Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
File:                     78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa (raw, json)
Hash identifier:          mMhF1pYNKFxhXLJkM2cV30x3uB5PfOQUX4FCYP/+zC0=
Subject key identifier:   63:12:DF:F2:BA:DC:7B:5D:9B:E3:BD:37:F0:20:4A:08:B7:36:B2:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D95F01BE4EDB2842124AE2000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     16625
IP address blocks:        104.101.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:1b:e4:ed:b2:84:21:24:ae:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=09ebc1f1-8e1b-449e-bd5d-508ea2c34a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:a6:b0:94:c5:09:5d:e5:f1:cb:21:db:5f:
                    98:62:14:24:b0:92:3c:ab:e4:0f:76:fa:de:20:fe:
                    90:5e:24:a2:f7:87:75:b5:c3:94:64:0e:f9:ce:e5:
                    76:c6:37:9e:b9:a1:18:3e:82:e2:b5:d9:0d:ee:a9:
                    2e:2f:a8:3c:29:2d:93:24:20:2e:a1:25:a2:ea:2a:
                    ac:d5:c6:01:a1:e7:4e:96:e5:34:29:27:66:49:24:
                    3d:38:7a:ad:b0:f4:d0:13:d2:8a:bd:9c:66:a2:d0:
                    e2:1f:bc:23:57:0d:39:1b:2e:ab:f1:18:6b:64:5d:
                    41:92:04:6f:17:b6:db:f0:10:f2:49:9a:c7:2f:8b:
                    ae:4e:73:fe:c3:b3:87:05:a9:ba:67:11:7c:96:a6:
                    9b:d5:d8:ed:55:6b:b4:e2:e8:4b:cd:e7:bc:6a:e7:
                    45:99:54:be:24:65:2f:52:21:07:70:cc:43:32:fa:
                    ce:61:b0:f3:35:fd:ac:1d:69:b3:51:55:c1:67:a1:
                    91:16:02:75:11:77:95:90:0d:ac:26:20:e1:d1:28:
                    a6:ae:d7:33:83:50:1e:1a:10:86:28:26:04:6a:57:
                    f5:1b:76:f4:7b:59:93:25:0d:9b:71:b5:ac:59:06:
                    e8:43:a5:58:82:0d:12:23:2d:a4:1a:17:4d:d4:86:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:DF:F2:BA:DC:7B:5D:9B:E3:BD:37:F0:20:4A:08:B7:36:B2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.101.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:60:f6:8b:a3:4b:27:da:46:c0:c2:0c:86:86:97:9d:78:
         1c:f1:de:63:8e:45:23:db:3b:65:11:e4:56:66:c8:af:db:5a:
         99:e5:c4:b4:80:e7:0a:ba:23:c8:34:0a:47:6a:0e:5f:2f:14:
         c9:31:14:09:64:84:88:4c:69:a7:45:c4:09:a4:5d:b9:84:de:
         fd:71:82:4a:ad:0a:3f:f5:13:d3:c0:b6:95:af:74:61:9d:f6:
         27:01:93:71:83:06:a2:fa:df:bd:35:fa:e7:b7:3d:3d:f1:e6:
         72:a2:d2:66:f0:72:b2:98:db:d0:da:23:de:73:22:f4:d7:be:
         0c:55:ba:cf:b2:51:b5:05:9f:0d:29:bc:c0:74:35:b3:52:18:
         ad:23:e4:ea:84:a6:9e:16:47:4f:b6:24:74:b8:cd:79:f7:49:
         cd:c2:98:56:76:94:f9:46:c2:ba:3e:e1:f3:78:a6:2d:c6:82:
         99:f7:b6:d0:9c:8b:e7:42:55:d5:e2:d6:ec:65:ad:91:db:67:
         89:14:18:b9:72:c4:8f:0c:db:99:3f:c1:ee:af:ad:a3:4f:5d:
         ac:1c:1d:06:e1:73:2c:e5:f7:54:47:b1:1d:a1:46:be:ba:67:
         f4:bb:67:ad:cc:5e:0c:74:f3:14:f4:02:5f:76:16:0f:0e:8c:
         c4:6a:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:08 2026 by rpki-client