Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa
File:                     61aaa91e-0584-333d-91c2-07c52729d2cf.roa (raw, json)
Hash identifier:          /0ocd8VGGVEcHV6Nx5cxvkd4wibrhzVUj2/vXPkVR30=
Subject key identifier:   68:8A:84:85:2F:F5:94:5A:0B:2A:DD:DA:0F:63:EB:17:57:1D:B1:7B
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E94EA5D253EB280EB4A9C3B80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11290
IP address blocks:        104.37.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5d:25:3e:b2:80:eb:4a:9c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=181fc074-7696-4fe6-8381-375bfb9999cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:2c:48:a7:56:d3:bb:57:3b:ea:a4:cc:13:
                    d7:d0:19:35:3b:a3:c4:7a:18:02:e9:26:5d:a4:a2:
                    c9:86:29:4c:0f:4e:1e:d0:94:37:16:07:f8:6a:45:
                    0b:fa:0c:ed:e5:b5:f1:59:dd:0b:f5:79:7b:db:d9:
                    b6:55:64:23:63:e3:18:6c:66:94:28:6f:30:a1:91:
                    8a:3c:f0:b5:07:f7:d2:27:04:ad:be:c8:fc:4b:f4:
                    2a:bb:3d:19:1d:0a:55:fa:e7:7b:b1:b4:fa:04:a4:
                    c0:f4:e5:b7:4f:57:27:39:6d:10:b6:03:3b:96:b6:
                    c5:e2:f4:9a:8b:c4:ee:f0:e0:39:a1:16:d0:1c:f1:
                    c1:cd:bd:00:6c:59:64:9c:d4:eb:3c:24:f9:e1:64:
                    2f:6e:9d:00:3a:ec:bb:3f:c3:ca:75:f7:a8:78:2b:
                    01:fa:e4:33:60:f3:8b:19:38:88:8b:d0:16:65:c3:
                    d9:2d:1f:55:32:cb:c2:b3:e0:e0:5f:d1:10:d9:b7:
                    c9:0f:ac:a2:27:7a:b5:ca:f0:98:65:b7:3b:b8:07:
                    bc:80:4b:4a:82:a2:1e:4b:dc:3d:5a:3b:fe:91:42:
                    dc:72:59:ae:3b:c4:d6:f3:c5:72:01:18:3f:be:dd:
                    ba:f3:a7:32:f9:4f:fe:a3:cb:22:b8:f4:27:32:a9:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:84:85:2F:F5:94:5A:0B:2A:DD:DA:0F:63:EB:17:57:1D:B1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:f8:c1:a3:e3:10:e8:1e:fb:94:7f:1e:3c:e2:e9:fa:02:
         09:e4:30:86:cd:cf:96:c9:c2:02:76:61:00:87:58:10:00:bb:
         81:8f:a7:ff:40:a2:91:47:83:04:91:e4:6f:a2:92:7e:7c:eb:
         5b:00:6a:02:44:67:82:c6:df:88:ad:d1:b6:43:53:15:51:02:
         fc:52:0c:aa:50:6b:d9:73:a4:c6:fa:bc:65:c4:2d:8d:f1:fb:
         b8:2f:04:13:3f:e1:43:a0:c2:97:b8:da:51:77:e4:ac:7e:2e:
         96:49:72:17:e5:f7:c9:3b:7b:d0:ba:e1:63:53:0a:31:80:94:
         7d:99:02:56:b9:11:b2:3d:69:11:37:f1:2e:33:53:9e:91:f3:
         e7:90:b8:bf:9d:14:ca:ac:c2:ca:7a:16:c6:60:6d:0d:5f:b3:
         6f:ea:1b:87:b8:18:c2:a1:45:07:ac:97:0f:35:29:bd:e3:1f:
         81:a1:a4:0f:07:99:c3:b8:e4:6c:28:2f:e1:e6:1b:40:e3:fb:
         39:a8:56:b9:6c:7d:fc:71:86:0d:6b:8a:35:4f:61:9c:b7:ae:
         b4:79:40:c6:18:c1:d2:8c:26:68:69:ba:b6:9d:10:59:b0:39:
         1c:66:5a:4e:55:a7:ff:af:f2:5b:42:a5:f6:83:d7:c7:e5:de:
         15:6b:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:48 2026 by rpki-client