Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa
File:                     897fb56e-da5b-3350-83c3-5691de7bc50e.roa (raw, json)
Hash identifier:          wcBXfhOobG60WWJwthJAAT51FdUiBn1Ytubo+5K49FQ=
Subject key identifier:   14:90:2B:E1:41:35:78:50:98:99:DA:CA:5D:23:F1:84:15:1A:E3:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F498B09667CF3A82A1A9C2CA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.23.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:09:66:7c:f3:a8:2a:1a:9c:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a606e1e3-61cf-4096-9c4f-a5bd96341fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:cc:2f:95:93:da:35:98:cd:48:ce:ca:db:
                    95:6f:a6:a6:f3:cf:0a:d3:ff:4a:ad:f9:f9:37:76:
                    0c:05:1a:fe:78:32:9a:de:46:4a:5e:f7:bd:05:6e:
                    8a:83:cf:93:70:ad:71:ee:b0:59:df:6f:d3:f0:b7:
                    6d:6d:a8:b7:95:45:46:ce:3f:0b:81:4a:f8:e6:3f:
                    40:24:73:ca:b7:57:17:07:d4:81:3f:06:6d:8b:8f:
                    fc:92:be:8a:14:c7:6c:d1:74:62:cb:69:39:2c:50:
                    a9:4e:33:00:77:16:a5:85:28:be:07:c2:1c:e7:fd:
                    28:95:6b:69:7d:b5:07:f2:5e:a4:0e:e9:07:b0:85:
                    be:65:56:2b:97:41:66:1a:75:f9:60:a2:18:be:b4:
                    42:1f:c2:9a:36:92:6c:e7:ce:a8:07:19:b9:52:5f:
                    a5:5b:91:2c:4c:4a:3e:8d:87:1a:82:9b:c5:ec:1d:
                    3e:14:84:38:1e:8b:68:81:15:02:7e:6e:ae:4f:57:
                    8b:6f:f3:3f:66:06:a6:38:4a:9a:49:f9:fc:51:05:
                    4f:36:75:4a:60:1f:d5:fd:f6:cc:63:ee:10:27:56:
                    38:b4:c9:5e:21:a7:b2:cb:7d:f4:db:80:33:3d:59:
                    7b:50:da:1f:b1:65:67:55:32:57:72:65:a8:24:cc:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:2B:E1:41:35:78:50:98:99:DA:CA:5D:23:F1:84:15:1A:E3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/897fb56e-da5b-3350-83c3-5691de7bc50e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:d7:77:f5:b2:99:b9:cb:2c:8c:4f:cf:8c:3e:a2:e1:38:
         2b:eb:fc:9a:cf:29:0b:60:19:59:cb:5f:3c:b9:8f:45:bf:59:
         f9:e3:89:fa:a8:3e:46:fd:30:0e:a7:57:08:a0:db:a9:6a:81:
         be:de:45:d1:14:c7:a1:7a:f8:d3:11:f4:42:d1:52:c5:af:69:
         cc:f3:2d:4d:bc:9f:71:c0:72:3e:5a:f5:17:91:ea:d9:de:33:
         66:4e:7b:14:c4:eb:46:45:0f:e8:5a:45:6e:80:73:54:9c:98:
         ff:bd:09:55:99:36:28:5b:cd:2c:92:f4:65:88:78:b3:2c:af:
         4a:49:4b:0f:5e:68:b0:d3:d1:03:2a:c6:7b:a9:e5:9b:aa:37:
         12:7b:46:2e:b0:12:d3:25:be:68:17:4b:70:40:35:44:70:60:
         5f:96:3c:44:16:69:17:d1:92:b9:8d:b1:c1:47:d6:69:8b:5d:
         1a:05:b0:2b:b3:b7:40:b0:a2:a4:5d:3e:e0:88:ca:28:8a:39:
         93:7a:e5:53:87:ac:18:71:4b:ab:1f:d9:ab:b7:b7:f3:cd:d5:
         b5:d2:91:da:93:58:37:12:c2:07:71:dd:6c:4a:f0:82:6f:75:
         62:41:28:f4:cb:e5:f6:c8:07:df:49:a5:3a:5d:77:d6:31:c5:
         7a:49:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:10:51 2026 by rpki-client