Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5190871a-4c67-3920-bbfd-fae81b969794.roa
File:                     5190871a-4c67-3920-bbfd-fae81b969794.roa (raw, json)
Hash identifier:          Jl0GdqaSA7CcS2xDIDLyMyiVqfC5z1k3YouYnwx+p4U=
Subject key identifier:   4F:6F:38:01:F9:28:B5:97:20:13:66:E7:50:F5:9F:21:5F:29:37:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1897B9FE0D6BA20CB0717200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5190871a-4c67-3920-bbfd-fae81b969794.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        104.86.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:b9:fe:0d:6b:a2:0c:b0:71:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=fcf9ef33-ca42-48f3-8fda-46bb43cebe67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:de:94:60:76:ab:1b:59:ed:c5:fa:b8:bb:
                    e4:0f:3e:ce:7c:c4:94:a7:84:89:84:40:99:7b:6c:
                    82:92:08:33:ed:05:54:fa:e1:24:25:c6:77:e5:e0:
                    b6:45:2c:d5:c6:63:a8:bb:7a:dc:fd:8d:c2:23:98:
                    28:63:a8:dd:ce:1d:55:79:8e:d9:52:ea:7c:33:a3:
                    d8:c4:33:c4:9a:07:ad:7d:ef:bb:e7:13:92:d9:09:
                    e0:a2:b3:6d:ee:3c:fd:32:4b:5e:83:a1:b3:e3:80:
                    05:ec:48:6a:1a:26:7a:e0:a3:3a:18:c1:ff:1b:21:
                    ef:30:23:35:4f:1b:b7:c0:1e:29:15:c1:f7:ed:fa:
                    83:7b:8a:2d:9a:31:01:e5:c8:83:95:9a:e1:52:9f:
                    0e:81:0f:7e:fc:23:dd:19:13:14:b1:5e:c1:b1:cb:
                    37:94:50:f5:46:06:77:ad:ba:1c:ac:b9:b3:37:a3:
                    0a:1f:63:4f:a8:ec:29:8a:8f:72:67:0f:ad:bc:29:
                    60:e1:51:bd:a1:fa:3a:8e:e0:d9:f2:db:31:d6:5f:
                    c3:11:a8:9d:16:6f:4c:73:b7:ad:81:a9:44:55:4f:
                    fb:bd:ce:bf:ac:5a:38:ad:65:0f:9c:65:f8:a2:e7:
                    ba:0b:cf:51:45:37:a3:43:e8:07:b7:36:cd:91:98:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:38:01:F9:28:B5:97:20:13:66:E7:50:F5:9F:21:5F:29:37:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5190871a-4c67-3920-bbfd-fae81b969794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.86.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:4c:1d:36:1e:28:b5:d0:dd:85:23:cc:c2:99:4b:c9:bd:
         57:b2:c4:69:3b:88:f2:db:28:eb:76:5b:9d:1f:1d:d7:3d:84:
         e4:f5:4d:92:81:e4:58:18:37:08:a5:0f:ea:54:f1:29:62:12:
         66:f6:de:b9:e7:0e:7b:de:5c:3b:f4:cd:a3:93:4d:14:42:1d:
         99:4b:6e:16:9a:05:22:dc:40:d3:97:67:58:73:03:2c:1f:9c:
         27:c3:4c:39:18:ba:b9:47:5f:56:a7:10:da:be:4a:6b:58:b9:
         00:76:33:45:0a:c9:56:e6:e1:4f:df:8b:70:a7:f3:9e:08:2a:
         b9:61:8d:65:74:e2:b2:ab:d4:39:9a:e7:6f:68:fe:ea:21:38:
         aa:b7:55:43:c8:7c:5b:79:a8:08:37:78:af:9a:5b:0b:5c:84:
         12:21:41:57:e2:4a:c0:03:07:c0:9b:a7:5d:77:8a:91:93:00:
         53:cb:89:96:77:01:16:43:cb:ea:65:5f:37:97:0f:0e:0e:55:
         72:0a:af:08:79:83:d5:45:52:58:e6:de:e5:fb:be:2a:e6:d6:
         fc:46:3d:82:9e:1f:e7:61:57:f6:44:07:2e:b2:36:e6:93:b0:
         51:b8:04:5b:0d:b8:3e:41:b9:5f:b0:8f:a0:41:f2:85:7c:73:
         a6:91:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:40:59 2026 by rpki-client