Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa
File:                     95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa (raw, json)
Hash identifier:          xH9guRhRjuq8J0jE+6AoEl0HiWNo/Xra8GOLwrqGzWI=
Subject key identifier:   6B:C5:CB:EA:F9:B4:1D:20:3D:A9:85:FB:A0:B1:C7:6F:F6:DE:83:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D95F01983959217CFE0C6D740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        104.93.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:19:83:95:92:17:cf:e0:c6:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=b7f26e10-1dcc-4d5e-ba1b-af60262d9080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:0e:2b:bb:a7:0e:1f:ac:1a:87:fc:30:91:
                    c3:4d:ae:51:9b:04:6f:39:a3:6f:3c:fd:f7:a1:ac:
                    31:13:93:2c:48:27:f9:c6:ab:be:f1:6d:36:48:16:
                    d7:7b:32:9d:8c:a2:94:1d:d0:37:f0:7f:24:7b:1b:
                    b0:e0:6c:ae:74:ad:9b:e2:f2:2b:b5:04:6b:89:c7:
                    0a:7b:04:b3:05:db:3c:9a:b0:13:3d:0e:5b:03:fd:
                    2d:a3:ad:13:9c:fa:8a:39:4d:87:d4:2c:2e:10:3a:
                    ae:d3:94:2c:1f:b0:77:c3:e8:5c:f5:30:12:f4:cf:
                    1d:44:f9:49:e8:ee:f9:81:47:0d:24:34:0d:9a:f0:
                    6e:6c:7a:15:58:31:10:af:34:65:ad:c7:ba:64:3b:
                    3d:26:d6:68:00:56:fd:6f:b3:c6:36:d4:a7:dc:f3:
                    45:80:21:da:c7:54:81:f6:8a:41:4c:02:fc:0b:42:
                    5a:fd:a5:4c:a6:12:fe:98:86:36:a2:bf:7e:6f:6e:
                    5f:24:8c:9a:fb:c8:98:38:f3:9f:9a:7a:1c:71:2f:
                    0b:4e:08:e6:5b:92:dc:cc:59:d3:89:e5:e6:30:41:
                    7e:fa:f5:dd:a4:2d:da:10:f8:b1:9e:4e:bf:8f:da:
                    cd:3d:7c:a9:99:0c:b2:ac:10:92:3e:0c:c4:39:14:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:CB:EA:F9:B4:1D:20:3D:A9:85:FB:A0:B1:C7:6F:F6:DE:83:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.93.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:c5:f2:87:3d:10:f5:16:7d:2f:de:ae:08:77:e3:23:84:
         a3:93:99:d1:ca:3e:e9:dc:d8:28:63:38:0f:8c:4a:ba:34:8b:
         43:6a:6e:1f:1d:68:fd:62:38:3e:51:ad:0d:ae:a5:58:7c:7b:
         ce:d0:d7:c9:ed:86:1f:ec:9a:f9:1e:53:88:86:38:1c:ca:2a:
         69:a8:0c:ed:e7:34:bd:b3:5f:cc:71:34:f6:20:2e:44:40:29:
         27:b4:e8:ab:df:9d:02:bd:35:9b:32:52:47:39:1e:2b:b5:dd:
         97:75:27:f9:14:ff:e2:d4:89:e7:10:0c:ef:26:66:0a:78:e4:
         74:87:e6:f4:63:c4:df:21:f6:6b:96:02:50:18:3a:41:9e:4c:
         dd:67:ce:28:76:85:0a:81:4e:a5:eb:c9:b7:8c:07:ee:c6:df:
         5d:9b:05:35:29:5e:af:7a:6b:fd:17:3b:4b:af:17:b4:2c:6f:
         8f:ee:96:9f:5e:5b:b9:52:67:65:05:08:ef:0b:8c:bb:ff:9b:
         73:f1:c2:dd:e5:c6:d1:0f:c5:5e:7a:1b:e9:f2:b8:f4:74:93:
         22:c6:ac:d7:9a:f1:9d:3e:63:fc:9f:88:01:bb:14:8f:5a:ff:
         c8:62:a3:7b:5b:8b:5d:f9:6d:7d:10:91:08:72:52:5c:de:2f:
         5b:b6:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:39 2026 by rpki-client