Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
File:                     573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa (raw, json)
Hash identifier:          IP0D3XBZvZF903qOcJDUJlPpMuICwGntU9ILcYg4RE0=
Subject key identifier:   89:37:1D:95:C9:11:C4:1B:65:9E:A8:17:91:F3:13:97:6B:D3:9E:9A
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584FAF5892A9C0F2AAF033A997F0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     46261
IP address blocks:        104.218.197.0/24 maxlen: 24
                          104.251.87.0/24 maxlen: 24
                          172.98.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:92:a9:c0:f2:aa:f0:33:a9:97:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=e495f08c-be77-40b8-83fe-a72f459f6f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:83:af:58:ee:ce:a8:9b:44:b5:61:a0:fa:
                    3f:8a:96:a1:35:c1:ca:af:33:0a:d2:37:d3:f6:6f:
                    9e:0d:85:23:fe:03:80:67:5b:48:b1:8a:dc:46:09:
                    13:3e:1a:88:59:cf:56:42:51:f9:61:fc:da:29:4f:
                    43:a1:4e:e5:40:6f:7b:06:91:82:d0:a9:58:44:8d:
                    ec:d0:00:4c:8c:b1:70:22:e0:24:a6:84:83:f1:25:
                    1d:68:ec:5f:20:4a:b1:06:6f:3e:28:b0:fe:87:0f:
                    26:49:42:e8:e5:f9:e6:aa:2d:84:dc:1b:eb:04:60:
                    91:b5:9a:06:58:80:75:d7:37:b4:e5:cf:2f:6e:35:
                    2d:52:09:a0:1d:0d:d7:9a:34:2e:bc:4e:da:03:0e:
                    b4:3b:f7:4c:86:c5:5b:eb:19:fa:92:89:65:28:c2:
                    a0:c1:e4:37:9e:54:2d:8b:3c:9e:f0:71:ed:2e:47:
                    e7:a2:e4:ce:41:a6:ef:3b:9e:18:ab:13:a6:16:e3:
                    72:6b:26:01:5d:27:a2:41:be:1c:7c:9a:b7:a1:8e:
                    16:e3:c9:64:e5:76:72:95:03:4d:0d:1d:3c:fd:c1:
                    ad:31:d4:45:c9:00:73:b9:19:82:d7:00:d1:46:07:
                    73:49:61:f7:52:bf:a3:7d:4f:26:7b:2d:53:01:99:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:1D:95:C9:11:C4:1B:65:9E:A8:17:91:F3:13:97:6B:D3:9E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.197.0/24
                  104.251.87.0/24
                  172.98.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:26:3a:67:e0:dc:9b:5d:9e:1d:4a:25:c3:a2:b6:13:79:43:
         8c:82:f5:23:62:db:42:c7:62:88:49:06:8e:2a:0c:74:eb:bd:
         5c:5a:c4:94:d7:dd:e7:2a:77:63:77:a3:26:1c:d9:df:e8:2d:
         9a:a6:d5:be:77:f4:2a:e4:91:c2:41:e2:71:37:a1:47:3d:64:
         76:b5:fb:9a:30:29:8e:34:5e:0d:a1:d3:b7:89:fc:e8:e1:48:
         06:16:56:57:cb:7c:5c:71:1b:10:94:46:c8:6c:20:a5:83:79:
         17:c2:58:b5:64:84:75:53:e2:00:fe:68:58:da:95:42:de:a6:
         6e:44:84:8d:09:12:fe:9f:d2:f1:48:40:7c:ef:df:85:5b:20:
         7b:1e:00:2a:0a:eb:77:37:10:ca:65:ec:1d:83:31:0e:76:45:
         f9:4a:13:b9:4d:5d:ff:98:8d:92:a4:f6:68:9e:25:9e:f7:0d:
         c4:a9:92:d1:74:9f:74:cf:7c:f7:4e:21:58:b8:ad:47:ea:ea:
         ba:06:2f:c0:ff:57:3e:f4:db:a2:c8:64:e3:42:11:61:58:66:
         07:6e:c5:a2:3e:d0:2e:33:e1:da:02:66:76:ff:12:42:db:07:
         0c:27:00:fa:88:19:6e:ca:a5:ef:d2:8b:01:ff:f7:d4:13:cd:
         cd:3b:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:42 2026 by rpki-client