Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/954180a7-60a4-3e81-b700-bf5a60d53b09.roa
File:                     954180a7-60a4-3e81-b700-bf5a60d53b09.roa (raw, json)
Hash identifier:          k5KCEBSHffPdEqIl2gAZj/kQIehW1JvLlV5NduwXE9M=
Subject key identifier:   D3:F5:86:DF:6B:FA:AA:66:8F:D8:99:DD:BD:0B:F2:E1:F4:73:74:52
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584F82AD981340B993F19D11C400
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/954180a7-60a4-3e81-b700-bf5a60d53b09.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     8075
IP address blocks:        104.193.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:98:13:40:b9:93:f1:9d:11:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=55c33b13-0907-48bc-96ea-c92baf9518bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:48:18:e1:26:cd:0c:f3:a4:ea:6a:70:8f:
                    31:da:c4:5f:ba:b7:02:38:eb:f3:17:1e:5a:c7:93:
                    73:73:da:d1:e4:8a:e0:61:f1:35:f2:06:c5:79:95:
                    3a:b1:71:0f:f2:86:d2:c8:a5:6f:64:c3:11:d7:b8:
                    c9:f7:31:a7:06:5f:43:4e:79:8a:b6:ec:16:c2:84:
                    93:31:05:0d:b8:e7:1a:e0:8c:bb:9f:8b:a9:20:0b:
                    64:7c:af:15:4a:dc:98:87:64:b8:20:e1:a8:55:a9:
                    d1:ad:16:42:a7:51:df:66:de:8c:29:71:e2:4f:fd:
                    dd:3d:03:49:9f:98:6f:8a:83:31:e7:9d:ef:5d:70:
                    56:57:90:31:4c:54:45:b4:31:33:98:d1:b3:48:34:
                    1d:6a:22:db:db:11:a9:ff:67:57:0a:75:9b:d9:af:
                    e4:51:2e:42:f6:84:4c:a1:ba:69:c2:82:46:71:63:
                    d2:ef:0c:f3:bf:f7:cb:36:52:eb:ba:92:56:b7:e6:
                    b6:45:f3:59:0e:b9:45:fa:21:bd:e6:45:fb:2d:d4:
                    b7:a1:da:5a:ab:ff:48:25:52:cf:68:50:7a:31:2f:
                    b8:06:fd:6f:a3:3a:b3:1b:3b:4d:6e:40:46:1b:72:
                    5a:01:60:3e:4a:e4:66:2f:ed:a7:2e:03:51:2c:5e:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F5:86:DF:6B:FA:AA:66:8F:D8:99:DD:BD:0B:F2:E1:F4:73:74:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/954180a7-60a4-3e81-b700-bf5a60d53b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c2:40:3f:fa:d9:b4:0a:53:bc:f9:3d:70:87:cc:b5:e4:e1:
         f4:bf:36:b3:df:6a:0f:22:f7:84:40:f9:6d:e9:81:cc:92:fd:
         c8:51:4c:98:68:76:9f:0b:5f:d7:5a:b0:d6:92:6e:05:00:54:
         56:a3:98:9d:f7:6e:5d:dd:64:cc:eb:49:15:59:88:ef:21:a4:
         16:bc:bf:3f:49:c8:07:fe:b6:4b:64:35:2a:0d:c0:df:1c:ca:
         fc:7d:70:ee:ee:f4:f4:f2:a5:33:b4:57:0f:bf:f0:3f:27:f0:
         fd:f6:5b:39:dc:85:69:61:79:a9:d3:0b:72:68:e6:17:f5:68:
         a9:91:68:24:65:d1:12:6d:a6:f9:c3:37:3a:c7:4d:3c:85:69:
         ae:4d:48:58:28:d3:81:f3:ed:2b:ee:4d:c3:e1:2c:d0:69:bb:
         d3:eb:b9:d6:47:17:49:c3:89:2c:ff:ef:46:5e:0f:be:29:27:
         18:26:c9:77:36:4d:79:e8:f6:ab:9a:3f:2c:bb:8b:4f:5c:65:
         31:cb:57:33:43:cc:2f:6c:21:bf:32:62:04:7b:65:c7:f8:8d:
         ca:e8:f7:bf:04:fb:c1:46:77:16:86:10:6a:07:b6:d2:9f:ec:
         e0:a7:6d:f9:3c:74:5d:64:c9:93:38:1e:7a:84:91:d4:17:48:
         ee:a6:f0:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrZgTQLmT8Z0RxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAxOWQxYzctYjMyYS00YTY1LWExMzUtMjM0Y2RlM2M3
NjgwMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
NTVjMzNiMTMtMDkwNy00OGJjLTk2ZWEtYzkyYmFmOTUxOGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G9IGOEmzQzzpOpqcI8x2sRfurcCOOvzFx5a
x5Nzc9rR5IrgYfE18gbFeZU6sXEP8obSyKVvZMMR17jJ9zGnBl9DTnmKtuwWwoST
MQUNuOca4Iy7n4upIAtkfK8VStyYh2S4IOGoVanRrRZCp1HfZt6MKXHiT/3dPQNJ
n5hvioMx553vXXBWV5AxTFRFtDEzmNGzSDQdaiLb2xGp/2dXCnWb2a/kUS5C9oRM
obppwoJGcWPS7wzzv/fLNlLrupJWt+a2RfNZDrlF+iG95kX7LdS3odpaq/9IJVLP
aFB6MS+4Bv1vozqzGztNbkBGG3JaAWA+SuRmL+2nLgNRLF7d5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNP1ht9r+qpmj9iZ3b0L8uH0c3RSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5
ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRjZGUzYzc2ODAvOTU0MTgwYTctNjBhNC0z
ZTgxLWI3MDAtYmY1YTYwZDUzYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzAxOWQxYzctYjMyYS00YTY1LWEx
MzUtMjM0Y2RlM2M3NjgwLzcwMTlkMWM3LWIzMmEtNGE2NS1hMTM1LTIzNGNkZTNj
NzY4MC5jcmwwHwYDVR0jBBgwFoAUIg3xbZnjAw8pgoinQ5WJawDMTZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRj
ZGUzYzc2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMENMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPCQD/62bQKU7z5PXCHzLXk4fS/NrPfag8i94RA+W3pgcyS/chRTJho
dp8LX9dasNaSbgUAVFajmJ33bl3dZMzrSRVZiO8hpBa8vz9JyAf+tktkNSoNwN8c
yvx9cO7u9PTypTO0Vw+/8D8n8P32WznchWlheanTC3Jo5hf1aKmRaCRl0RJtpvnD
NzrHTTyFaa5NSFgo04Hz7SvuTcPhLNBpu9PrudZHF0nDiSz/70ZeD74pJxgmyXc2
TXno9quaPyy7i09cZTHLVzNDzC9sIb8yYgR7Zcf4jcro978E+8FGdxaGEGoHttKf
7OCnbfk8dF1kyZM4HnqEkdQXSO6m8O8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:53 2026 by rpki-client