Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa
File:                     0dbec04b-d175-331c-a6a6-e5546fa84660.roa (raw, json)
Hash identifier:          G+0UCMrStfpm2+WGU/j3W5Fh2wnSadL0ZD+S3EidCzM=
Subject key identifier:   53:81:0F:2D:F1:99:3A:65:88:2E:E9:04:C2:38:5A:65:4E:FD:5F:31
Certificate issuer:       /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15
Certificate serial:       010D0C9F4328584E48247FB218E510D10710E640
Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        104.171.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7f:b2:18:e5:10:d1:07:10:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e9d89eb3-50f7-4502-bad3-73225366712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:c0:53:26:39:27:7e:c8:45:32:37:dd:71:
                    57:2a:e4:22:1f:8a:86:ef:8b:19:3d:49:6e:4b:2c:
                    72:8a:2f:6d:78:32:4f:1b:72:60:27:3a:fe:4d:b2:
                    ff:da:b1:3d:73:31:4d:f2:8a:aa:01:95:c9:a3:8d:
                    95:54:74:ac:a6:14:97:05:57:13:74:9b:de:1e:5c:
                    86:f9:18:b3:c4:85:25:6a:38:85:f2:72:4d:e0:eb:
                    94:8a:fc:ca:57:a8:72:b9:54:c3:37:d5:8b:b3:a5:
                    7a:26:9d:4f:fc:d3:01:b2:23:f6:04:35:29:61:45:
                    11:7b:a3:9e:4b:fe:14:84:0d:7e:55:06:3c:f6:e5:
                    ce:42:bd:d2:0f:0b:7e:43:05:c1:ad:dd:05:93:78:
                    f7:b7:8e:3d:f6:9a:68:0d:ea:c6:2a:e0:31:01:24:
                    89:8f:b9:0d:84:ef:32:1c:6c:65:53:3d:ff:2f:11:
                    81:db:57:fc:06:e2:d2:3c:60:cd:75:25:a8:eb:2c:
                    ed:31:b7:d9:b4:30:27:21:78:65:fb:27:59:dd:8b:
                    6b:23:88:87:d3:b4:f6:7a:6c:39:98:77:d1:22:20:
                    a0:1f:34:ec:a2:c5:a4:4e:64:e9:69:30:29:2d:6a:
                    4a:ee:07:cb:bf:cd:66:9b:e1:b0:6d:23:8f:63:0a:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:0F:2D:F1:99:3A:65:88:2E:E9:04:C2:38:5A:65:4E:FD:5F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/0dbec04b-d175-331c-a6a6-e5546fa84660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl

            X509v3 Authority Key Identifier:
                keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:f9:1e:92:16:22:43:ce:66:cb:c9:37:35:a2:3d:f1:0b:
         20:ff:d3:6a:1d:ef:9e:62:6a:83:2a:e1:62:94:5d:90:2f:b4:
         57:b8:72:c0:42:d3:4b:e6:c9:e0:6b:b6:f2:5b:55:81:fa:20:
         5f:be:5c:a2:a8:8e:9f:b5:4d:4e:8c:35:da:e0:f7:93:eb:2c:
         f5:85:39:e4:96:99:26:15:10:b9:99:24:4c:90:9e:9e:bd:28:
         4c:7a:7b:0b:46:42:56:14:52:c2:72:aa:da:34:56:f4:c1:ff:
         f8:b6:e6:33:f6:94:7d:45:fd:33:90:46:ea:41:36:30:b7:81:
         8e:22:18:b4:35:d4:ec:79:00:65:48:fe:5f:53:77:46:bd:4e:
         e2:52:3e:c6:d4:52:74:61:e7:0c:14:8a:fc:7b:3d:5a:cf:0f:
         fa:26:16:1d:a2:70:4e:5e:44:0f:d2:b1:1d:41:1e:d8:f7:6f:
         4e:3d:d5:20:5d:cb:8b:17:24:57:dc:57:5e:db:16:be:08:17:
         8b:27:c2:ef:dc:f3:50:dc:cf:a6:f9:f1:70:de:4c:5b:3c:2c:
         c2:04:eb:2f:27:76:07:c6:98:cf:c7:be:f2:6d:dc:8f:c6:1c:
         01:7b:86:92:c1:c0:44:1d:c3:55:53:7d:16:e7:23:7f:88:63:
         fa:2b:a0:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJH+yGOUQ0QcQ5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh
YjE1MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTlkODllYjMtNTBmNy00NTAyLWJhZDMtNzMyMjUzNjY3MTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu7AUyY5J37IRTI33XFXKuQiH4qG74sZPUlu
Syxyii9teDJPG3JgJzr+TbL/2rE9czFN8oqqAZXJo42VVHSsphSXBVcTdJveHlyG
+RizxIUlajiF8nJN4OuUivzKV6hyuVTDN9WLs6V6Jp1P/NMBsiP2BDUpYUURe6Oe
S/4UhA1+VQY89uXOQr3SDwt+QwXBrd0Fk3j3t4499ppoDerGKuAxASSJj7kNhO8y
HGxlUz3/LxGB21f8BuLSPGDNdSWo6yztMbfZtDAnIXhl+ydZ3YtrI4iH07T2emw5
mHfRIiCgHzTsosWkTmTpaTApLWpK7gfLv81mm+GwbSOPYwpi+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOBDy3xmTpliC7pBMI4WmVO/V8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk
ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvMGRiZWMwNGItZDE3NS0z
MzFjLWE2YTYtZTU1NDZmYTg0NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh
MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0
YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0
ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINc+R6SFiJDzmbLyTc1oj3xCyD/02od755iaoMq4WKUXZAvtFe4csBC
00vmyeBrtvJbVYH6IF++XKKojp+1TU6MNdrg95PrLPWFOeSWmSYVELmZJEyQnp69
KEx6ewtGQlYUUsJyqto0VvTB//i25jP2lH1F/TOQRupBNjC3gY4iGLQ11Ox5AGVI
/l9Td0a9TuJSPsbUUnRh5wwUivx7PVrPD/omFh2icE5eRA/SsR1BHtj3b0491SBd
y4sXJFfcV17bFr4IF4snwu/c81Dcz6b58XDeTFs8LMIE6y8ndgfGmM/HvvJt3I/G
HAF7hpLBwEQdw1VTfRbnI3+IY/oroP8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:26 2026 by rpki-client