Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f373066f-42f6-37ca-8c16-4901c59d6804.roa
File:                     f373066f-42f6-37ca-8c16-4901c59d6804.roa (raw, json)
Hash identifier:          Am94+YbGWmFJ450l5FSbnvy9kQIPJP7Wv0ZR0YDLXFI=
Subject key identifier:   D1:F3:A5:6D:72:B6:7F:53:2F:53:BA:AE:6D:23:B7:5B:45:C7:83:FB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA72DFBFE1D874864DB680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f373066f-42f6-37ca-8c16-4901c59d6804.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        104.156.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:72:df:bf:e1:d8:74:86:4d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=73cd4802-935e-4530-a027-8e9b9ed3474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:5a:15:64:7f:fa:6a:f4:86:10:84:e1:82:
                    d6:ea:ef:ac:b9:f4:07:f9:95:21:e9:d4:7a:d0:04:
                    2a:8a:f3:50:78:03:50:0b:35:32:9c:38:12:bb:5b:
                    25:94:4c:99:50:ca:a3:b8:ab:b1:23:4d:ae:01:59:
                    8b:17:51:05:dd:b0:c7:4f:c2:44:33:82:ad:37:c3:
                    bc:0f:ab:0c:09:7c:07:3d:fb:f7:b7:f2:89:eb:db:
                    47:88:d9:9d:d1:89:b9:48:a4:b5:98:f1:e0:eb:b4:
                    80:fb:b4:68:86:48:2d:34:33:08:91:94:54:3c:a9:
                    67:fa:94:e0:c7:cd:cf:2f:d7:6a:0b:27:fe:6d:31:
                    e7:ab:32:e2:59:1b:eb:ed:cc:25:86:68:08:44:f1:
                    f1:f0:c5:a1:4f:fc:97:4c:86:c5:ba:52:57:27:7f:
                    97:f3:f5:d9:ae:57:c1:0d:f7:d1:3a:6c:f9:22:fd:
                    62:ac:2a:54:19:32:78:f1:28:d2:59:40:bc:f9:7f:
                    5a:ff:58:70:a4:39:29:85:a2:1c:3e:fd:3c:ce:61:
                    80:6b:b9:df:10:02:9f:51:a9:20:84:b4:0f:4f:f2:
                    59:eb:84:3e:8d:21:04:4b:72:d5:e2:8a:49:03:fc:
                    d2:51:e4:e6:2d:64:20:4a:bb:a9:d1:1d:57:6a:c8:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F3:A5:6D:72:B6:7F:53:2F:53:BA:AE:6D:23:B7:5B:45:C7:83:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f373066f-42f6-37ca-8c16-4901c59d6804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:59:83:f6:d0:f7:d6:e2:b8:4c:36:96:a5:ec:48:17:66:
         97:30:f4:a2:5b:cb:dc:1a:6e:bd:bb:98:36:72:50:af:3d:f5:
         b4:11:99:5e:32:d4:dd:05:dc:78:18:d0:bf:00:ba:a7:e1:23:
         ab:7e:6b:ad:78:72:73:08:8a:bf:ed:da:e4:1e:fd:d4:0f:59:
         9c:d7:37:8d:8d:91:94:90:8f:64:ad:97:26:79:0b:3f:0e:2f:
         38:11:e4:56:0d:d3:90:7a:4f:68:8d:07:c6:3e:54:08:94:0f:
         b2:92:57:db:37:4d:22:e5:3e:fc:c4:54:df:5c:f8:a1:d8:23:
         39:63:57:ab:36:f9:9a:2a:1c:d6:6f:b0:d3:40:05:0f:5c:28:
         8c:e1:7e:aa:51:89:57:2d:0d:14:c6:1d:91:5c:0a:9e:41:48:
         84:88:a3:14:3e:e4:4c:78:1f:0c:32:22:c7:22:63:e4:16:48:
         2c:b6:6f:90:5a:8a:a8:67:b8:13:4d:28:81:bd:72:27:b5:3e:
         70:c0:4f:2d:37:bf:01:a6:53:67:72:05:a0:22:c1:d8:e7:d6:
         91:bf:77:78:4e:5c:61:7b:c4:36:72:19:5c:43:50:66:42:35:
         7b:bb:f0:0b:f2:09:ea:9e:e5:e2:3d:40:91:99:57:47:96:1c:
         67:da:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:35:20 2026 by rpki-client