Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa
File:                     f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa (raw, json)
Hash identifier:          rMZhXg1BAqoUIt7CaMejQ0gpZysDEhCxUTb/yR5kQqk=
Subject key identifier:   10:CE:0C:EB:02:68:F3:F5:5F:3D:D7:79:92:B6:C7:EB:FC:69:90:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249EF1DDADD3E420C585A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.29.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9e:f1:dd:ad:d3:e4:20:c5:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=47793973-f66c-4a0d-8673-73bb151bf852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:b6:e5:ab:ef:9c:ca:06:01:f0:a9:5e:44:
                    09:9f:f3:58:f0:a1:c6:b0:8c:b1:31:c1:e3:06:75:
                    69:6d:f2:5c:0d:9b:44:23:77:27:d4:8f:a8:14:d0:
                    92:dd:ac:f9:63:6b:73:e8:05:0e:8d:5a:2e:40:d4:
                    23:a2:15:7d:19:76:45:39:a7:98:a2:54:57:c3:39:
                    27:b3:df:81:56:b3:70:ac:e2:4d:20:90:2f:4d:8e:
                    df:8c:f4:90:7f:29:d6:3c:6c:9e:24:1e:14:2f:a3:
                    12:da:2b:2a:72:4f:f9:0c:5d:41:d1:a6:b0:6d:ca:
                    d0:b4:01:2a:ef:e6:e8:2b:5f:79:8c:1d:0e:0d:c1:
                    a4:19:1c:d2:9c:b8:13:37:c7:db:91:bd:86:b1:54:
                    d1:e7:3b:28:4e:8c:20:4a:59:8d:79:76:db:d6:5f:
                    90:62:bf:10:d5:27:3a:c6:e2:51:9a:d7:63:ac:25:
                    17:68:ec:c9:56:01:3e:f1:bf:7a:3f:6a:32:90:10:
                    b7:9e:5b:a1:6c:85:cc:d2:60:4b:b2:d5:58:5a:28:
                    88:b5:c7:ba:c0:87:52:ce:0a:08:1e:82:3d:08:74:
                    5b:13:38:34:0f:25:69:27:d4:9e:25:f4:06:8c:e5:
                    75:89:1d:45:de:96:6a:2c:13:cc:c0:47:0a:9a:1a:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:0C:EB:02:68:F3:F5:5F:3D:D7:79:92:B6:C7:EB:FC:69:90:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8ad8ab4-08d6-3b7b-b91a-bf02b7b71077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:26:ec:ce:ef:78:6f:c5:e1:08:bb:25:80:30:24:80:d5:
         d4:03:39:de:b0:96:a3:37:5a:45:08:6c:8f:0a:02:ed:00:df:
         ee:11:9d:cd:5f:c1:1b:69:46:55:cc:ce:22:17:e5:45:cc:3f:
         6f:72:7a:64:8f:65:93:dc:4c:a6:cf:e5:b2:90:1a:d6:b0:f4:
         ca:16:fb:02:4f:3f:d9:37:65:54:80:0e:e5:24:26:52:74:89:
         94:3b:e9:f1:67:db:c3:ef:00:00:88:cf:ab:bd:da:75:04:3c:
         44:46:f4:4e:48:1a:10:8c:b8:0f:14:bc:d9:80:82:16:76:33:
         f3:ce:45:8e:5c:c3:31:39:a6:cf:65:8b:ec:ca:7f:79:6c:6d:
         b5:e3:0d:83:6c:06:ef:34:26:73:72:74:01:cc:d3:be:8c:ff:
         46:d8:df:36:54:0d:6b:75:fe:b7:f9:63:90:51:46:97:16:0c:
         e0:ef:b8:c5:83:7f:43:ed:69:58:8f:43:2f:c8:03:3e:c5:ba:
         5f:26:bb:24:4e:b4:36:7f:38:d7:1d:43:67:84:88:a5:86:b3:
         87:c5:d6:76:7f:c4:c1:bb:8d:fe:68:35:84:86:c3:0f:e5:67:
         23:09:b8:c3:ee:2c:a2:2f:9e:97:67:2d:61:7b:62:76:59:1a:
         0f:2c:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:03 2026 by rpki-client