Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
File:                     d512a5b9-fcfc-3701-9851-813b18aa100a.roa (raw, json)
Hash identifier:          rmXbzX0Iq1Urnew4eqjnGNscf3ErP2IFUAhsK03Xl8Y=
Subject key identifier:   9F:02:6B:B9:37:35:44:33:F7:77:42:42:37:5B:78:FD:2A:AD:7A:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E842A32A35D59830A17E24800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        104.23.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:32:a3:5d:59:83:0a:17:e2:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=66173f1b-19ef-4658-9d7a-09f69dd93570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:92:a3:e9:aa:03:36:d3:99:b7:40:00:80:
                    bb:de:02:40:80:74:70:da:ee:6e:8b:db:e1:9b:dc:
                    e8:66:11:9c:96:50:64:3c:8c:41:c7:6e:eb:69:33:
                    b5:c1:e4:ea:71:30:57:d9:39:4a:91:5d:6c:c0:46:
                    d0:a6:af:60:cd:04:4c:06:5e:98:90:b0:ec:68:54:
                    08:a2:e6:a7:cb:82:dc:6b:10:e6:98:12:2c:05:82:
                    3e:54:af:92:06:bb:61:df:95:85:74:19:08:c8:3b:
                    22:8d:5d:3c:17:76:42:b0:58:42:c7:f6:40:c6:b7:
                    3c:b6:c9:e2:a6:38:57:e3:fa:e2:2e:aa:b4:0e:5d:
                    e3:4b:bb:39:64:af:da:b9:de:f4:68:64:03:46:8b:
                    67:75:18:d3:67:b5:3c:b7:7b:25:37:e7:3f:af:24:
                    ea:9b:2e:7e:69:80:d3:29:3b:9b:73:75:90:cd:ad:
                    ef:ce:45:1d:a2:7a:2e:9e:de:5d:5d:95:75:86:9c:
                    38:dc:d7:b1:e8:8c:ba:0d:86:d4:0f:70:e6:58:09:
                    55:f0:25:2e:62:d5:ad:21:59:ad:18:a9:aa:22:3b:
                    ea:1c:6d:6b:4a:b2:53:e8:a2:b2:3b:80:6c:85:e8:
                    12:2d:75:c2:35:94:dc:f8:ce:ca:84:f4:54:4b:da:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:6B:B9:37:35:44:33:F7:77:42:42:37:5B:78:FD:2A:AD:7A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d512a5b9-fcfc-3701-9851-813b18aa100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:9d:cc:6b:2a:09:13:da:0d:b2:01:b2:fd:3c:d1:07:cd:86:
         71:de:2f:7c:65:da:3e:41:26:c3:97:98:5b:3e:4f:da:24:54:
         ce:94:65:35:56:ac:e8:3a:68:99:2e:66:5c:e1:af:05:cd:67:
         d1:70:b1:7e:89:be:38:d4:7c:2a:ce:dd:d7:2b:00:e2:60:1c:
         30:72:be:cc:a7:3f:6d:23:54:66:0a:f3:31:e6:ef:bb:62:12:
         db:1b:56:75:05:b2:ad:f1:5a:7f:78:3c:22:e5:df:a2:b8:2b:
         01:bb:c3:4e:41:57:b4:a8:c9:07:96:ea:61:81:e0:25:7a:4d:
         12:87:80:a1:b1:a5:8b:72:29:55:3c:06:04:cf:9c:8d:b7:56:
         aa:01:52:f6:ad:42:0c:fd:09:47:80:7f:11:5f:09:cc:df:ed:
         88:9d:2e:c9:10:a7:21:1d:3d:48:5f:28:7d:0b:96:a6:2c:59:
         5a:fd:cf:f0:ff:01:46:2b:a2:a0:0b:78:e7:ac:14:36:cb:a8:
         66:39:95:e8:76:a9:52:ab:5e:fe:52:74:0c:9c:6c:e2:8f:f4:
         ca:7e:9f:9b:a8:96:2b:c6:dd:41:40:90:38:9d:71:7a:89:be:
         39:fd:42:2f:91:b0:59:9d:5a:71:ed:57:83:e4:ff:a7:92:15:
         d4:f2:3e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjKjXVmDChfiSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
NjYxNzNmMWItMTllZi00NjU4LTlkN2EtMDlmNjlkZDkzNTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOOSo+mqAzbTmbdAAIC73gJAgHRw2u5ui9vh
m9zoZhGcllBkPIxBx27raTO1weTqcTBX2TlKkV1swEbQpq9gzQRMBl6YkLDsaFQI
ouany4LcaxDmmBIsBYI+VK+SBrth35WFdBkIyDsijV08F3ZCsFhCx/ZAxrc8tsni
pjhX4/riLqq0Dl3jS7s5ZK/aud70aGQDRotndRjTZ7U8t3slN+c/ryTqmy5+aYDT
KTubc3WQza3vzkUdonount5dXZV1hpw43Nex6Iy6DYbUD3DmWAlV8CUuYtWtIVmt
GKmqIjvqHG1rSrJT6KKyO4BshegSLXXCNZTc+M7KhPRUS9qJiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8Ca7k3NUQz93dCQjdbeP0qrXoXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUxMmE1YjktZmNmYy0z
NzAxLTk4NTEtODEzYjE4YWExMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSdzGsqCRPaDbIBsv080QfNhnHeL3xl2j5BJsOXmFs+T9okVM6UZTVW
rOg6aJkuZlzhrwXNZ9FwsX6JvjjUfCrO3dcrAOJgHDByvsynP20jVGYK8zHm77ti
EtsbVnUFsq3xWn94PCLl36K4KwG7w05BV7SoyQeW6mGB4CV6TRKHgKGxpYtyKVU8
BgTPnI23VqoBUvatQgz9CUeAfxFfCczf7YidLskQpyEdPUhfKH0LlqYsWVr9z/D/
AUYroqALeOesFDbLqGY5leh2qVKrXv5SdAycbOKP9Mp+n5uolivG3UFAkDidcXqJ
vjn9Qi+RsFmdWnHtV4Pk/6eSFdTyPl4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:30:45 2026 by rpki-client