Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa
File:                     fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa (raw, json)
Hash identifier:          pCPyHbP/n23J2F8w7YbWyTJx1AameuKQjFBC0NbPMWM=
Subject key identifier:   0C:F1:15:E9:FB:EA:CA:BA:49:47:E3:F1:3B:0C:B1:27:A7:1B:EB:79
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584DAF101DEBA267D6DA79E40F80
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     23470
IP address blocks:        104.194.8.0/24 maxlen: 24
                          104.194.9.0/24 maxlen: 24
                          104.194.10.0/24 maxlen: 24
                          104.194.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1d:eb:a2:67:d6:da:79:e4:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=1045884e-d665-40ef-8ac7-0eaa01c3aa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:fb:bd:52:a7:2d:8d:67:2c:bd:14:d2:90:
                    10:67:aa:de:26:56:19:5d:d8:1c:6b:31:ec:76:82:
                    5a:7e:90:76:ed:aa:42:71:b6:12:0f:70:8f:0f:b0:
                    57:7f:47:42:57:2f:72:0e:ca:f1:e3:67:f9:7b:94:
                    94:5f:d2:59:23:d9:d0:f9:f8:ba:ae:27:7f:24:21:
                    74:f2:88:ef:f3:4c:35:33:82:80:21:26:6e:20:b8:
                    5b:f4:bc:29:10:ae:dd:0c:7f:83:ba:89:49:a4:48:
                    26:13:6e:78:a6:54:9e:c6:48:e0:cc:65:b1:c6:df:
                    fc:18:9f:82:6f:d1:93:a0:99:44:26:a7:dd:16:99:
                    e2:26:5d:77:8d:e3:1a:ed:50:4a:8f:7a:bb:e8:a3:
                    58:2a:ed:68:a5:dd:1f:7c:33:54:23:85:62:f9:c3:
                    83:7b:03:83:82:72:a2:ba:4b:78:23:81:82:d7:40:
                    14:22:83:e8:8a:6d:59:99:8b:17:86:8d:70:1a:32:
                    52:8e:73:4a:fa:e3:06:79:62:4d:44:9d:68:b0:f1:
                    93:f1:85:d0:e9:ab:3b:ec:a7:eb:3b:52:cc:a7:1c:
                    71:8f:f9:75:dd:11:2e:3c:57:d9:39:24:31:7c:e8:
                    9f:af:37:f1:08:90:0e:e8:16:a3:12:f6:e1:d0:d0:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:15:E9:FB:EA:CA:BA:49:47:E3:F1:3B:0C:B1:27:A7:1B:EB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:93:32:ed:45:e7:ba:5a:7d:d3:bc:12:ad:97:cb:5f:58:
         60:c6:df:8f:58:1f:3a:bf:1b:bd:db:df:6f:dc:dd:35:f0:06:
         b5:33:68:c0:7f:48:67:fa:ea:a5:b5:64:17:13:b9:ae:67:31:
         80:84:bb:da:83:95:f4:3d:9d:36:af:5a:1c:d4:49:5a:84:b9:
         b0:75:51:93:56:cf:2b:94:26:0a:88:80:6c:a9:91:a8:e3:93:
         bb:90:ea:e0:65:66:ff:10:6f:0c:3e:0d:ea:fe:b6:cc:2f:7a:
         1f:3b:e7:93:7f:5e:af:b9:d6:e8:0c:ca:ba:9f:e0:e2:ee:cc:
         90:7b:d4:79:8f:f6:c5:0f:24:06:b0:eb:ae:4c:6b:86:65:ac:
         0b:73:05:29:f6:10:50:e5:61:c3:c4:c4:3b:88:f3:98:26:b0:
         64:a8:6f:28:bd:2b:35:cf:f0:3a:1a:0d:d2:89:a0:f3:1a:0e:
         71:27:fd:b7:46:7a:e5:93:46:49:34:12:a5:a1:a9:50:05:c8:
         91:a1:fd:20:a4:db:26:f3:02:2d:26:eb:ab:d0:2a:95:d8:33:
         e0:5b:2b:eb:14:d9:db:c7:b7:15:fd:37:0d:d1:f5:9f:50:73:
         ae:83:30:59:b6:a1:47:8b:30:a3:72:ff:a7:9b:42:88:00:48:
         25:af:96:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEB3romfW2nnkD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
MTA0NTg4NGUtZDY2NS00MGVmLThhYzctMGVhYTAxYzNhYTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBX7vVKnLY1nLL0U0pAQZ6reJlYZXdgcazHs
doJafpB27apCcbYSD3CPD7BXf0dCVy9yDsrx42f5e5SUX9JZI9nQ+fi6rid/JCF0
8ojv80w1M4KAISZuILhb9LwpEK7dDH+DuolJpEgmE254plSexkjgzGWxxt/8GJ+C
b9GToJlEJqfdFpniJl13jeMa7VBKj3q76KNYKu1opd0ffDNUI4Vi+cODewODgnKi
ukt4I4GC10AUIoPoim1ZmYsXho1wGjJSjnNK+uMGeWJNRJ1osPGT8YXQ6as77Kfr
O1LMpxxxj/l13REuPFfZOSQxfOifrzfxCJAO6BajEvbh0NAOiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzxFen76sq6SUfj8TsMsSenG+t5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZmU5MTNlNjktZWEzNS0z
ZTZhLTllNjktYmExNzEwYmJlZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1vkzLtRee6Wn3TvBKtl8tfWGDG349YHzq/G73b32/c3TXwBrUzaMB/
SGf66qW1ZBcTua5nMYCEu9qDlfQ9nTavWhzUSVqEubB1UZNWzyuUJgqIgGypkajj
k7uQ6uBlZv8Qbww+Der+tswveh8755N/Xq+51ugMyrqf4OLuzJB71HmP9sUPJAaw
665Ma4ZlrAtzBSn2EFDlYcPExDuI85gmsGSobyi9KzXP8DoaDdKJoPMaDnEn/bdG
euWTRkk0EqWhqVAFyJGh/SCk2ybzAi0m66vQKpXYM+BbK+sU2dvHtxX9Nw3R9Z9Q
c66DMFm2oUeLMKNy/6ebQogASCWvlmA=
-----END CERTIFICATE-----
Generated at Wed May 13 13:29:45 2026 by rpki-client