Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa
File:                     24add7ba-9bac-3af0-b7df-7d91081899d4.roa (raw, json)
Hash identifier:          FVW/ItDjxY1Ar8N9i40+a2JU07o03PfNwN0xxNYrI5s=
Subject key identifier:   E3:F1:07:4E:97:23:75:15:3C:0F:67:ED:B1:F2:04:AB:CA:BC:EB:69
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584E9A7FE32C166E1E875E4B84D0
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     26658
IP address blocks:        104.243.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e3:2c:16:6e:1e:87:5e:4b:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=1f39b58d-131c-4bbc-9251-c54449e0bcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:2e:86:33:bd:4d:84:3a:65:55:40:13:83:
                    28:2b:98:22:d4:2f:02:f7:6e:14:12:e1:bf:17:ad:
                    18:5c:8f:0f:55:b3:95:63:89:16:fe:b7:b2:36:b8:
                    1a:6e:9f:0a:a1:0e:8e:10:9d:78:d3:81:40:de:2c:
                    84:e9:a8:25:0e:32:db:0e:1f:88:5a:23:94:aa:a2:
                    01:25:e4:a5:b7:a3:71:53:ec:5c:27:8d:54:8c:40:
                    61:5b:11:1a:2a:a8:01:ec:ba:57:fd:b6:38:a7:5a:
                    bd:cf:f1:1a:d2:a3:dc:9d:13:92:9c:0f:63:dd:dd:
                    49:8f:63:30:3a:86:8f:ca:24:53:01:80:73:11:30:
                    9e:74:31:04:5b:7b:08:3a:3a:62:ff:d0:1c:b1:be:
                    3d:8c:4d:8d:ab:a4:a4:13:2b:fe:4f:37:ea:5c:8a:
                    86:fd:b0:b1:a1:b0:e2:bc:30:9a:61:bf:92:6e:d5:
                    d0:3f:08:6d:5e:e8:ca:71:55:7d:f4:4e:2c:ff:06:
                    ef:e0:ce:df:70:b6:d2:e9:c6:f9:79:76:8f:0e:a2:
                    5c:b7:3e:7a:28:87:18:ad:d4:6d:86:cc:65:ee:0b:
                    72:72:47:bb:33:c2:21:a3:03:2f:e9:a4:4d:d8:2b:
                    dc:cf:d2:90:06:60:cf:e0:c0:63:f8:46:8f:bd:32:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:07:4E:97:23:75:15:3C:0F:67:ED:B1:F2:04:AB:CA:BC:EB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:48:f0:7d:87:b9:69:72:54:95:8e:4b:80:ee:b4:90:14:
         bf:ba:60:22:1e:26:a5:34:f9:16:12:4a:3e:ae:dc:0b:1f:96:
         b6:1f:3c:01:7c:c3:33:0e:55:04:d8:9e:95:ae:34:33:34:bc:
         d6:1e:54:9e:36:d4:1a:b6:b4:2c:75:f4:33:90:ff:b2:ea:b7:
         db:fe:a5:b3:cb:34:c1:01:78:56:39:00:9e:ad:92:55:f8:a5:
         01:b0:3e:1f:96:07:4b:d1:e2:e3:93:ea:7b:ee:cb:1f:01:e0:
         9f:bd:57:5a:7c:64:bc:fd:31:3d:e6:be:91:2d:89:31:32:32:
         41:54:b0:77:a7:6a:35:5c:19:9c:b7:d8:bb:d1:a5:36:68:f3:
         d9:9b:c2:de:e9:a1:12:d2:58:c4:b3:ce:82:90:cf:6d:9b:ea:
         f4:8e:9e:c2:cf:76:66:3e:42:fa:67:6d:06:95:91:61:43:14:
         09:d8:b2:de:61:f0:fa:09:8a:6f:fa:6b:47:92:c3:dc:db:f8:
         c3:1e:e6:bd:5b:59:19:8e:96:9c:e8:87:d8:fc:4a:2f:14:3e:
         9d:0c:c3:88:e8:58:1e:de:77:d5:c5:cf:c7:c1:24:f0:ca:72:
         10:5e:3f:ea:5d:30:24:c0:f4:44:85:9f:04:d4:59:af:04:5f:
         67:d4:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:47 2026 by rpki-client