Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa
File:                     522b5138-3ae4-3114-b140-e183ee88ec90.roa (raw, json)
Hash identifier:          szQtsgD41B9UI2Q4LZd9dbaTGaKWIJmOFIxKbuasyKw=
Subject key identifier:   F0:BE:D7:53:F2:6B:09:CD:13:31:18:B4:3F:4A:66:93:3A:64:2F:D7
Certificate issuer:       /CN=2780f5b3-6e58-46dc-9841-4c845dccd557
Certificate serial:       010D0C9F4328584E7FFA2DE94DEF264D6C178480
Authority key identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     11215
IP address blocks:        104.254.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2d:e9:4d:ef:26:4d:6c:17:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2780f5b3-6e58-46dc-9841-4c845dccd557
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=c5a01aeb-6cd2-4fbb-9a43-b201d3c9f748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:3b:19:76:00:9a:2d:e9:5b:24:08:9d:b0:
                    5c:be:91:21:ec:0c:b0:ae:f3:82:c9:72:b3:26:ad:
                    8c:79:86:86:5f:69:c4:a4:d3:4e:a3:84:1b:f6:bd:
                    9c:34:e8:a0:63:99:91:9a:fd:2b:c2:c2:3b:92:53:
                    56:91:51:59:1f:59:f7:07:c5:dd:c9:04:95:c2:13:
                    c2:1d:0e:f6:10:be:0a:0f:5e:5e:e3:0a:4f:f5:ef:
                    cc:e9:72:33:65:01:91:a9:af:13:c0:8d:20:fa:d1:
                    2e:cd:c8:58:10:27:d7:d7:5c:21:07:76:ab:e3:13:
                    af:13:66:c8:8a:c0:34:7b:70:bb:1e:61:88:79:8d:
                    44:c8:46:e2:45:11:04:b9:94:b9:b3:34:c6:27:20:
                    9f:fb:fc:2e:9f:1a:9d:1a:79:23:b5:60:32:bd:24:
                    48:91:66:0a:4e:ec:2d:7c:b1:87:7d:6e:8c:b9:6e:
                    1f:c5:75:cb:31:27:2a:af:d8:8e:0e:80:ec:b5:b0:
                    8f:98:5a:85:40:82:2a:b0:4a:8e:56:f2:a6:a2:77:
                    63:38:21:2e:c1:a1:d3:f3:b1:e2:ca:9d:27:ca:86:
                    76:56:ee:ee:1b:2d:34:e5:95:60:ce:0a:4e:5e:34:
                    6c:58:c2:65:d4:d4:10:3c:cd:dc:be:6a:1e:ce:1c:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:D7:53:F2:6B:09:CD:13:31:18:B4:3F:4A:66:93:3A:64:2F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/522b5138-3ae4-3114-b140-e183ee88ec90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.crl

            X509v3 Authority Key Identifier:
                keyid:28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:42:f5:69:c5:d3:98:e5:0d:5e:2a:69:05:20:d9:7d:67:51:
         85:4d:79:0b:81:0c:7a:15:75:92:bd:f6:15:0b:1e:6c:40:2d:
         fb:1b:73:8b:55:d6:c8:3c:25:f5:36:78:91:e2:3c:a2:a5:5f:
         c4:cb:0f:b0:85:85:1f:1e:64:15:d2:e5:01:b2:ce:bc:15:db:
         36:92:bf:75:05:df:b3:da:10:d3:ce:eb:23:5c:90:63:25:ec:
         06:74:09:3a:b0:68:8d:4a:f3:eb:18:6b:a0:e8:bb:3d:6a:e5:
         bf:b5:c3:0a:20:66:1b:20:0d:e9:63:b1:07:fa:8f:52:dc:ed:
         56:ce:12:1d:07:c0:3c:89:04:da:34:74:ad:25:ac:e2:f0:53:
         aa:32:89:9b:5d:0c:3d:72:59:8a:54:ac:dc:9d:81:c4:dd:79:
         0e:fd:ca:75:4c:ed:6b:ab:c1:25:f1:cb:5f:f4:57:38:d2:d3:
         ec:4d:20:ad:5e:df:2f:1b:84:50:68:93:9d:6d:94:51:b7:ee:
         cb:9c:00:46:7b:5f:a9:ae:ec:8c:6e:83:40:4c:4e:6c:3a:e1:
         97:b7:bb:ff:da:1a:01:de:8d:55:ce:49:25:6d:4f:70:2c:b0:
         0f:6b:64:64:43:ee:2b:2f:46:e2:63:52:60:f6:f9:e5:34:4c:
         e0:12:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:14 2026 by rpki-client