Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/00013afb-3174-34c8-8372-be69e2fb649c.roa
File:                     00013afb-3174-34c8-8372-be69e2fb649c.roa (raw, json)
Hash identifier:          K3jWXxe7IbA9+XMUumwUXWSfqW/u9bqBk4z3swgp/yM=
Subject key identifier:   50:8E:E5:6F:EC:65:97:97:40:BE:A0:0B:4D:98:0C:77:D6:FB:F6:5B
Certificate issuer:       /CN=17630881-05a0-4008-a2fb-162570ec3877
Certificate serial:       010D0C9F4328584F06723556BE0B776534430A40
Authority key identifier: 98:AE:9F:65:B6:84:55:1A:AE:EC:2D:17:E2:EE:E5:3A:98:C6:90:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/00013afb-3174-34c8-8372-be69e2fb649c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        104.255.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/17630881-05a0-4008-a2fb-162570ec3877.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/17630881-05a0-4008-a2fb-162570ec3877.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:35:56:be:0b:77:65:34:43:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17630881-05a0-4008-a2fb-162570ec3877
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=cd29c2ae-35af-4d77-a4c7-81facae67866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:4e:81:78:32:41:84:ac:21:3d:3d:bf:5c:
                    ab:d1:52:ab:95:55:36:6b:b8:83:3c:66:42:5a:ca:
                    09:11:9b:c8:26:d3:3a:f5:0a:09:cd:c7:03:be:93:
                    04:38:9f:fc:46:e8:a4:ca:ab:5d:23:e0:4a:c3:f4:
                    b6:fd:9e:b3:3b:2c:6c:34:fe:89:7d:76:b8:6a:98:
                    4d:83:fc:60:00:6e:d1:85:8f:9e:81:d7:ab:70:b3:
                    73:cf:a6:3c:a3:a2:1e:0b:15:1c:ca:5f:c1:3b:62:
                    7a:c7:3e:80:ea:30:fb:3c:c2:99:6f:f4:1a:b4:60:
                    98:c9:ef:84:9b:05:bc:d1:df:72:d5:06:77:8e:b0:
                    64:fb:08:1f:aa:f2:a4:de:e8:a4:d2:00:2d:d1:aa:
                    2f:1d:b9:99:15:6e:b8:79:42:25:1d:5b:ea:07:b5:
                    28:86:48:17:7a:4e:da:1c:81:fc:9d:54:b7:0a:6f:
                    60:e9:30:ab:0c:66:02:a5:b3:8c:48:3a:2c:c5:5d:
                    41:65:2b:1f:d6:3c:1a:a6:7f:19:c9:64:1f:d4:ba:
                    75:59:97:3d:09:f2:d9:4a:29:10:f6:bf:ea:4c:47:
                    2c:ec:f9:cb:9a:98:69:b4:eb:7b:c0:47:34:bc:db:
                    bf:e8:1e:83:98:20:30:68:bb:9d:cd:e2:61:87:a1:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:E5:6F:EC:65:97:97:40:BE:A0:0B:4D:98:0C:77:D6:FB:F6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/00013afb-3174-34c8-8372-be69e2fb649c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877/17630881-05a0-4008-a2fb-162570ec3877.crl

            X509v3 Authority Key Identifier:
                keyid:98:AE:9F:65:B6:84:55:1A:AE:EC:2D:17:E2:EE:E5:3A:98:C6:90:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17630881-05a0-4008-a2fb-162570ec3877.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:07:8b:98:bf:75:d5:53:ca:6d:52:ca:93:26:0c:a4:09:
         ad:cd:b4:c2:d3:11:d5:19:53:35:7f:35:81:1d:bb:ba:40:0b:
         71:b9:66:fd:c5:77:fb:a6:91:c7:ab:ed:ec:8e:ad:77:4b:79:
         d8:68:75:21:ad:a6:81:b1:12:25:92:8f:da:6e:b4:b7:3f:1f:
         8d:92:c5:96:1b:ce:57:45:61:20:df:79:87:9d:ee:b7:86:41:
         48:5a:74:a0:f2:ae:11:ec:ce:7a:ed:e9:96:65:ae:4e:13:93:
         a5:61:96:98:94:c4:30:db:d5:e3:3a:92:0e:52:b9:f2:cb:17:
         06:14:a0:9c:a5:c5:7f:a1:1e:1d:bb:a1:d3:85:0b:6f:5a:3c:
         50:96:a2:dc:f7:70:62:36:ed:e6:11:c4:b6:68:7a:ce:a8:a7:
         50:6a:b4:9e:67:a0:33:19:90:ec:b7:cc:1a:5d:75:fe:ce:f9:
         fe:53:c0:c6:40:e5:4e:52:02:36:bd:93:2a:dd:1d:f8:f4:15:
         43:53:e6:a5:6e:25:5e:a6:50:30:d8:a4:90:b3:1d:cd:74:e2:
         11:c0:e8:10:00:32:77:45:55:32:10:c9:e1:68:c1:0e:9a:c3:
         77:90:69:63:25:ec:95:8f:48:dd:11:48:d3:a7:bc:94:70:ca:
         77:c5:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:31 2026 by rpki-client