Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
File:                     e465363d-6fbe-3665-ac6a-c10d319a38ee.roa (raw, json)
Hash identifier:          CAcsfB/Vt1uwnqc7oCHmqyvh54L50oFEbB+U1hT4CnQ=
Subject key identifier:   CA:9A:AD:C3:A3:4D:D4:A0:F0:49:7D:8F:D0:77:7A:F8:E8:2E:2A:77
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F4328584D40CA5A7FE8CE974D012DF140
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5a:7f:e8:ce:97:4d:01:2d:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1675fe92-2784-4717-bc3c-d3fa09384e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:d9:ec:0f:21:a8:cb:d5:16:a1:68:df:4e:
                    ad:7d:22:7f:be:0c:72:86:3a:0d:45:b1:95:86:42:
                    a0:08:39:85:2d:37:fe:7d:9f:81:41:33:d3:e9:50:
                    53:9e:d8:2e:03:0d:fe:bd:4b:bb:c8:46:89:d6:93:
                    9e:68:ba:44:ef:4f:c7:89:e1:2a:48:9d:ef:3e:b3:
                    d1:2e:4a:b3:1b:9b:a8:84:3b:1c:5b:c1:f3:60:27:
                    d4:3b:d9:71:6c:b6:90:ff:44:f3:2b:3d:29:20:69:
                    db:c2:c9:7f:f4:89:dd:ca:32:e3:7d:d3:79:c2:a9:
                    4a:f8:bc:a9:dd:88:66:06:ad:d2:a3:4f:2b:f0:48:
                    45:10:b0:ce:fb:64:19:4d:ae:18:fd:05:18:3f:49:
                    31:29:bd:1f:ea:65:32:4f:81:63:70:5a:07:72:b9:
                    48:e7:31:84:52:87:e8:ef:bd:e7:d5:81:64:37:25:
                    2d:66:d7:18:7b:02:38:a8:c6:f2:c8:21:e2:43:59:
                    23:2b:a3:a7:14:4c:51:6d:01:fc:4d:bf:a1:d6:a9:
                    77:46:21:70:b3:da:17:b5:23:e1:5e:ec:04:1f:21:
                    5c:77:e0:5d:a6:49:38:29:9c:95:09:c1:04:50:8c:
                    60:cd:47:a3:0f:04:ec:02:c4:77:e1:d8:87:bf:59:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9A:AD:C3:A3:4D:D4:A0:F0:49:7D:8F:D0:77:7A:F8:E8:2E:2A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:83:ca:9f:a0:04:e4:3a:6f:e9:3e:8d:5a:56:4f:06:d0:
         ba:bc:9c:83:f9:f2:a1:86:3d:28:23:07:e3:9c:75:66:fe:6b:
         74:c7:50:6e:d7:cc:7e:77:24:22:de:62:71:a2:62:48:11:90:
         f1:00:3b:96:85:a6:b9:eb:10:88:c5:a2:d1:b1:24:b6:32:95:
         66:23:9a:73:4e:1a:76:38:ec:9c:c2:cf:f5:5f:ee:87:52:dc:
         96:da:f3:a2:ff:98:27:27:c0:eb:34:0c:54:c1:97:b6:13:3b:
         59:c8:75:c3:8e:66:54:8e:a0:ef:0f:21:b6:e4:f8:94:cc:ee:
         58:3b:3c:a0:1a:4c:f2:77:c7:c0:73:3a:a2:77:63:8f:96:99:
         82:e5:bc:46:fa:57:04:3f:d3:96:e4:e8:2e:ad:db:a3:6a:37:
         3a:54:7f:b8:47:9b:74:7c:b9:cf:0d:f8:46:b3:88:ad:bc:21:
         1e:8c:f3:4a:13:44:db:02:73:5d:11:df:7d:2f:fb:5b:35:7e:
         2c:72:21:17:f4:cd:fc:c8:cc:06:5d:54:d7:09:52:88:34:1b:
         a3:2f:31:e9:c6:d1:18:10:32:ab:99:ba:d6:aa:7b:22:49:a9:
         68:42:18:84:30:ca:64:c8:b7:82:9c:b6:95:35:76:03:1a:6c:
         3e:5f:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:14 2026 by rpki-client