Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90813daa-f6a8-3eb2-b362-707bdaf734cf.roa
File:                     90813daa-f6a8-3eb2-b362-707bdaf734cf.roa (raw, json)
Hash identifier:          04oqWLi9LEB26ZIoyn3TcW2AZmudnTgj0f3y1uPB65M=
Subject key identifier:   17:92:19:BB:A8:5D:E8:5E:85:E5:57:5C:72:07:D6:72:30:15:51:68
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F13024B1174C00536518C2C6C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90813daa-f6a8-3eb2-b362-707bdaf734cf.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        104.22.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:4b:11:74:c0:05:36:51:8c:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=2a7b2857-f5d6-489d-a24a-c6ffeeb970af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:cd:fe:a7:f3:99:0b:1e:79:97:84:c9:63:
                    bf:07:3e:14:16:5c:85:89:18:51:49:1d:7b:e7:cb:
                    42:21:b8:e3:93:83:10:e6:e6:a8:50:35:e5:73:06:
                    ae:0e:c7:26:93:fe:f0:cf:15:d4:46:6a:aa:2c:5a:
                    91:60:29:79:f4:d1:e0:c6:40:fd:c7:de:73:45:d6:
                    be:d9:de:d5:2c:da:8a:07:83:38:78:f9:a9:d6:c0:
                    d1:13:90:38:8d:35:54:3b:84:a5:70:a7:7d:b0:16:
                    1a:45:fc:e3:bb:f1:3e:cd:4c:4a:e7:3d:e8:4b:69:
                    70:ba:72:9e:12:ec:6c:d9:61:39:d3:85:a5:5c:44:
                    08:7e:5a:bb:af:70:de:bf:c2:5c:33:f8:da:02:69:
                    39:f7:e5:88:59:09:e8:73:02:bd:fd:89:42:a5:2e:
                    6d:11:9e:5d:aa:23:06:ec:e8:70:5f:fe:db:76:88:
                    b1:7b:a0:b2:df:cd:b7:93:aa:55:8e:90:89:ed:4e:
                    3c:49:bc:9c:39:44:7b:14:d8:4e:9e:b9:89:53:41:
                    66:76:ac:0e:e8:51:dc:0a:71:63:ac:d0:91:24:4d:
                    58:7f:cb:f3:6d:11:bd:45:2e:ea:ad:97:7b:a9:dc:
                    9c:31:51:6a:4f:6c:cd:48:fb:8c:59:03:5d:4f:ee:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:19:BB:A8:5D:E8:5E:85:E5:57:5C:72:07:D6:72:30:15:51:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90813daa-f6a8-3eb2-b362-707bdaf734cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3c:96:e8:1a:19:c3:1c:dd:70:bc:83:40:3d:d7:6d:98:88:
         1c:9f:a2:ab:0a:f9:df:03:8b:45:2e:3a:74:8c:ae:b9:25:e0:
         ec:cb:33:67:38:65:5f:16:21:1e:1c:b8:88:d5:70:1a:42:90:
         92:0d:d8:02:5a:40:ef:ff:74:df:f0:30:c8:29:54:d5:57:4a:
         4e:5f:e2:36:77:a4:e6:8e:ee:86:c0:b2:d8:4c:ec:0f:23:86:
         6a:6b:99:2e:e4:06:65:4e:1c:61:8c:92:ad:d5:05:fd:7a:ff:
         da:81:44:e4:56:ef:fd:c3:3d:6d:31:14:36:6f:99:07:f0:e0:
         a2:f1:a5:ef:65:d1:4f:cc:af:79:d7:1e:5c:9c:74:89:41:d7:
         b8:f8:a5:9c:61:29:1c:a2:44:a4:50:8b:87:91:67:c4:82:2d:
         78:f9:6f:f2:12:f2:db:5b:ac:02:1e:46:d5:63:ac:0e:a0:81:
         0e:bd:8a:1d:82:3b:03:2f:1e:9e:cc:6f:53:0f:18:72:a9:35:
         15:57:df:17:ef:31:c5:32:fe:cf:12:cf:db:1b:19:f3:16:fd:
         3c:b6:5d:74:9a:9b:91:ff:e7:07:2a:d8:2e:e1:f3:a3:f4:9a:
         5f:d5:41:41:b1:81:69:20:93:56:89:85:23:fa:9b:c1:b3:ae:
         2d:23:c3:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAksRdMAFNlGMLGwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
MmE3YjI4NTctZjVkNi00ODlkLWEyNGEtYzZmZmVlYjk3MGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKnN/qfzmQseeZeEyWO/Bz4UFlyFiRhRSR17
58tCIbjjk4MQ5uaoUDXlcwauDscmk/7wzxXURmqqLFqRYCl59NHgxkD9x95zRda+
2d7VLNqKB4M4ePmp1sDRE5A4jTVUO4SlcKd9sBYaRfzju/E+zUxK5z3oS2lwunKe
Euxs2WE504WlXEQIflq7r3Dev8JcM/jaAmk59+WIWQnocwK9/YlCpS5tEZ5dqiMG
7OhwX/7bdoixe6Cy3823k6pVjpCJ7U48SbycOUR7FNhOnrmJU0FmdqwO6FHcCnFj
rNCRJE1Yf8vzbRG9RS7qrZd7qdycMVFqT2zNSPuMWQNdT+7tzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBeSGbuoXeheheVXXHIH1nIwFVFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTA4MTNkYWEtZjZhOC0z
ZWIyLWIzNjItNzA3YmRhZjczNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC88lugaGcMc3XC8g0A9122YiByfoqsK+d8Di0UuOnSMrrkl4OzLM2c4
ZV8WIR4cuIjVcBpCkJIN2AJaQO//dN/wMMgpVNVXSk5f4jZ3pOaO7obAsthM7A8j
hmprmS7kBmVOHGGMkq3VBf16/9qBRORW7/3DPW0xFDZvmQfw4KLxpe9l0U/Mr3nX
HlycdIlB17j4pZxhKRyiRKRQi4eRZ8SCLXj5b/IS8ttbrAIeRtVjrA6ggQ69ih2C
OwMvHp7Mb1MPGHKpNRVX3xfvMcUy/s8Sz9sbGfMW/Ty2XXSam5H/5wcq2C7h86P0
ml/VQUGxgWkgk1aJhSP6m8Gzri0jw5U=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:12:30 2026 by rpki-client