Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31449f39-354c-3081-ae83-87f85d0d8efa.roa
File:                     31449f39-354c-3081-ae83-87f85d0d8efa.roa (raw, json)
Hash identifier:          k4+EjdpxvGsgjHAh3Io5RSHbPdYDbk0mEq1cqArtBdo=
Subject key identifier:   3D:74:BD:15:AD:A1:34:67:0C:7F:2F:02:52:15:67:75:67:15:97:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D93255EAFEC05DFCFFA045800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31449f39-354c-3081-ae83-87f85d0d8efa.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        104.73.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:5e:af:ec:05:df:cf:fa:04:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=afa5e79b-037a-425f-986e-4b0353d8cdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:4d:c4:0d:73:4e:77:1d:99:bf:49:33:c7:
                    48:a7:3a:60:78:83:66:37:38:ce:f4:ab:6e:2e:f0:
                    d5:dc:96:ab:7a:dd:25:f6:4f:3d:4e:b8:a7:04:a4:
                    a9:63:75:22:90:17:85:fd:8b:f4:30:e2:b8:5c:f2:
                    56:6e:28:0d:a1:9f:c5:e8:4b:0f:6c:0e:31:52:3e:
                    76:54:80:9b:59:b9:17:d8:84:2c:ed:57:a0:67:1b:
                    25:2f:d9:03:fd:7a:69:e4:2b:25:f2:5b:f4:c4:f5:
                    69:66:ea:d4:25:0c:1a:d0:0c:5e:48:66:92:e9:d1:
                    cf:66:7c:ec:93:89:ea:93:69:00:1b:48:70:6c:fc:
                    84:89:0b:62:72:4d:31:b6:8d:f3:9e:a2:5b:cd:00:
                    bc:ff:63:54:66:9c:c0:64:33:96:56:8b:e3:9e:a1:
                    b8:53:7f:20:51:de:68:0a:5a:2a:07:d0:4e:23:bb:
                    16:ce:ed:5b:59:e2:3b:3a:b1:2d:35:40:e4:6a:a6:
                    18:eb:e9:47:63:6c:f1:1d:cf:ce:5e:81:74:a2:dd:
                    7a:05:59:36:22:80:63:6c:9e:b3:11:18:3e:f1:48:
                    6c:ca:64:1f:02:13:3e:94:c4:ca:c8:a8:e4:30:c6:
                    54:3b:c9:26:c9:d2:23:34:d3:99:d8:f5:28:f7:02:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:74:BD:15:AD:A1:34:67:0C:7F:2F:02:52:15:67:75:67:15:97:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31449f39-354c-3081-ae83-87f85d0d8efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.73.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:40:ed:ed:52:5f:61:ea:e7:0b:10:df:f8:43:21:23:36:
         93:af:bb:66:46:50:48:e9:24:e3:f7:73:08:52:de:33:db:81:
         10:bb:2f:ce:47:13:ad:cb:8a:9a:b9:02:24:6a:ad:a9:4a:0e:
         6d:c0:b9:d2:bd:a7:46:6a:b4:53:2b:54:76:6a:3c:f3:af:16:
         90:71:78:5a:12:35:3a:d1:9d:0b:bc:d6:fe:2f:17:e1:b6:c5:
         4c:42:04:b2:d2:0b:dd:a2:73:4b:af:5d:99:e3:51:a1:e2:94:
         5b:35:12:30:f3:fa:a6:00:08:2f:5f:6e:e7:28:92:0c:9d:7a:
         a7:aa:e2:75:a0:fb:c2:16:d6:92:bb:06:1d:8d:c7:8d:c0:e5:
         83:6c:1d:07:f4:e4:e3:7a:99:ba:42:96:41:72:5e:73:dc:d6:
         81:60:f1:9a:bb:ec:b6:f0:eb:ad:b7:0c:8f:71:b5:95:21:38:
         3a:98:36:5c:55:75:46:a5:c9:f6:1e:13:4e:f2:19:e8:bc:4c:
         59:1a:bc:69:99:31:89:24:44:78:71:8b:6f:b2:89:37:bb:ab:
         91:55:2f:98:6b:9b:22:a6:0c:73:82:2c:a0:68:6e:f3:1f:f4:
         37:d9:ab:c8:76:86:f5:ac:f6:96:52:01:6c:ec:29:dc:97:7b:
         57:b2:6e:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV6v7AXfz/oEWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
YWZhNWU3OWItMDM3YS00MjVmLTk4NmUtNGIwMzUzZDhjZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisFNxA1zTncdmb9JM8dIpzpgeINmNzjO9Ktu
LvDV3Jaret0l9k89TrinBKSpY3UikBeF/Yv0MOK4XPJWbigNoZ/F6EsPbA4xUj52
VICbWbkX2IQs7VegZxslL9kD/Xpp5Csl8lv0xPVpZurUJQwa0AxeSGaS6dHPZnzs
k4nqk2kAG0hwbPyEiQtick0xto3znqJbzQC8/2NUZpzAZDOWVovjnqG4U38gUd5o
CloqB9BOI7sWzu1bWeI7OrEtNUDkaqYY6+lHY2zxHc/OXoF0ot16BVk2IoBjbJ6z
ERg+8UhsymQfAhM+lMTKyKjkMMZUO8kmydIjNNOZ2PUo9wIz9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD10vRWtoTRnDH8vAlIVZ3VnFZfKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzE0NDlmMzktMzU0Yy0z
MDgxLWFlODMtODdmODVkMGQ4ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaElAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9oQO3tUl9h6ucLEN/4QyEjNpOvu2ZGUEjpJOP3cwhS3jPbgRC7L85H
E63Lipq5AiRqralKDm3AudK9p0ZqtFMrVHZqPPOvFpBxeFoSNTrRnQu81v4vF+G2
xUxCBLLSC92ic0uvXZnjUaHilFs1EjDz+qYACC9fbucokgydeqeq4nWg+8IW1pK7
Bh2Nx43A5YNsHQf05ON6mbpClkFyXnPc1oFg8Zq77Lbw6623DI9xtZUhODqYNlxV
dUalyfYeE07yGei8TFkavGmZMYkkRHhxi2+yiTe7q5FVL5hrmyKmDHOCLKBobvMf
9DfZq8h2hvWs9pZSAWzsKdyXe1eybtQ=
-----END CERTIFICATE-----
Generated at Wed May 13 10:03:24 2026 by rpki-client