Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa
File:                     8105d741-c1f2-3969-8303-f231201524bd.roa (raw, json)
Hash identifier:          +5TXnRCR04SS/dJ1+8n4BAZnBvwtppHzQ/WL2mBHBzc=
Subject key identifier:   51:EF:88:AE:24:5C:E3:BD:25:96:69:01:7E:09:13:F4:A5:8B:E4:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1897B1F91A89FD0728B27680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        104.88.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:b1:f9:1a:89:fd:07:28:b2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=dc46d1cd-4af7-491d-a0ba-7068f38b3367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:b9:ab:6d:ca:6f:7c:d9:89:29:42:19:8b:
                    12:e8:ae:2c:3e:8d:84:71:50:3c:32:a1:e8:9a:d5:
                    ec:dc:83:ba:cd:5c:2f:77:90:7e:be:96:62:63:c4:
                    7f:28:af:be:fe:35:e7:dd:0f:6e:b8:82:33:e3:1d:
                    36:59:8d:7b:f4:81:fa:ac:2a:43:e5:f7:ca:cd:bf:
                    3f:ea:85:5f:85:03:25:f2:e5:83:eb:6c:e7:e8:fe:
                    dc:92:98:7a:44:aa:24:5e:f8:39:7e:4c:70:ac:2c:
                    fa:79:71:b3:b9:e8:dd:92:b3:83:9b:49:9d:34:92:
                    93:3f:61:9f:ff:50:a7:59:63:c3:1e:59:03:00:fd:
                    2e:d0:7a:63:fb:fe:ae:d2:db:3b:3e:67:40:5c:6d:
                    0c:5f:0e:28:7d:da:5d:49:60:52:72:75:36:9c:46:
                    55:39:75:3d:33:17:c0:18:18:fd:e7:1b:90:25:4a:
                    1c:8e:1d:3a:13:5f:00:7c:8b:3c:6c:34:2a:f2:18:
                    6e:28:62:1d:7d:6e:63:f5:84:b3:f3:67:b1:95:1e:
                    33:85:e8:df:a5:df:4a:e7:2a:76:b2:9e:1e:43:c5:
                    02:62:5e:16:ba:8c:02:67:fe:9c:06:fd:1c:38:0f:
                    f1:67:d0:5d:84:7b:24:02:4b:0b:4f:d8:3c:d8:b0:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:88:AE:24:5C:E3:BD:25:96:69:01:7E:09:13:F4:A5:8B:E4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.88.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:57:b0:00:a7:95:1b:8e:ac:20:58:6f:56:fa:41:05:55:
         00:49:54:dc:f6:22:f4:c4:0d:d1:fc:19:01:72:b3:f8:a5:39:
         35:39:ab:87:04:ad:bb:66:10:69:fb:a4:47:d0:3c:b8:cc:52:
         40:db:7d:9b:44:b2:6f:b0:4e:9d:f0:b5:ff:0f:16:34:6b:14:
         88:24:af:43:fa:ba:3e:62:1c:92:42:9d:c0:29:91:79:21:28:
         80:4d:d3:cd:bc:56:c0:b8:08:94:a6:eb:e3:a4:0c:f3:05:c5:
         e7:e1:43:79:38:f6:7b:b9:9a:b3:76:6c:e5:72:f4:78:92:ea:
         a6:c5:4b:a1:ac:ae:cf:2f:86:91:f9:46:3a:d4:c4:65:66:c0:
         b8:e9:67:80:a4:56:3c:86:f4:f8:ec:f3:18:17:75:96:ad:a8:
         ff:85:40:12:38:54:9b:e6:4e:ca:d0:45:db:12:02:ff:6d:3f:
         fa:dd:ff:cf:d7:52:af:1f:f3:de:4c:81:70:1f:68:c4:28:a0:
         7b:51:97:73:3f:f8:80:24:c0:4b:fc:c9:08:41:e3:68:a4:9a:
         3a:84:9f:82:2a:2a:bf:30:04:ba:21:9c:62:a2:a7:25:d4:26:
         41:40:99:8d:19:11:c3:23:fb:69:a9:c8:24:31:0f:22:59:fd:
         89:48:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:08:32 2026 by rpki-client