95:f9:a2:42:40:56:39:6a:dd:d8:6f:f4:a2:f1:
         5c:64:ce:fa:62:0e:4d:9f:c2:bb:30:fd:e4:f3:24:e7:d9:bc:
         db:28:2c:41:65:c5:05:8c:b2:d0:4f:f8:dd:10:65:52:9c:11:
         fd:ab:85:e3:58:da:8e:de:d4:a2:47:1e:93:96:c9:f9:7d:ba:
         c5:78:59:ff:c3:bb:8e:06:42:7e:5b:65:92:47:1d:67:a6:76:
         dc:fd:4b:b6:0c:24:b5:b7:bf:d9:18:0a:ac:5b:a5:42:ba:82:
         23:d5:06:9d:45:96:d4:5b:c5:e8:66:2f:59:df:68:40:42:4f:
         c4:3c:7d:a5:b0:8e:d7:bd:3d:1e:af:67:9b:35:d1:53:25:49:
         94:bf:7e:f4:54:25:7f:aa:a1:c2:4c:fd:26:ef:e3:c7:65:28:
         64:9e:12:ec:91:96:69:85:82:20:8a:28:6b:2c:31:0e:05:4a:
         27:2c:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:54 2026 by rpki-client