Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa
File:                     baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json)
Hash identifier:          +mCn2SOkbyo0L9VH7fmTjCkldjyEeMNFTVIO/ooVBYA=
Subject key identifier:   B3:2E:3D:10:46:F2:52:E9:16:63:9F:44:0F:16:5D:3D:3A:5D:EC:F3
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F4328584E6C6F64266D134530BB12E500
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     401707
IP address blocks:        104.232.11.0/24 maxlen: 24
                          2602:f899:fe::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:64:26:6d:13:45:30:bb:12:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=0ebfb914-e26c-4768-ad6e-6f2b09a19114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:e8:04:e5:68:bc:bb:21:4b:d5:53:4e:aa:
                    bf:f8:ac:f3:0e:22:5a:da:19:3c:e2:97:1e:de:d0:
                    0e:09:c6:7a:df:5b:08:00:36:46:91:36:44:1c:50:
                    84:b8:87:87:2f:e9:a3:6a:90:43:ac:df:60:1a:a0:
                    f5:db:f2:cf:12:be:21:49:cd:93:ed:61:06:ee:6c:
                    18:2f:57:3a:89:f5:53:5f:9b:c9:55:f4:96:fb:86:
                    fd:2f:8b:02:a8:46:5e:4c:7e:9c:77:b0:53:05:bb:
                    c7:03:78:7c:d0:73:2a:af:fa:5a:88:a2:8c:05:7e:
                    3d:29:94:c5:49:54:09:d3:6e:4c:d6:db:07:28:fb:
                    be:c0:9c:94:27:90:59:f9:fe:b3:2c:db:36:d5:8e:
                    65:cd:6c:35:8d:75:dd:45:70:ca:61:33:aa:96:1b:
                    f4:2c:1c:eb:80:f2:33:cd:6b:bc:71:0c:59:8b:33:
                    08:dd:c9:48:02:ea:22:8f:03:84:30:87:43:3a:f0:
                    ff:81:17:75:e7:da:f4:83:e9:4e:3e:30:37:da:e5:
                    10:93:8b:f5:85:f5:3e:04:f7:7c:be:b9:db:80:60:
                    36:1a:61:a9:02:b1:3f:c1:23:18:ed:c4:af:3d:2d:
                    46:26:46:cf:eb:e1:1e:5c:99:ae:7c:99:1f:8a:65:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:3D:10:46:F2:52:E9:16:63:9F:44:0F:16:5D:3D:3A:5D:EC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.11.0/24
                IPv6:
                  2602:f899:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:91:30:41:7b:34:0d:6d:44:fd:8c:bd:f2:72:bd:73:1d:e0:
         e4:fc:97:0f:06:43:4d:72:17:1b:84:3a:b6:b4:aa:49:17:aa:
         0a:31:97:1f:0b:dd:a9:f6:c2:d5:f2:97:95:31:ad:5d:18:68:
         1f:25:54:82:13:53:da:c6:27:3c:d9:39:9e:9e:dd:df:51:ae:
         2b:4a:7d:98:8f:14:cc:39:9a:9c:a3:8e:5f:5d:3d:44:5d:97:
         4f:4f:d2:e6:63:91:e7:66:0c:4f:84:63:7b:f8:a7:1d:b9:95:
         22:c9:5b:d9:30:13:f8:e0:06:d5:13:4e:9f:a1:44:9c:91:85:
         37:7b:3c:14:19:87:43:ac:0a:a3:cd:be:1a:e5:86:50:8d:c0:
         26:10:e1:5f:50:1b:ff:a2:1d:eb:89:ae:6a:de:93:dd:9e:53:
         4b:f5:96:9b:f3:17:17:f5:92:80:5f:9a:e5:09:21:65:58:a1:
         a2:94:a5:e7:2e:0a:ea:2a:e2:c3:03:58:93:a2:67:23:67:36:
         ac:40:a7:4d:9a:ed:bb:09:bd:5f:31:99:96:3d:22:62:b8:9a:
         0b:ae:52:9e:7e:3d:97:f1:6d:42:3a:4f:7d:68:ba:96:36:50:
         35:92:e9:a7:d9:65:1f:d0:18:42:04:a6:e8:2d:18:49:bc:0f:
         77:b2:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:14:11 2026 by rpki-client