Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
File:                     2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa (raw, json)
Hash identifier:          +t+Rdpy56wiRFOKadAFBxsWaTddTwregSP4sw+56xkY=
Subject key identifier:   84:C7:77:92:6A:1F:4D:0E:8B:16:EC:3D:88:02:C5:4A:82:73:E2:8E
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584DC8304315EC4F350785B43480
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     36829
IP address blocks:        104.156.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:43:15:ec:4f:35:07:85:b4:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=e0f301e9-c904-4a95-9f7a-b7316868465e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:59:1c:16:cb:2d:86:d8:c7:e8:ca:e7:32:
                    d2:9a:98:d5:ff:fc:d9:38:8a:9d:06:16:b0:17:4d:
                    51:d3:21:e3:30:d2:f7:ed:b4:06:80:38:42:c2:a3:
                    c9:05:fa:93:e1:a3:3c:1a:0f:eb:24:9e:4a:3f:af:
                    6c:6b:0e:fe:f2:85:43:45:bc:bb:85:e7:cf:46:59:
                    97:2f:29:bb:7b:76:04:8c:82:70:c4:5a:4d:b4:c0:
                    5e:7f:48:b3:a8:89:1e:95:1c:ab:1b:51:3e:6a:61:
                    d9:f7:63:98:68:2a:3a:36:98:8a:30:73:19:76:bf:
                    b0:3a:51:24:2f:a1:90:45:9f:82:17:3f:b8:19:62:
                    ee:b8:45:be:23:6d:1e:c1:39:6d:74:5e:05:35:b0:
                    b7:64:6a:34:1a:24:e0:88:f1:48:58:8e:8e:c2:da:
                    c1:28:63:1e:c0:91:7a:6b:55:f7:5c:6a:e4:74:09:
                    dc:90:4a:d8:0a:ce:1b:c1:36:e6:4b:9d:c7:f2:10:
                    7b:02:01:dc:f8:99:e5:1e:8a:c6:93:29:ae:0d:d6:
                    09:c4:56:00:f9:64:de:8e:db:bb:ff:0b:57:02:b0:
                    48:2c:7b:f8:32:8e:a7:3c:a9:e5:5b:0f:a0:43:91:
                    d6:ef:bb:ca:ac:d9:44:14:b7:0f:b3:97:68:49:52:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C7:77:92:6A:1F:4D:0E:8B:16:EC:3D:88:02:C5:4A:82:73:E2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:81:e5:98:d1:17:e1:57:a7:5d:e8:49:12:c2:dc:df:38:
         4f:01:90:cb:44:a0:1f:fa:31:17:5e:15:a0:35:e7:58:15:97:
         81:97:49:d5:ef:a2:2a:c6:1d:07:96:39:26:9d:84:21:0e:07:
         00:ca:a2:15:98:27:d3:21:58:0c:96:f7:7b:cc:d4:91:25:05:
         06:a4:14:ae:cf:c8:22:22:8a:20:d9:36:f4:57:ce:fe:60:c8:
         ef:18:fe:c5:42:d0:80:e7:3f:b0:63:2e:a6:e6:92:fc:a5:36:
         da:eb:c5:b1:7a:b0:f8:67:27:a3:04:30:d2:e4:d8:e5:9c:83:
         5b:0f:1e:a5:74:ad:c6:4f:c3:eb:5f:1c:56:7b:f4:59:87:90:
         06:41:57:70:1a:e5:4b:b1:7d:c6:af:98:63:4a:e7:67:66:09:
         77:ec:23:50:04:ed:f0:42:c8:b5:b2:d2:15:ed:4a:18:64:bc:
         5f:7b:81:02:e8:f4:12:d2:64:2b:96:71:66:d6:f4:a6:4d:3e:
         ed:f2:c1:8f:2c:17:2d:49:ce:98:8d:a1:cf:fb:b7:d4:0e:e0:
         0d:d1:e3:d7:87:bf:94:b6:c3:35:d1:a3:f8:ac:17:e7:40:99:
         05:71:24:18:e1:f9:9a:f8:ac:36:4b:4b:53:6d:00:ce:75:e2:
         6c:9e:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:08 2026 by rpki-client