Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
File:                     311c905c-c74a-3300-b053-5abc79b4a61a.roa (raw, json)
Hash identifier:          BvQZXHFL8JXKyRvRE05h6adG7+YlOlLH/029u3dwml0=
Subject key identifier:   99:55:53:EC:8C:08:73:75:0C:DB:06:F6:F6:3B:E1:16:05:73:54:37
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A71EDAC4E7901B5ABEB40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:71:ed:ac:4e:79:01:b5:ab:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=b72e49d4-f02c-458a-a24c-c22072209101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:2a:cf:68:63:2d:a0:f2:46:0f:80:22:57:
                    44:90:c3:c2:e9:e3:f2:77:a5:e1:5f:74:d5:d6:a1:
                    3b:f0:ba:59:be:8d:b0:0b:53:72:a0:11:e2:44:6d:
                    d3:00:ee:d1:b3:0a:2e:e7:04:97:dc:60:ec:19:77:
                    d7:92:31:76:62:f8:99:39:fa:fd:52:4c:d0:87:a7:
                    c1:b5:de:7e:2d:c0:0c:cd:f3:b9:2d:0d:53:38:72:
                    cc:66:8f:66:cd:39:61:75:a7:bd:12:9b:8d:3a:a9:
                    ca:54:cc:e9:e5:38:bc:15:8a:25:91:bb:72:d7:e4:
                    19:12:85:c3:3f:a5:04:33:54:3e:8e:d2:74:1d:02:
                    c7:69:88:dc:d4:be:9f:97:fc:30:3a:bb:21:06:1f:
                    5e:94:88:90:ae:99:91:4f:8c:de:8c:d0:5c:bf:77:
                    9a:d3:dd:05:b8:2e:98:09:14:46:36:5e:a7:8a:af:
                    8a:1f:a5:a1:89:14:67:e4:d8:30:e9:bd:cb:61:d8:
                    0f:93:19:c7:16:b9:b9:67:6e:15:ff:2f:16:f0:f9:
                    ee:92:89:da:aa:83:c9:62:6e:0a:84:53:49:a2:21:
                    db:e0:60:e7:4b:16:6c:0f:91:ce:66:86:52:57:59:
                    e6:29:88:2b:6d:7a:f5:01:87:12:c1:2b:9c:52:75:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:55:53:EC:8C:08:73:75:0C:DB:06:F6:F6:3B:E1:16:05:73:54:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:2a:0c:21:52:f9:f1:ea:69:dc:38:8f:03:d2:88:ea:6e:
         f8:c9:9b:98:da:0f:ef:cf:14:ed:9d:16:2d:c4:37:44:cc:75:
         76:c3:b1:ef:47:17:5b:ac:c1:5f:54:db:73:81:30:52:c1:a5:
         ee:4e:5c:f0:66:1a:d5:6c:e5:b6:42:82:1d:ea:5c:1c:e6:9f:
         7f:ab:5d:dc:5c:4f:0b:e4:47:e0:82:61:8a:d1:06:13:c0:72:
         17:fb:52:db:37:1d:ab:a7:29:f2:9f:79:a1:20:77:84:3d:05:
         a3:c2:3e:7a:96:fb:c9:ca:80:8a:df:52:92:a5:3c:c6:c0:44:
         be:0d:82:8b:7e:60:cf:60:9b:b6:b9:4a:ae:3a:b7:32:14:1a:
         a6:db:11:77:08:f4:4c:3c:20:04:37:5b:99:cf:3f:76:64:f2:
         57:7f:4e:04:33:7f:13:7a:3e:a0:c2:c2:65:66:0b:a2:a3:73:
         f5:c9:50:7f:d8:8d:dd:81:a7:e7:42:ee:d0:a4:ab:54:09:ad:
         f2:60:e4:dd:57:21:94:ea:40:85:b4:c9:f2:b0:02:e5:20:73:
         ce:fd:ef:49:20:43:b7:00:8b:f5:28:9e:18:d8:fc:bb:22:7b:
         ce:b9:45:03:ee:2f:60:22:79:d6:a7:bf:6f:f5:3a:79:a9:03:
         40:09:b2:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnHtrE55AbWr60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
YjcyZTQ5ZDQtZjAyYy00NThhLWEyNGMtYzIyMDcyMjA5MTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYqz2hjLaDyRg+AIldEkMPC6ePyd6XhX3TV
1qE78LpZvo2wC1NyoBHiRG3TAO7Rswou5wSX3GDsGXfXkjF2YviZOfr9UkzQh6fB
td5+LcAMzfO5LQ1TOHLMZo9mzTlhdae9EpuNOqnKVMzp5Ti8FYolkbty1+QZEoXD
P6UEM1Q+jtJ0HQLHaYjc1L6fl/wwOrshBh9elIiQrpmRT4zejNBcv3ea090FuC6Y
CRRGNl6niq+KH6WhiRRn5Ngw6b3LYdgPkxnHFrm5Z24V/y8W8PnukonaqoPJYm4K
hFNJoiHb4GDnSxZsD5HOZoZSV1nmKYgrbXr1AYcSwSucUnUnWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlVU+yMCHN1DNsG9vY74RYFc1Q3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMzExYzkwNWMtYzc0YS0z
MzAwLWIwNTMtNWFiYzc5YjRhNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwUKgwhUvnx6mncOI8D0ojqbvjJm5jaD+/PFO2dFi3EN0TMdXbDse9H
F1uswV9U23OBMFLBpe5OXPBmGtVs5bZCgh3qXBzmn3+rXdxcTwvkR+CCYYrRBhPA
chf7Uts3HaunKfKfeaEgd4Q9BaPCPnqW+8nKgIrfUpKlPMbARL4Ngot+YM9gm7a5
Sq46tzIUGqbbEXcI9Ew8IAQ3W5nPP3Zk8ld/TgQzfxN6PqDCwmVmC6Kjc/XJUH/Y
jd2Bp+dC7tCkq1QJrfJg5N1XIZTqQIW0yfKwAuUgc87970kgQ7cAi/UonhjY/Lsi
e865RQPuL2Aiedanv2/1OnmpA0AJsoY=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:57:37 2026 by rpki-client