Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/a8faf895-bc12-3112-a05e-5cecd97a2d8d.roa
File:                     a8faf895-bc12-3112-a05e-5cecd97a2d8d.roa (raw, json)
Hash identifier:          KrXd8cjklua7vhUyysSwbsp/mGK+bLyb85je0ibymo4=
Subject key identifier:   F9:BF:B9:A4:E2:F2:98:E6:54:FC:A6:C2:0E:AD:0E:AF:CF:0C:47:72
Certificate issuer:       /CN=fc86cd18-054a-47bf-a16d-4e9618460466
Certificate serial:       010D0C9F4328584E71CF31BA9529F865F762CA40
Authority key identifier: 2E:C3:F5:FB:33:41:4B:3C:84:57:C0:F2:B3:E8:05:C9:B9:62:4C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/a8faf895-bc12-3112-a05e-5cecd97a2d8d.roa
Signing time:             Thu 09 Jul 2026 19:12:20 +0000
ROA not before:           Thu 09 Jul 2026 19:12:20 +0000
ROA not after:            Wed 07 Oct 2026 19:12:20 +0000
asID:                     396982
IP address blocks:        104.204.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/fc86cd18-054a-47bf-a16d-4e9618460466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/fc86cd18-054a-47bf-a16d-4e9618460466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:71:cf:31:ba:95:29:f8:65:f7:62:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc86cd18-054a-47bf-a16d-4e9618460466
        Validity
            Not Before: Jul  9 19:12:20 2026 GMT
            Not After : Oct  7 19:12:20 2026 GMT
        Subject: CN=1000b7c7-2d1e-405d-844e-4375fe0ec147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:7f:98:02:eb:b3:41:60:05:e7:46:af:3c:
                    5c:73:ee:4f:24:f4:a9:f0:ac:9c:93:66:10:db:79:
                    12:e6:22:20:09:c8:99:6c:8d:bd:44:b1:62:70:df:
                    a4:08:4d:ba:b7:97:13:c8:fc:ff:41:a1:a4:0b:91:
                    e8:69:eb:52:2c:c0:f1:44:04:ad:6e:e4:14:4d:18:
                    4e:a2:e6:49:9a:f1:4f:c4:29:37:49:31:63:8e:9a:
                    be:73:fd:a4:c2:c2:5a:7c:ce:66:e6:23:1a:96:3f:
                    4f:9a:ad:65:b1:62:bd:7c:1d:b1:96:5b:7e:a6:8f:
                    36:b4:e4:fe:50:b6:25:bf:4f:f0:e5:01:2a:26:35:
                    f9:fa:c0:be:fb:4d:2e:40:07:37:c1:6a:3d:df:88:
                    98:0c:b3:ed:7e:ed:cc:28:55:79:75:53:be:c3:2e:
                    58:b4:87:67:bd:6d:94:96:cd:aa:52:70:c1:6a:fa:
                    bb:6e:bd:6b:f9:cf:b4:40:0b:a3:b5:e9:c1:3a:3e:
                    3f:0b:5b:d9:47:9a:81:99:79:2c:2a:62:d1:55:d6:
                    6d:9e:ea:3f:3e:36:56:ec:51:ba:3d:ae:a3:7e:44:
                    a4:c1:d3:9a:ce:86:fa:86:82:c2:7e:64:2a:e4:73:
                    3f:6e:2c:4a:64:d0:c9:99:16:b1:42:66:ac:e1:f2:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BF:B9:A4:E2:F2:98:E6:54:FC:A6:C2:0E:AD:0E:AF:CF:0C:47:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/a8faf895-bc12-3112-a05e-5cecd97a2d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/fc86cd18-054a-47bf-a16d-4e9618460466.crl

            X509v3 Authority Key Identifier:
                keyid:2E:C3:F5:FB:33:41:4B:3C:84:57:C0:F2:B3:E8:05:C9:B9:62:4C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:8e:d6:88:7f:96:a9:96:41:94:5f:71:34:47:82:f2:16:
         57:71:53:fe:fd:1b:32:95:4f:c1:53:5c:83:79:81:4f:51:7c:
         e9:ea:d6:2e:0d:89:64:ec:66:43:02:73:b6:fc:79:d9:37:87:
         fc:6c:9e:f7:2e:b1:0f:cb:50:ae:30:f9:f1:47:6c:23:12:14:
         60:59:a2:2d:29:ac:5b:b7:09:1f:7e:6f:b2:62:67:19:6a:3c:
         9c:b5:73:b7:42:c9:89:84:c0:64:31:01:a2:c0:e2:33:4b:1d:
         47:9a:9d:62:10:2b:03:7e:0e:ae:7a:bf:d2:b8:63:e5:40:8d:
         55:90:c9:4f:bc:f8:14:df:8b:d3:af:05:51:76:83:22:30:44:
         8d:9f:f6:5b:c6:9a:c8:74:02:3f:5c:fa:64:6b:f8:15:09:e0:
         7c:f1:03:c0:89:10:72:1d:7e:3f:a2:04:7b:26:1a:01:6e:71:
         0e:eb:f1:a8:dc:8b:1f:10:6f:27:09:9a:b4:9f:ab:23:c7:77:
         b8:4e:44:94:b1:e1:93:d9:2e:4a:59:cd:28:d6:a5:92:98:06:
         bb:fb:2c:f0:fc:78:89:99:ba:73:18:87:0a:02:7f:59:6a:d1:
         7b:7a:90:59:c6:61:2f:d6:5e:cf:db:70:72:1a:2f:07:a6:2d:
         fe:7a:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:15 2026 by rpki-client