Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa
File:                     ece71982-890c-30f9-b8c9-1153c638ad6f.roa (raw, json)
Hash identifier:          QQt9EESxSoXrAYROHh3qATtLx5T1HJEP/dxOm1lmya0=
Subject key identifier:   F0:DF:22:6A:B9:C1:D1:CD:71:54:65:37:05:B5:E1:52:0C:DD:F8:6A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F2EED1ACCAF8C948C9B162980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     19446
IP address blocks:        104.224.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1a:cc:af:8c:94:8c:9b:16:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=9440985b-466e-48c8-9ed3-58ba213e9af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:48:0b:2c:90:dd:d5:2d:e5:59:a0:e6:17:
                    ca:92:b3:6e:32:6a:f2:74:0a:09:77:3f:04:69:5b:
                    3a:a4:36:30:77:1b:bd:2e:f3:db:57:27:53:dd:19:
                    17:9c:8c:3b:f0:30:53:b4:e0:26:db:6c:0d:f5:53:
                    0f:7c:f3:66:ff:ae:a8:84:ab:ba:18:7f:dc:f5:57:
                    26:72:be:40:98:43:53:f6:9c:8a:dd:2d:3e:f3:73:
                    6e:5b:49:71:d4:13:94:0c:65:6e:7f:eb:c5:1b:43:
                    f8:c7:21:2d:0f:80:c2:36:8f:34:70:13:64:6c:0a:
                    37:b4:56:eb:93:30:36:73:4d:70:4c:fc:f7:c0:69:
                    32:eb:d4:3b:43:79:03:ce:39:bd:dd:07:8e:a3:46:
                    30:71:b3:14:ed:47:84:98:8c:6c:d2:58:bb:77:79:
                    5e:fe:03:af:1b:b3:62:80:5f:56:61:eb:55:c7:c5:
                    df:f5:b2:34:12:87:a9:1f:7e:de:5f:c0:9a:6d:fe:
                    a4:c2:70:09:7d:c0:29:c3:e9:4e:61:e1:89:68:e1:
                    8e:d4:75:21:9a:32:7a:f3:ed:67:a1:11:3c:61:40:
                    86:d3:6d:55:c5:aa:29:75:fd:ca:e3:ce:20:2e:dc:
                    b5:e0:ce:f8:75:83:bd:c4:f4:dc:85:50:b2:a4:d4:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:22:6A:B9:C1:D1:CD:71:54:65:37:05:B5:E1:52:0C:DD:F8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:59:05:43:98:7c:8f:ca:84:47:44:49:98:13:97:1f:43:
         97:38:d4:09:91:d5:50:8f:d5:7f:0a:59:3e:5d:3d:fc:73:a8:
         93:49:09:61:30:4b:16:ee:7c:4a:5f:a8:a7:9a:d6:f5:9e:c3:
         18:d0:3c:f4:32:b7:84:de:bd:9e:ab:94:69:86:3e:0f:a7:27:
         35:e0:58:62:63:b1:61:77:97:a3:d1:b1:35:23:b3:a4:eb:e8:
         f5:35:3a:f9:6c:f0:2c:ed:33:6f:6b:0c:5e:89:14:a7:10:b0:
         8b:f5:f4:48:7b:88:48:7e:c6:12:90:e7:66:59:c4:2c:a9:8a:
         42:6a:18:47:7c:c2:fc:33:f1:2f:3b:51:ca:ff:a4:9a:3f:e7:
         93:4f:9d:c9:7b:81:9f:ca:0c:97:e6:3e:2e:d2:d4:03:ad:83:
         72:40:fc:50:37:e9:38:75:d1:ac:e9:dc:17:1f:1d:d1:16:ce:
         7c:1f:a9:d0:89:74:81:d2:9f:84:a8:01:a2:01:b9:73:54:17:
         d0:38:6b:c1:cb:2a:84:6e:c8:83:fc:58:b5:c1:c6:5e:b0:40:
         11:a4:6b:56:45:51:68:90:82:3e:fc:7d:95:fa:b9:26:7a:51:
         bb:bc:aa:c5:a0:00:c7:ba:98:79:2c:54:73:99:56:bf:e3:0b:
         b2:62:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:46:47 2026 by rpki-client