Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa
File:                     6deddc91-1e80-3cbe-aa0c-aac1448de702.roa (raw, json)
Hash identifier:          JmfcsFD4OcUBRehl0EGslZlwqfJ2S9mutFg67IqAWHk=
Subject key identifier:   71:E5:A3:55:FC:8C:BB:81:E5:A7:D5:7A:77:0C:DC:06:3D:C4:00:6D
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584F49774F8938F4BDDAF0852524
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213122
IP address blocks:        104.224.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:4f:89:38:f4:bd:da:f0:85:25:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8246527d-e2ee-46a3-b3d2-b6550eacadd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:20:8a:11:bc:81:99:99:fb:86:78:32:be:
                    6c:76:ba:8a:3f:d8:3f:f2:4e:8c:4d:ac:a2:75:34:
                    4e:c1:6b:c0:ea:93:91:44:a8:35:7b:11:03:82:73:
                    c5:3e:da:a0:45:55:fa:88:ab:2a:20:76:09:af:2d:
                    2c:35:d3:2a:1d:89:df:5f:d5:4a:f6:6f:ea:bb:2c:
                    db:3e:59:ec:fd:3d:e8:5f:76:9c:bb:e1:99:da:ae:
                    38:69:31:75:74:2e:e5:0c:cf:7c:e7:20:d1:b2:bf:
                    c4:93:3b:97:30:fc:a8:c1:43:38:13:d4:74:6d:61:
                    ab:ba:ea:50:1d:75:2b:66:1c:b5:97:32:47:e6:2d:
                    fa:9c:b8:cc:47:d9:e9:09:91:cb:c3:3d:ce:1b:7e:
                    ae:a5:67:57:e5:d5:3d:08:93:6b:9c:51:4d:57:c6:
                    f7:6c:dc:b3:af:9e:13:cd:db:7c:39:27:64:01:e5:
                    85:cf:31:f2:19:43:b2:be:8d:c8:1d:45:21:0d:7f:
                    1f:45:2f:3d:50:1c:29:13:96:2a:c1:83:cb:97:de:
                    3b:b3:0d:65:01:92:0e:cb:c0:24:a4:bc:91:9d:ff:
                    5e:f1:50:0f:0e:d5:fb:9d:8b:5e:3c:3e:0b:b5:eb:
                    3c:d6:21:8a:0e:e5:86:70:32:5d:38:21:5b:68:f0:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:A3:55:FC:8C:BB:81:E5:A7:D5:7A:77:0C:DC:06:3D:C4:00:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/6deddc91-1e80-3cbe-aa0c-aac1448de702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:da:05:cd:7b:3d:c1:9d:42:7d:ff:b9:b0:26:95:de:ad:
         af:e5:a2:62:41:47:29:42:38:b7:7f:06:91:ec:6d:25:85:04:
         d4:ac:08:f3:7b:be:da:a0:fa:1a:24:26:41:08:d8:28:ce:6c:
         80:39:99:16:85:ae:79:e5:09:17:e7:28:6c:bf:85:d2:24:1e:
         f7:b1:52:e8:47:cd:53:67:0f:25:86:35:67:83:ab:fe:85:18:
         aa:6a:1c:8e:47:fb:04:6a:44:26:cb:ed:2f:7e:fa:60:05:50:
         4c:5a:1a:ed:32:d8:46:49:a2:4c:a6:ff:84:11:3b:32:81:b5:
         7a:7e:66:16:ba:cd:6a:a4:53:67:6d:47:9f:a3:98:6c:4c:bf:
         06:bd:6a:11:40:8a:82:4a:d4:5f:c2:33:7e:eb:2c:de:f6:67:
         ed:f6:b3:f2:14:54:f7:83:28:aa:f1:bb:a8:7d:63:66:9c:1d:
         21:0d:ec:a4:36:a7:b7:5a:4b:d7:94:c4:fe:56:50:8e:54:d7:
         a6:00:e3:36:aa:ed:33:a0:39:10:3d:40:ac:82:f1:9f:3b:b6:
         9b:11:2a:dc:bb:f6:29:b5:c7:67:cc:4f:12:1c:d6:ea:35:4e:
         d8:f0:10:5b:96:94:07:dc:48:b7:83:c2:eb:a9:e4:ec:6f:2a:
         a8:a8:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:27:55 2026 by rpki-client