Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa
File:                     25bc7282-e47d-3707-a8b1-f87149bca794.roa (raw, json)
Hash identifier:          /jiJfCrH+0LcZXTX+ikrVbqAjDs2vhADp2MyH07d1C0=
Subject key identifier:   FF:A8:3C:FA:FC:B5:3D:C2:E3:68:26:CF:08:B3:28:18:EC:4C:5C:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D95F0132351C76341AF563980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        104.97.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:13:23:51:c7:63:41:af:56:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=202a6231-e13e-46bd-8c79-76451cd6767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:d8:4f:d1:96:79:49:c6:af:68:70:c5:f4:
                    59:73:7d:ab:8f:73:ef:03:85:e8:ab:21:f8:d0:47:
                    86:4f:73:2c:ae:71:bc:d7:3a:71:c5:2a:ac:92:dc:
                    fd:98:c8:48:91:e8:5d:30:be:6f:b5:45:0a:79:a4:
                    27:f9:d8:63:b0:0c:e3:51:67:59:49:03:96:1c:08:
                    05:ca:28:a7:07:23:b5:57:59:2b:a4:35:59:4c:59:
                    9b:80:ea:b6:25:d8:ca:ed:27:24:61:ec:cb:b5:97:
                    bb:3b:76:c4:da:94:cc:df:8e:30:50:5f:73:10:87:
                    91:48:87:2a:09:39:cd:9a:8a:32:e4:ae:bd:e5:ad:
                    70:07:87:85:2d:74:95:3f:27:6d:e1:b9:b8:e1:b4:
                    1a:65:57:33:e5:d5:fd:66:60:35:a8:73:83:4c:13:
                    07:98:76:f2:ff:dc:fc:32:c2:8f:da:aa:63:e7:5e:
                    23:12:66:a1:b2:a8:2f:1c:41:17:2f:b4:b6:f2:1d:
                    64:d5:a9:bb:0c:e4:48:26:b1:e0:75:1c:b7:5d:94:
                    15:16:8f:41:fe:1b:d9:20:0d:82:d7:70:7f:ab:d3:
                    09:4a:c4:7b:23:1d:81:55:12:7d:1a:5d:59:a4:c9:
                    d8:2a:bd:ea:61:29:ab:98:3a:b4:60:de:b6:4c:00:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:3C:FA:FC:B5:3D:C2:E3:68:26:CF:08:B3:28:18:EC:4C:5C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.97.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:20:ef:f3:ca:94:d6:41:de:aa:20:71:20:cd:ae:71:15:19:
         72:4a:be:96:37:85:a9:d5:28:be:d0:54:71:00:8c:50:27:c5:
         c4:8f:82:49:a3:89:65:a8:1e:63:c6:54:d8:3f:65:7d:27:3e:
         9d:54:42:5f:a5:f7:37:1f:86:10:91:46:a8:c5:68:a3:c6:31:
         ac:2d:c2:d6:c2:ee:03:19:c0:ab:e3:0c:f3:91:82:58:49:35:
         db:97:d9:c8:ab:ce:56:50:77:3a:76:b7:e0:7a:e4:e3:e7:c0:
         79:b1:13:94:93:5a:cf:03:c9:48:3d:fd:24:42:04:ae:5f:87:
         cf:0c:bb:c9:f8:69:e7:b9:b3:db:a5:3c:c6:07:6d:85:f7:28:
         e5:fa:68:bf:00:f4:a9:94:50:e2:fc:1f:a5:43:51:df:c2:0d:
         d0:ae:7f:f5:34:9b:c3:c1:bb:0b:12:d0:ee:62:57:15:39:0f:
         50:1f:62:0a:23:2b:fe:4f:9e:d7:cb:22:2c:12:f3:50:0a:1b:
         f0:aa:0b:c8:7f:12:af:46:88:ea:d2:0e:a6:38:da:02:68:c3:
         c8:61:a2:30:05:c4:fb:23:c1:e4:0c:43:3a:6a:03:61:d7:5a:
         43:2d:a8:1c:88:1c:93:59:6d:15:ad:6d:a0:ab:13:8d:af:56:
         b7:9c:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:48 2026 by rpki-client