Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa
File:                     44c433c5-83d2-38aa-8189-171f5b18a0d8.roa (raw, json)
Hash identifier:          FMNU6LSI9Mb7b90OEhRylnXx9uRa1OiVn4dDKKt0yJM=
Subject key identifier:   80:E9:2B:2A:C5:64:35:15:48:26:3F:E1:38:3A:A7:58:C4:A0:C6:1F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584F4974E3FF4CD992319F121980
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8069
IP address blocks:        13.104.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e3:ff:4c:d9:92:31:9f:12:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=40725599-5237-4893-b1b0-ceff1da9f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:91:c7:fa:6a:3a:ce:22:66:f4:f7:df:ac:
                    13:70:eb:3d:30:f7:62:51:33:4c:29:b5:50:7e:9f:
                    95:f3:a9:95:02:73:e3:2c:38:59:91:f7:c9:dc:66:
                    6e:7b:4b:49:55:14:9c:c4:a5:ea:df:ba:08:93:42:
                    a4:16:25:3c:68:76:9a:d9:d7:be:a7:b0:60:8d:27:
                    eb:33:53:44:5e:a1:72:42:7c:d6:ef:cc:5b:f1:42:
                    d9:ac:cf:f6:37:56:cc:d6:53:d3:35:36:bd:14:aa:
                    a7:fe:37:a3:e1:5e:6c:b8:45:30:5f:1d:20:82:e4:
                    f5:00:ab:02:48:a4:e4:3b:90:5e:27:49:65:c5:66:
                    37:70:75:19:06:6f:d6:a3:49:33:db:3c:cc:4e:3d:
                    c1:8e:ca:50:39:17:f5:fc:92:cb:47:8f:a9:f9:94:
                    fa:3e:33:30:0a:ff:d3:f1:fe:30:f0:9f:31:2b:03:
                    d7:f1:de:ca:c5:f6:95:64:e1:37:61:90:51:14:8b:
                    7b:bc:8d:c8:28:c8:c0:50:33:a2:0e:91:56:8e:7e:
                    46:ae:8d:d3:6a:79:8d:8a:a7:2d:0b:20:ae:98:61:
                    71:bb:4e:d8:48:55:02:73:08:c4:b6:84:76:ce:97:
                    5d:96:e4:79:b3:16:25:d7:da:36:61:44:1a:8c:6a:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:2B:2A:C5:64:35:15:48:26:3F:E1:38:3A:A7:58:C4:A0:C6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44c433c5-83d2-38aa-8189-171f5b18a0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.104.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:05:59:7a:80:ca:6b:b2:16:24:83:02:b2:b2:a2:60:a9:
         cc:75:48:35:ca:1d:c5:fe:6d:0e:36:fb:b4:6b:8a:d9:48:a4:
         20:26:4c:1a:c8:55:5f:b5:b6:ba:b5:93:c7:9b:dd:74:82:66:
         83:c3:a9:85:cd:c5:81:dd:c8:28:09:09:3d:33:0b:44:76:8a:
         fa:9f:2b:31:82:39:94:28:d8:82:6c:c7:09:28:e9:4c:a9:f9:
         84:b2:34:b3:e9:68:68:8f:aa:be:4e:5c:16:ef:13:bc:eb:1b:
         43:4c:93:36:74:68:64:47:fe:59:b4:5f:b2:b3:bd:97:30:01:
         6d:fd:f8:6d:87:5d:57:d3:20:e6:c5:c6:aa:b7:ec:06:c7:29:
         af:6f:5a:5b:ab:7f:ec:23:7a:5c:2a:53:a2:97:90:5c:b8:58:
         19:b5:15:c6:6d:8f:2c:e1:29:33:75:1f:e4:6f:bc:7d:2c:ef:
         cf:1f:af:7a:05:e3:0b:52:4e:77:47:02:e6:c3:b2:cd:a9:55:
         5a:42:46:20:25:e8:e6:e6:69:2e:24:7b:63:a7:af:4d:83:2a:
         31:5a:99:bc:7a:26:66:5d:3e:97:2f:fd:db:ce:26:9e:ae:29:
         69:e5:44:34:79:1a:21:10:13:7a:75:76:e6:3e:ac:38:af:ad:
         98:6b:96:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOP/TNmSMZ8SGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDA3MjU1OTktNTIzNy00ODkzLWIxYjAtY2VmZjFkYTlmMzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYORx/pqOs4iZvT336wTcOs9MPdiUTNMKbVQ
fp+V86mVAnPjLDhZkffJ3GZue0tJVRScxKXq37oIk0KkFiU8aHaa2de+p7BgjSfr
M1NEXqFyQnzW78xb8ULZrM/2N1bM1lPTNTa9FKqn/jej4V5suEUwXx0gguT1AKsC
SKTkO5BeJ0llxWY3cHUZBm/Wo0kz2zzMTj3BjspQORf1/JLLR4+p+ZT6PjMwCv/T
8f4w8J8xKwPX8d7KxfaVZOE3YZBRFIt7vI3IKMjAUDOiDpFWjn5Gro3TanmNiqct
CyCumGFxu07YSFUCcwjEtoR2zpddluR5sxYl19o2YUQajGph9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDpKyrFZDUVSCY/4Tg6p1jEoMYfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDRjNDMzYzUtODNkMi0z
OGFhLTgxODktMTcxZjViMThhMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADWhSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGpBVl6gMprshYkgwKysqJgqcx1SDXKHcX+bQ42+7RritlIpCAmTBrI
VV+1trq1k8eb3XSCZoPDqYXNxYHdyCgJCT0zC0R2ivqfKzGCOZQo2IJsxwko6Uyp
+YSyNLPpaGiPqr5OXBbvE7zrG0NMkzZ0aGRH/lm0X7KzvZcwAW39+G2HXVfTIObF
xqq37AbHKa9vWlurf+wjelwqU6KXkFy4WBm1FcZtjyzhKTN1H+RvvH0s788fr3oF
4wtSTndHAubDss2pVVpCRiAl6ObmaS4ke2Onr02DKjFambx6JmZdPpcv/dvOJp6u
KWnlRDR5GiEQE3p1duY+rDivrZhrlkw=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:14:30 2026 by rpki-client