Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
File:                     85f972da-dbfc-3722-afd9-96721c209d87.roa (raw, json)
Hash identifier:          muy+3s7lX44g8PIPpiXRG4b33A2dWdOci0PN9uh3hH8=
Subject key identifier:   D9:C6:70:BB:84:EB:2A:6F:4C:02:9A:66:8B:D2:88:9A:61:BC:AC:C7
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584EFCACC1C29FBDAF3E9DAC7B00
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c1:c2:9f:bd:af:3e:9d:ac:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=229514c7-45e8-41ca-94b5-615ffe9e6c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:66:f6:29:fe:36:a9:88:dc:2a:e4:77:16:
                    6b:91:59:82:0c:3b:ac:45:f8:b6:a3:23:80:cc:3e:
                    f7:b1:8b:71:4c:aa:2f:d3:b4:33:39:c7:11:1e:30:
                    29:9c:1f:64:58:c0:4b:38:fa:0f:2e:db:92:2f:c9:
                    37:fd:bc:cd:53:8e:60:51:f0:77:5f:12:cf:09:8d:
                    39:d2:00:72:52:fa:dc:13:4e:97:20:e9:8a:32:20:
                    43:39:0a:79:23:f2:d3:4f:7a:74:45:74:7c:0c:5c:
                    34:94:e6:0a:28:18:09:b6:4f:0b:7e:0b:39:ec:44:
                    3d:fd:6d:86:5f:07:af:26:df:37:a9:9e:66:10:7f:
                    29:bd:a9:4c:73:3c:85:53:78:ed:31:a3:73:a5:7a:
                    8c:ee:97:12:40:2d:52:d4:b0:d4:b6:eb:94:41:f2:
                    1b:b2:cc:ae:43:f6:f1:73:75:ed:a5:10:99:23:34:
                    4a:ed:f7:72:10:1f:5a:42:a1:39:e1:d0:23:ee:ff:
                    f7:49:09:b7:da:98:c3:46:74:1d:fd:4e:a5:d5:25:
                    4e:90:2c:36:a8:88:e3:b1:d5:47:79:21:9f:0b:e7:
                    5a:b0:28:24:e7:7e:a2:c7:1c:41:ac:c4:7c:eb:75:
                    55:24:c9:6d:38:cc:5e:b9:91:bf:2b:a9:a5:d8:07:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:70:BB:84:EB:2A:6F:4C:02:9A:66:8B:D2:88:9A:61:BC:AC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/85f972da-dbfc-3722-afd9-96721c209d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:17:f5:81:1d:5f:cd:f8:4f:fb:33:78:3f:b8:91:1e:29:
         b5:ea:24:9a:cd:b3:09:d3:1d:47:63:1c:32:0c:1e:56:e9:99:
         26:00:7e:0a:32:c1:59:68:54:9d:9d:28:11:4e:07:9d:eb:81:
         5b:a5:3e:89:dc:cc:5d:e2:34:0a:8a:be:30:e5:27:78:70:7d:
         45:c0:cb:3a:4c:3e:fa:b8:ad:8e:f6:11:a9:67:40:85:d7:bc:
         b0:3b:32:ca:52:91:76:ac:3c:b7:95:4c:25:ea:6e:1c:53:07:
         50:f7:fd:25:e1:bd:b8:4b:98:4b:05:c7:af:6b:f0:c2:62:bf:
         ad:3e:49:77:17:15:b4:e2:8d:a7:03:2e:09:3c:4e:62:65:f5:
         81:56:60:05:0c:32:3f:86:32:58:b3:56:21:97:6d:bf:8e:f7:
         1c:f5:bc:70:a2:fe:39:f2:c6:08:31:40:4f:6d:e8:82:bc:e9:
         41:75:49:fe:c2:a6:39:d9:54:2f:66:42:d9:5c:0d:ce:5f:1d:
         61:b2:82:7f:fb:3c:2a:c2:6f:94:d3:b0:56:10:47:8a:c1:4c:
         94:f7:62:a2:95:bc:79:d9:2e:d5:16:4b:f1:fe:6f:90:1f:d9:
         e9:a9:43:88:db:e2:30:fc:6f:9e:0c:7e:f6:a3:a2:d7:3b:f6:
         a7:6c:03:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMHCn72vPp2sewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh
Njg4MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
MjI5NTE0YzctNDVlOC00MWNhLTk0YjUtNjE1ZmZlOWU2YzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQpm9in+NqmI3CrkdxZrkVmCDDusRfi2oyOA
zD73sYtxTKov07QzOccRHjApnB9kWMBLOPoPLtuSL8k3/bzNU45gUfB3XxLPCY05
0gByUvrcE06XIOmKMiBDOQp5I/LTT3p0RXR8DFw0lOYKKBgJtk8Lfgs57EQ9/W2G
XwevJt83qZ5mEH8pvalMczyFU3jtMaNzpXqM7pcSQC1S1LDUtuuUQfIbssyuQ/bx
c3XtpRCZIzRK7fdyEB9aQqE54dAj7v/3SQm32pjDRnQd/U6l1SVOkCw2qIjjsdVH
eSGfC+dasCgk536ixxxBrMR863VVJMltOMxeuZG/K6ml2AefewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnGcLuE6ypvTAKaZovSiJphvKzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw
YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvODVmOTcyZGEtZGJmYy0z
NzIyLWFmZDktOTY3MjFjMjA5ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5
MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh
YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4
YjA5YWE2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDsF/WBHV/N+E/7M3g/uJEeKbXqJJrNswnTHUdjHDIMHlbpmSYAfgoy
wVloVJ2dKBFOB53rgVulPonczF3iNAqKvjDlJ3hwfUXAyzpMPvq4rY72EalnQIXX
vLA7MspSkXasPLeVTCXqbhxTB1D3/SXhvbhLmEsFx69r8MJiv60+SXcXFbTijacD
Lgk8TmJl9YFWYAUMMj+GMlizViGXbb+O9xz1vHCi/jnyxggxQE9t6IK86UF1Sf7C
pjnZVC9mQtlcDc5fHWGygn/7PCrCb5TTsFYQR4rBTJT3YqKVvHnZLtUWS/H+b5Af
2empQ4jb4jD8b54Mfvajotc79qdsAxk=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:57:05 2026 by rpki-client