Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa
File:                     47f6e568-69dc-343f-b596-bf5bc2189e57.roa (raw, json)
Hash identifier:          3ZwVoUm2w+q6rYp3XZiysKPbUgVMFDnfMZ3GQui1nfc=
Subject key identifier:   C0:E0:ED:D2:EB:49:A6:1A:D7:CF:FA:0F:D8:D9:DE:24:B1:BB:0C:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8AC54D5D69CFF7DA3CF92500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        104.89.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:4d:5d:69:cf:f7:da:3c:f9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=4590e5d2-e5e5-4f27-a284-1d004622d4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:71:d1:6d:31:9f:77:98:6e:f0:62:91:c7:
                    b7:d4:cf:ef:ec:55:21:c7:97:94:57:cc:3d:76:dc:
                    a2:86:64:66:61:47:3f:e8:54:93:cc:17:a7:be:c1:
                    da:58:88:23:cc:de:a3:73:6d:87:d7:93:61:17:c9:
                    57:62:08:2c:74:94:58:20:9d:1a:f1:3a:5b:e5:77:
                    9f:f3:e7:e4:1f:5f:bc:ed:a5:ec:c4:bf:d7:a2:3b:
                    90:a0:0c:92:a7:bc:25:8b:81:ab:38:f2:56:fb:c8:
                    3b:e3:7d:7f:23:83:9d:fd:43:87:e9:d0:66:32:8c:
                    e6:48:d7:23:28:7f:ec:12:8c:a3:dc:2d:c3:4a:f6:
                    b6:30:24:16:0a:37:6e:10:6a:9c:5d:0a:88:c0:ac:
                    01:75:14:16:0f:a5:4c:98:52:65:27:05:cf:31:cc:
                    7b:02:de:0c:05:6e:fa:9b:4e:68:bc:05:53:70:a9:
                    1e:48:58:4e:a3:b7:20:b0:6d:94:26:9b:a1:1b:19:
                    c5:d5:dd:02:1e:67:24:35:8d:2f:dc:ba:f4:04:cb:
                    e2:bb:d3:2d:a7:57:b5:87:b4:b7:5c:cf:a4:49:c6:
                    65:9b:5e:cb:d5:7e:13:bc:77:4d:b0:2a:81:aa:64:
                    94:1e:fd:61:7a:66:3b:85:6b:dd:6f:e9:6b:e1:d5:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:ED:D2:EB:49:A6:1A:D7:CF:FA:0F:D8:D9:DE:24:B1:BB:0C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.89.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:50:ae:c8:b6:90:a2:f2:83:96:1d:2d:53:05:f7:72:b5:
         0b:d3:80:c6:aa:b6:b8:8b:d5:4e:96:df:3b:44:40:44:ea:af:
         bc:8f:d9:a8:92:d0:1b:31:3b:64:ff:ae:fc:96:55:1f:83:34:
         45:a8:db:85:40:fa:8a:5a:6a:79:ce:47:25:d8:de:19:60:f0:
         03:33:6b:77:56:d7:bb:12:6e:b0:53:21:dd:07:18:2b:69:2c:
         f6:60:7c:5b:54:28:0d:c2:ee:c5:94:c7:6c:c9:29:85:2a:84:
         0b:99:0c:9c:bb:6f:21:c8:70:71:3e:d1:de:da:f0:be:2a:14:
         1e:51:40:a2:9e:3d:43:8f:6a:00:cb:39:13:13:6b:8b:4a:e3:
         88:e6:6c:64:ee:08:cf:26:bb:b6:9c:ff:6e:45:b9:bf:ea:ba:
         b1:b7:5d:74:ab:76:05:fc:5d:d1:10:03:cc:38:63:34:76:a4:
         fc:0d:a6:c5:41:07:bc:1f:56:6d:97:a7:c1:19:67:8d:39:57:
         a6:3e:13:d7:92:aa:a8:ee:ec:6e:22:29:03:82:75:31:63:d1:
         f7:a5:88:1b:44:4b:b5:a0:a9:12:25:3b:c0:d6:ea:bb:ce:fb:
         99:f7:0f:9c:a3:83:89:1a:17:57:9c:ae:db:d6:f9:40:44:f0:
         82:e7:71:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxU1dac/32jz5JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NDU5MGU1ZDItZTVlNS00ZjI3LWEyODQtMWQwMDQ2MjJkNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvpx0W0xn3eYbvBikce31M/v7FUhx5eUV8w9
dtyihmRmYUc/6FSTzBenvsHaWIgjzN6jc22H15NhF8lXYggsdJRYIJ0a8Tpb5Xef
8+fkH1+87aXsxL/XojuQoAySp7wli4GrOPJW+8g7431/I4Od/UOH6dBmMozmSNcj
KH/sEoyj3C3DSva2MCQWCjduEGqcXQqIwKwBdRQWD6VMmFJlJwXPMcx7At4MBW76
m05ovAVTcKkeSFhOo7cgsG2UJpuhGxnF1d0CHmckNY0v3Lr0BMviu9Mtp1e1h7S3
XM+kScZlm17L1X4TvHdNsCqBqmSUHv1hemY7hWvdb+lr4dUrWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDg7dLrSaYa18/6D9jZ3iSxuwz3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdmNmU1NjgtNjlkYy0z
NDNmLWI1OTYtYmY1YmMyMTg5ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOiUK7ItpCi8oOWHS1TBfdytQvTgMaqtriL1U6W3ztEQETqr7yP2aiS
0BsxO2T/rvyWVR+DNEWo24VA+opaannORyXY3hlg8AMza3dW17sSbrBTId0HGCtp
LPZgfFtUKA3C7sWUx2zJKYUqhAuZDJy7byHIcHE+0d7a8L4qFB5RQKKePUOPagDL
ORMTa4tK44jmbGTuCM8mu7ac/25Fub/qurG3XXSrdgX8XdEQA8w4YzR2pPwNpsVB
B7wfVm2Xp8EZZ405V6Y+E9eSqqju7G4iKQOCdTFj0feliBtES7WgqRIlO8DW6rvO
+5n3D5yjg4kaF1ecrtvW+UBE8ILncY0=
-----END CERTIFICATE-----
Generated at Wed May 13 08:04:44 2026 by rpki-client