Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa
File:                     0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa (raw, json)
Hash identifier:          mfamg2SH5klapbUFKv+fp0BdwSOYmKsYt23DSSZ5D10=
Subject key identifier:   3E:B2:CC:86:57:55:DE:8D:66:F0:AD:AF:26:F9:FC:A5:79:5C:F3:7C
Certificate issuer:       /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial:       010D0C9F4328584EED520597905B31122ECEA700
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     398823
IP address blocks:        104.219.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:05:97:90:5b:31:12:2e:ce:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=8d514331-cfb0-42b8-b347-0bfca1c1cce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:20:3e:94:b7:98:7a:dd:29:96:e9:22:66:
                    e6:1c:01:f0:f9:6f:7b:c8:a0:bb:01:f5:85:3e:90:
                    73:55:b1:93:61:dd:95:18:d5:d6:09:1e:bd:c2:57:
                    8a:7f:21:9e:e4:0b:98:48:6f:11:c4:0d:24:f8:93:
                    d3:77:ee:f8:6a:03:b8:98:2a:fa:de:ff:fb:f1:3d:
                    d3:36:22:fe:aa:ca:1d:6d:bc:14:13:c2:81:b5:6e:
                    81:05:71:f9:ed:b2:dd:48:70:a2:4c:20:cf:28:a4:
                    d0:db:86:44:c4:0b:71:a3:dc:6f:19:33:e1:de:63:
                    e8:5c:1b:52:ad:21:81:f7:54:a0:c7:86:d5:60:7b:
                    a2:d2:f2:e5:6e:d0:ec:7e:aa:c4:7b:e6:be:34:51:
                    b5:29:dd:c7:e5:14:93:28:21:cc:f2:be:2b:d6:6a:
                    fb:0e:ea:70:04:b4:af:bf:7f:56:02:ad:90:73:49:
                    b5:e1:82:ac:bc:f5:60:1c:72:01:3a:04:36:41:7d:
                    c1:60:11:bf:02:69:20:7e:17:c0:6f:95:86:39:01:
                    30:22:d1:5c:09:34:62:bd:ea:01:4e:8e:32:74:25:
                    28:22:58:30:60:f9:d3:79:eb:46:17:9b:b8:4e:67:
                    eb:7a:ab:c0:b0:c5:38:86:2a:4c:92:3d:e5:ec:43:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:CC:86:57:55:DE:8D:66:F0:AD:AF:26:F9:FC:A5:79:5C:F3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/0227100c-57dc-3035-9ad0-7ea5aa7a6622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl

            X509v3 Authority Key Identifier:
                keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:f7:f5:a2:10:ec:84:2b:b9:be:36:7f:bf:1a:24:6d:6c:
         9d:d3:95:db:bc:66:8c:cc:9f:43:7b:b6:29:12:80:43:b9:a6:
         99:60:69:be:1b:62:29:73:37:64:45:84:fc:1d:8f:4b:18:91:
         8c:26:a3:84:16:49:d3:66:99:d6:84:28:9c:aa:db:49:5e:5b:
         35:84:a1:d6:66:c0:70:c9:30:e7:66:fc:c9:15:23:62:51:4a:
         00:26:1a:42:d5:6c:bc:f7:27:08:18:dc:ac:d9:23:bc:0e:1a:
         d5:ce:c2:cc:4e:26:1f:ff:31:de:da:29:0e:eb:95:fb:8f:f5:
         d3:9d:16:99:46:06:07:6f:8e:46:c9:e4:34:30:53:a3:a6:72:
         81:6f:52:d3:75:f7:6f:85:61:b2:b9:e2:38:0c:86:6a:c2:3a:
         53:9b:a3:c8:ea:b7:4d:4c:74:d6:dd:f1:c4:d1:42:1e:26:03:
         ed:9e:95:6e:c7:f0:f6:a1:3a:4c:ce:bc:a1:02:63:40:0f:9d:
         3c:c5:03:e2:ec:34:fd:02:f0:ee:69:53:ab:88:a6:36:f0:20:
         17:e7:ee:c0:6e:97:ea:be:aa:11:5a:6e:1f:c9:42:21:e6:ce:
         da:d4:9b:38:56:4a:01:25:a0:9a:30:f8:63:3c:03:e8:07:93:
         ed:74:14:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgWXkFsxEi7OpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3
YzBkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
OGQ1MTQzMzEtY2ZiMC00MmI4LWIzNDctMGJmY2ExYzFjY2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm4gPpS3mHrdKZbpImbmHAHw+W97yKC7AfWF
PpBzVbGTYd2VGNXWCR69wleKfyGe5AuYSG8RxA0k+JPTd+74agO4mCr63v/78T3T
NiL+qsodbbwUE8KBtW6BBXH57bLdSHCiTCDPKKTQ24ZExAtxo9xvGTPh3mPoXBtS
rSGB91Sgx4bVYHui0vLlbtDsfqrEe+a+NFG1Kd3H5RSTKCHM8r4r1mr7DupwBLSv
v39WAq2Qc0m14YKsvPVgHHIBOgQ2QX3BYBG/AmkgfhfAb5WGOQEwItFcCTRiveoB
To4ydCUoIlgwYPnTeetGF5u4TmfreqvAsMU4hipMkj3l7EOh8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6yzIZXVd6NZvCtryb5/KV5XPN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz
ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvMDIyNzEwMGMtNTdkYy0z
MDM1LTlhZDAtN2VhNWFhN2E2NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2
ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx
N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz
Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNvUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyg9/WiEOyEK7m+Nn+/GiRtbJ3Tldu8ZozMn0N7tikSgEO5pplgab4b
YilzN2RFhPwdj0sYkYwmo4QWSdNmmdaEKJyq20leWzWEodZmwHDJMOdm/MkVI2JR
SgAmGkLVbLz3JwgY3KzZI7wOGtXOwsxOJh//Md7aKQ7rlfuP9dOdFplGBgdvjkbJ
5DQwU6OmcoFvUtN192+FYbK54jgMhmrCOlObo8jqt01MdNbd8cTRQh4mA+2elW7H
8PahOkzOvKECY0APnTzFA+LsNP0C8O5pU6uIpjbwIBfn7sBul+q+qhFabh/JQiHm
ztrUmzhWSgEloJow+GM8A+gHk+10FOw=
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:29:41 2026 by rpki-client