Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa
File:                     8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa (raw, json)
Hash identifier:          Dy1rSrxPHuMgemNLB85MgpynAbJv80ggmiCZAR4mEk8=
Subject key identifier:   C7:41:B8:F1:64:48:4C:7C:69:4E:BD:10:FD:90:54:7C:7C:DF:20:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9A201F48E511B64380235240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     20940
IP address blocks:        104.125.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:1f:48:e5:11:b6:43:80:23:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5395add2-d341-4cb6-9414-832c92528338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:37:cd:b2:0c:cf:ee:ff:a7:44:40:ab:4f:
                    5f:1d:26:b9:18:9e:94:9f:3e:f2:4e:1e:3a:45:ed:
                    61:6f:0a:3c:60:b5:7a:1b:bb:0b:fe:b3:ae:62:3a:
                    bb:53:d7:3b:ea:c4:f6:03:a3:bc:b8:ac:ab:79:83:
                    51:d8:8c:65:8b:8e:5e:0c:b1:df:8f:17:d3:95:24:
                    5d:fe:19:a8:3a:85:35:d3:e1:40:c6:84:6b:a2:d8:
                    2d:bc:28:3b:ea:65:29:e9:2b:8d:ab:3e:28:be:d7:
                    2b:b7:fa:3a:9a:cf:51:b8:40:e0:f3:78:77:e3:6b:
                    b5:ba:20:e7:56:f7:46:5e:eb:f9:af:bf:16:98:01:
                    47:40:53:7a:02:bf:3f:3f:6c:5a:2a:c3:9d:e5:75:
                    4a:09:d2:d9:56:25:cc:fb:3d:2d:a0:f4:8f:e5:88:
                    51:6b:48:6e:52:ac:70:e6:dd:2f:73:ec:6b:34:cc:
                    d7:e7:7b:cc:d1:c6:f0:a1:b5:f6:30:6e:a2:d5:7b:
                    22:2d:14:3e:a1:9c:0c:ea:f7:57:94:ab:b3:2c:f5:
                    43:51:fa:20:ae:cc:73:09:6b:57:87:f3:62:30:64:
                    1c:2c:89:39:73:da:c2:33:67:5b:db:30:b2:ff:cf:
                    d2:e3:9c:cc:f5:51:e0:42:8e:50:98:6b:ab:96:c1:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:B8:F1:64:48:4C:7C:69:4E:BD:10:FD:90:54:7C:7C:DF:20:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.125.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:98:9f:1f:72:3f:b0:92:7f:bc:01:c3:0c:8d:f6:49:9f:72:
         6a:24:2b:21:43:53:70:99:25:bd:af:f7:42:90:15:82:c0:5b:
         3e:5a:11:15:fa:2c:06:0e:b5:58:31:00:72:2e:54:c7:24:06:
         76:f9:7a:2d:58:9b:71:af:ef:8e:d5:ed:29:1b:e8:6a:85:c4:
         c8:12:d1:b7:2c:6e:a0:2b:01:34:b0:ff:39:53:58:56:ac:a7:
         c7:d9:6f:9a:2b:c3:33:ab:c3:4a:58:7f:98:35:56:af:5b:51:
         e6:3a:84:33:4c:77:00:a8:b9:49:51:7f:5a:da:b6:af:17:c4:
         1c:e7:05:d1:33:1b:4e:ce:93:a3:6f:5c:7b:84:1f:05:4b:38:
         99:38:7c:d8:6b:4d:c6:a7:8d:5e:eb:5a:04:d5:c0:31:84:ea:
         3f:b0:fd:a6:28:f4:aa:02:ad:18:93:4e:d9:41:b8:bb:ec:bc:
         62:32:62:46:bc:49:a0:9c:88:1d:e6:e6:90:eb:37:55:51:7c:
         0e:f7:cd:46:05:fd:31:f2:07:b5:85:c3:64:8f:e3:3d:d6:85:
         b7:15:7f:b5:f8:8f:46:89:39:0a:dd:32:8b:47:4d:4b:5c:2f:
         6d:0c:95:f3:fa:66:26:2c:85:5f:ed:64:06:4c:bf:68:a9:b2:
         24:d6:05:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIB9I5RG2Q4AjUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NTM5NWFkZDItZDM0MS00Y2I2LTk0MTQtODMyYzkyNTI4MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz43zbIMz+7/p0RAq09fHSa5GJ6Unz7yTh46
Re1hbwo8YLV6G7sL/rOuYjq7U9c76sT2A6O8uKyreYNR2Ixli45eDLHfjxfTlSRd
/hmoOoU10+FAxoRrotgtvCg76mUp6SuNqz4ovtcrt/o6ms9RuEDg83h342u1uiDn
VvdGXuv5r78WmAFHQFN6Ar8/P2xaKsOd5XVKCdLZViXM+z0toPSP5YhRa0huUqxw
5t0vc+xrNMzX53vM0cbwobX2MG6i1XsiLRQ+oZwM6vdXlKuzLPVDUfogrsxzCWtX
h/NiMGQcLIk5c9rCM2db2zCy/8/S45zM9VHgQo5QmGurlsGLEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdBuPFkSEx8aU69EP2QVHx83yBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyZGQyMjQtMzI0OS0z
M2Y1LTkxNTktYzE2OTRjNGYxY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH1SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGYnx9yP7CSf7wBwwyN9kmfcmokKyFDU3CZJb2v90KQFYLAWz5aERX6
LAYOtVgxAHIuVMckBnb5ei1Ym3Gv747V7Skb6GqFxMgS0bcsbqArATSw/zlTWFas
p8fZb5orwzOrw0pYf5g1Vq9bUeY6hDNMdwCouUlRf1ratq8XxBznBdEzG07Ok6Nv
XHuEHwVLOJk4fNhrTcanjV7rWgTVwDGE6j+w/aYo9KoCrRiTTtlBuLvsvGIyYka8
SaCciB3m5pDrN1VRfA73zUYF/THyB7WFw2SP4z3WhbcVf7X4j0aJOQrdMotHTUtc
L20MlfP6ZiYshV/tZAZMv2ipsiTWBXQ=
-----END CERTIFICATE-----
Generated at Wed May 13 10:31:56 2026 by rpki-client