Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1891c24c-f625-3421-afe2-e50d78381e9e.roa
File:                     1891c24c-f625-3421-afe2-e50d78381e9e.roa (raw, json)
Hash identifier:          0/1kLmJEsjUxaGVhX+htWJnJ4CzZTHDc6GGpEEi5ayc=
Subject key identifier:   2D:38:FC:DC:F2:6D:6E:9C:7A:2F:DD:3B:68:AC:5A:D8:27:2B:62:FD
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D43AEFA61D5F173301FED9680
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1891c24c-f625-3421-afe2-e50d78381e9e.roa
Signing time:             Mon 23 Mar 2026 13:53:18 +0000
ROA not before:           Mon 23 Mar 2026 13:53:18 +0000
ROA not after:            Sun 21 Jun 2026 13:53:18 +0000
asID:                     62669
IP address blocks:        104.193.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:ae:fa:61:d5:f1:73:30:1f:ed:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 23 13:53:18 2026 GMT
            Not After : Jun 21 13:53:18 2026 GMT
        Subject: CN=644e866c-2d51-4e94-8c77-4d1bbc732838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:82:c0:38:da:23:a2:61:f3:88:c8:a7:e8:
                    64:77:6f:b7:39:50:a5:47:da:18:26:69:86:87:b8:
                    78:1b:7a:7b:b0:92:96:46:bf:3d:ec:b6:2a:62:cb:
                    cc:90:fb:e4:87:cb:0f:bc:cb:d2:d1:2d:b0:18:40:
                    06:89:e9:df:56:43:75:fc:c8:40:cb:95:d2:b3:89:
                    fc:4a:b0:39:bd:1e:37:c8:05:c3:90:f1:37:7f:2f:
                    67:5f:fe:43:ca:75:01:4c:f6:61:08:2c:48:06:f3:
                    54:53:93:c3:d8:3e:15:ec:33:98:b4:d9:3b:95:15:
                    f3:69:35:88:d7:60:2b:48:0a:40:b5:79:48:18:e9:
                    c1:13:6f:b2:0e:8f:62:dc:06:64:9b:e9:cb:a3:fb:
                    2f:aa:e4:5e:96:2f:3d:96:64:b7:69:25:ed:a2:ad:
                    80:2d:75:8c:fe:6d:20:b4:ca:f0:9d:b5:3b:f7:23:
                    43:d3:ff:59:06:e3:48:cb:37:70:6a:a0:7b:6a:8f:
                    8e:a0:af:6d:e6:25:97:77:40:54:15:6b:42:ae:d4:
                    a8:f2:b6:f3:1f:54:5f:3b:a8:23:b5:fa:ec:bf:d7:
                    70:56:de:7a:60:5b:1c:3b:3b:61:f2:82:fa:c5:4e:
                    8c:ab:13:a9:c7:54:ab:5c:a5:a8:69:8e:94:41:63:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:FC:DC:F2:6D:6E:9C:7A:2F:DD:3B:68:AC:5A:D8:27:2B:62:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/1891c24c-f625-3421-afe2-e50d78381e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:15:4f:58:48:16:71:05:cb:d4:93:84:e2:36:13:96:fc:
         1a:0e:56:3a:17:9c:95:f2:79:23:bf:1a:30:73:6f:3d:2e:9d:
         e0:28:10:3a:e2:36:4d:1c:88:d0:77:11:bf:bd:4a:74:c3:d6:
         ee:bb:14:02:a1:e5:a1:7b:b2:e4:cd:d9:a1:9f:ee:67:dc:65:
         cc:73:96:36:f9:c9:ca:a6:8a:0e:d4:45:d4:b3:e6:48:e4:34:
         68:5a:19:ce:56:bd:d2:d2:1d:2e:a0:17:8c:51:a2:36:f3:cb:
         cf:2e:ec:90:4a:6f:35:8e:96:a9:86:f9:3c:e4:6e:b9:62:8d:
         1d:b1:f9:68:f5:3a:ed:95:c6:d7:8c:ab:96:00:1b:02:84:d2:
         6a:b3:1c:d2:81:96:eb:b2:b6:23:da:c2:85:7f:96:e3:9e:fb:
         62:8c:94:c1:ba:0a:ed:bc:d4:76:20:4a:17:7b:fa:18:d5:06:
         4d:64:6f:51:20:d1:c1:c9:8f:c6:78:77:ab:de:ff:34:97:7d:
         c4:94:6a:ec:13:21:d0:8b:1a:6e:2c:8e:89:fb:82:d4:72:50:
         a9:3b:d8:49:32:62:b5:e3:b0:b0:af:87:b1:cb:5d:fe:41:f5:
         e2:74:06:eb:09:7b:ad:5e:2f:e7:35:ef:f0:71:bb:f8:fc:23:
         c8:27:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:51 2026 by rpki-client