Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/fd7df5b8-c73c-319a-b95b-bffa1a125af1.roa
File:                     fd7df5b8-c73c-319a-b95b-bffa1a125af1.roa (raw, json)
Hash identifier:          qxE2VBqGJcEIxmbStHidwBN9dC5MEBwmbvRj0ivrssw=
Subject key identifier:   13:BA:6C:A8:CD:4F:53:C3:F8:2D:28:D7:34:07:AC:54:28:02:79:7F
Certificate issuer:       /CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
Certificate serial:       010D0C9F4328584E6B0A10DE01F50E8E2614E8A0
Authority key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/fd7df5b8-c73c-319a-b95b-bffa1a125af1.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     12213
IP address blocks:        104.224.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:10:de:01:f5:0e:8e:26:14:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=508d4147-60ab-421d-8425-b662764f3ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a1:9f:c8:d0:ee:a8:84:2a:fc:0d:24:df:81:
                    db:6c:e9:e2:c0:69:fb:60:61:e9:83:26:c2:14:46:
                    ec:e7:b5:4e:75:17:45:11:3f:b8:08:a5:c0:de:e0:
                    c2:89:e0:69:40:7f:69:cb:19:3d:0a:f1:76:d5:34:
                    6e:7f:7a:bc:4c:dd:8d:ed:72:8f:d7:5e:53:49:b7:
                    1c:e7:ff:43:c1:ce:f5:5b:26:b1:99:14:dc:e9:15:
                    08:50:37:c8:d1:b1:28:54:a0:14:69:21:b6:1c:7d:
                    81:34:c9:2e:66:a2:cd:89:30:d5:8b:75:21:9d:6d:
                    9b:36:f7:61:68:37:74:c7:a5:c9:5d:98:af:9f:99:
                    19:7c:3a:3f:bb:9b:66:4c:18:2c:27:24:69:18:b2:
                    b8:99:0f:de:b7:80:ca:88:9c:68:90:ba:ed:d6:10:
                    c1:6b:c8:be:63:4e:0d:58:d7:b4:84:4b:cc:55:a1:
                    00:92:a1:97:af:e7:cd:7e:f1:50:62:b7:22:8d:2e:
                    54:38:4a:90:3d:7b:25:6f:2e:01:24:91:20:ef:c7:
                    17:16:61:5f:3a:7d:af:77:bb:e6:92:0c:66:92:1a:
                    91:b2:8a:80:04:91:3e:5a:25:cd:85:d6:1d:30:3c:
                    8a:77:f1:4a:ab:f6:80:af:ca:7f:19:d2:af:b4:fa:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BA:6C:A8:CD:4F:53:C3:F8:2D:28:D7:34:07:AC:54:28:02:79:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/fd7df5b8-c73c-319a-b95b-bffa1a125af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4b:4d:21:f7:a2:b6:a4:30:15:f2:71:20:f2:9c:d7:c7:19:
         6b:fc:7c:eb:ba:9c:c7:90:8d:0c:2e:5a:ac:85:68:13:32:6e:
         15:67:2a:77:d9:a8:28:49:c9:20:e3:af:ed:71:70:51:57:13:
         90:31:61:42:68:b0:4e:84:94:57:6e:4c:13:4e:f5:9a:b9:94:
         04:50:46:26:d3:a7:2d:b6:ea:2f:83:93:af:47:d3:6f:f5:45:
         a8:ce:70:eb:6c:56:d5:c9:e8:6c:80:80:50:b4:03:f7:ff:ba:
         28:c2:cd:0b:62:37:46:14:a4:b2:81:e0:71:29:2b:82:2a:e0:
         be:84:a0:43:8e:34:c7:f7:18:c0:bf:9a:0c:c5:9c:cc:65:3f:
         d2:79:14:70:1e:f5:ba:f0:ff:88:e4:e8:e6:6d:3b:f2:74:ee:
         91:2e:8d:83:a2:8c:bd:fc:57:f6:78:4e:6e:e2:94:20:92:65:
         f1:21:aa:89:ee:ed:c0:36:00:be:39:b5:8e:e8:97:83:20:a6:
         fc:79:38:9e:ee:7b:cf:d9:34:aa:0e:6e:b3:3f:f5:30:91:ba:
         9d:2e:6f:76:53:89:ac:a9:84:dd:ef:c9:07:b9:ad:54:d4:3f:
         56:34:a3:f3:4a:4c:09:80:c2:5b:a2:f3:18:f5:d0:52:92:55:
         fc:4c:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:38 2026 by rpki-client