Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd40389-251c-3c02-bd90-290e67b1ce56.roa
File:                     bfd40389-251c-3c02-bd90-290e67b1ce56.roa (raw, json)
Hash identifier:          QMJ98wX8udDFB5JaqA+Vri9ZV+9oaTxWQ5+koQARkuQ=
Subject key identifier:   E0:A7:60:84:70:A0:1D:46:D4:AB:D7:A4:AC:DF:4B:18:63:71:60:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E78FF8356352417A06210FD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd40389-251c-3c02-bd90-290e67b1ce56.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        104.110.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:83:56:35:24:17:a0:62:10:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=0a08fdf4-c2f0-4e9b-bc12-1162e7497b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:df:7c:20:79:af:7a:84:53:ac:51:ab:c8:
                    44:df:60:11:ce:1a:e0:a8:92:9f:79:10:9f:78:fd:
                    57:ca:83:93:62:03:cb:50:0a:b4:fc:fd:53:06:59:
                    71:6f:b6:cf:e5:a8:3e:50:95:8b:93:4d:46:75:6b:
                    9b:f7:ce:f8:04:fb:f8:f6:6f:3a:d2:08:f0:de:2b:
                    f6:97:cf:ab:e1:1d:d0:91:08:cd:94:f1:b7:33:e3:
                    05:6b:02:f3:91:17:35:5d:96:e8:48:7d:41:02:15:
                    00:12:c0:43:89:d1:50:d5:16:45:43:df:57:fe:fc:
                    b3:e2:bf:ab:b4:8a:07:ff:64:3b:08:86:e9:80:f7:
                    da:c4:ce:2b:93:51:13:a3:87:b3:05:a2:03:08:54:
                    cf:bc:d5:19:f7:16:80:00:23:7d:bd:0e:46:ba:82:
                    49:a7:86:7d:ca:33:a0:3b:77:68:cd:a8:bc:25:b8:
                    56:b3:d0:34:dd:af:9f:24:c2:19:27:03:cb:fc:95:
                    b3:83:7c:b3:f8:27:45:d9:12:64:b6:dc:2d:1d:c2:
                    40:54:2f:36:ae:3e:e6:fd:2e:0c:68:52:9c:ad:3e:
                    11:ed:3e:b4:5c:55:50:96:7c:f9:56:71:a9:04:35:
                    21:f7:7e:e6:19:71:24:ec:20:61:32:9e:16:5e:64:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:60:84:70:A0:1D:46:D4:AB:D7:A4:AC:DF:4B:18:63:71:60:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd40389-251c-3c02-bd90-290e67b1ce56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.110.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:50:09:41:b8:6c:f2:30:4d:3e:c0:e7:65:a6:cb:17:91:c6:
         41:67:96:c9:90:f7:b4:ee:37:20:a7:2a:39:df:41:37:5a:07:
         47:1d:c3:27:95:a4:6b:f5:79:87:a7:74:60:4e:ca:d7:a0:d8:
         34:e7:43:ce:ae:ea:d4:d5:bf:1a:82:33:da:83:77:21:ca:47:
         ca:ab:5b:df:dc:73:f5:c1:b1:2b:e4:2f:a2:a2:63:24:f5:74:
         e2:a0:63:8a:a2:9d:6c:f2:47:c6:f7:69:45:be:e9:f1:53:a4:
         ff:e2:13:a2:8f:0e:5f:a0:9e:5f:a4:7f:e3:7d:64:da:05:73:
         63:e8:53:fc:ba:a7:9d:d5:33:8e:45:75:7a:1d:2d:84:fb:95:
         bf:10:d6:53:90:2d:d7:e7:ef:3b:54:a0:2c:be:6b:c2:d7:4e:
         02:54:b0:42:37:1f:75:a0:53:30:9a:61:8d:a6:df:6d:ba:3e:
         e1:6d:b5:91:bd:fc:6a:62:aa:f2:ed:d3:6e:a1:58:55:d1:8c:
         95:e6:ba:b9:25:60:ae:f7:4d:c9:ec:02:15:c6:1f:09:ab:59:
         30:00:15:d2:18:d3:f0:49:5d:4b:f2:8a:f6:1e:e5:32:43:be:
         4e:e9:98:8b:c9:37:ba:cf:eb:8f:38:98:00:b7:07:6a:27:d1:
         35:89:0f:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4NWNSQXoGIQ/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MGEwOGZkZjQtYzJmMC00ZTliLWJjMTItMTE2MmU3NDk3YjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKPffCB5r3qEU6xRq8hE32ARzhrgqJKfeRCf
eP1XyoOTYgPLUAq0/P1TBllxb7bP5ag+UJWLk01GdWub9874BPv49m860gjw3iv2
l8+r4R3QkQjNlPG3M+MFawLzkRc1XZboSH1BAhUAEsBDidFQ1RZFQ99X/vyz4r+r
tIoH/2Q7CIbpgPfaxM4rk1ETo4ezBaIDCFTPvNUZ9xaAACN9vQ5GuoJJp4Z9yjOg
O3dozai8JbhWs9A03a+fJMIZJwPL/JWzg3yz+CdF2RJkttwtHcJAVC82rj7m/S4M
aFKcrT4R7T60XFVQlnz5VnGpBDUh937mGXEk7CBhMp4WXmQDswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCnYIRwoB1G1KvXpKzfSxhjcWCJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZkNDAzODktMjUxYy0z
YzAyLWJkOTAtMjkwZTY3YjFjZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaG7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRQCUG4bPIwTT7A52WmyxeRxkFnlsmQ97TuNyCnKjnfQTdaB0cdwyeV
pGv1eYendGBOyteg2DTnQ86u6tTVvxqCM9qDdyHKR8qrW9/cc/XBsSvkL6KiYyT1
dOKgY4qinWzyR8b3aUW+6fFTpP/iE6KPDl+gnl+kf+N9ZNoFc2PoU/y6p53VM45F
dXodLYT7lb8Q1lOQLdfn7ztUoCy+a8LXTgJUsEI3H3WgUzCaYY2m3226PuFttZG9
/GpiqvLt026hWFXRjJXmurklYK73TcnsAhXGHwmrWTAAFdIY0/BJXUvyivYe5TJD
vk7pmIvJN7rP6484mAC3B2on0TWJD1o=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:08 2026 by rpki-client