Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa
File:                     2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa (raw, json)
Hash identifier:          LW9WwzPWK5nVAoJjS40lLSJDUGbAWBzUJVDTjwjIHt4=
Subject key identifier:   A1:92:A1:B0:99:91:80:71:2E:6E:66:3E:D0:20:1D:57:29:18:6E:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA87669B6A39C6A44F0A2C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.16.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:66:9b:6a:39:c6:a4:4f:0a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=8fba21af-5369-4ea4-9887-7d25c7553097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:d2:07:85:31:0a:5e:ab:67:b8:56:81:ca:
                    a0:0f:47:64:cb:85:a1:3c:8d:45:f7:8c:de:48:6f:
                    23:ee:87:31:b0:0c:ff:b9:f2:44:b1:fc:cb:40:ba:
                    51:a3:55:00:48:4f:c2:fe:1a:5a:e4:28:96:e2:a5:
                    db:f0:9c:90:77:0f:b5:a0:bd:c1:41:97:57:b5:a4:
                    03:10:db:f8:34:8b:7d:65:f8:f0:48:65:33:52:62:
                    be:64:cb:8b:b5:e5:52:ac:0f:92:99:17:98:9e:5b:
                    99:55:3b:10:64:cb:f0:db:ee:71:c3:48:85:7b:54:
                    83:41:97:08:36:04:1c:a4:f0:4e:09:be:24:68:8e:
                    47:ae:94:2f:b2:88:f4:e1:19:0f:ae:e9:2a:a2:87:
                    6e:24:32:b1:cc:c8:4b:08:0b:d8:f2:37:f9:c3:6a:
                    9a:04:6a:bd:2d:bf:69:1d:3b:ab:3e:2e:c3:d6:da:
                    c8:7f:21:f3:d6:e5:e5:d6:f0:d0:b7:14:3d:b3:28:
                    4c:41:af:cb:17:99:e2:55:7b:01:6f:d2:10:be:85:
                    57:14:41:84:49:aa:32:f4:46:9e:85:21:1b:36:e6:
                    16:ad:f7:71:78:b3:d8:f7:f5:e8:83:c4:93:f9:14:
                    09:c3:56:08:1b:70:81:73:f4:f3:33:53:95:4f:0a:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:A1:B0:99:91:80:71:2E:6E:66:3E:D0:20:1D:57:29:18:6E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:c9:c3:f8:47:d1:8f:09:35:85:b8:0a:19:8c:a9:ac:ff:
         65:27:6f:a1:c9:c0:b2:d3:ce:35:b2:c8:a7:5b:37:24:b8:35:
         58:11:12:f2:c0:b4:88:d8:6e:1e:a0:85:8a:91:b3:e9:6d:9e:
         ff:a7:4a:49:d5:7f:23:51:04:03:09:27:86:4f:4f:c5:ac:f0:
         5b:a7:8f:75:a8:af:e9:38:a9:de:9e:3e:1e:8a:d2:ce:b2:f1:
         3f:e1:3b:81:de:d1:c3:e0:52:1c:7b:cb:77:da:41:f9:b7:a8:
         ac:e9:6c:0c:39:37:b9:38:9f:ee:2f:29:19:b7:bc:ae:c2:4e:
         23:e1:38:a5:e2:da:1a:80:d2:ff:c1:c4:17:15:44:01:da:a7:
         fc:73:26:cb:aa:f0:32:b6:8c:14:ce:70:72:9e:22:c5:95:6b:
         37:51:01:60:e4:e7:66:39:dd:1d:82:bc:b7:ab:3e:9f:57:9a:
         7c:9f:44:61:9a:59:bd:cb:a5:66:23:54:8f:25:df:50:f5:b4:
         0f:13:f5:12:73:aa:10:1e:6c:98:e3:97:d3:41:f2:d3:f8:d4:
         0f:40:5a:5e:de:18:d6:18:ef:08:5c:a9:b1:fc:4b:24:26:21:
         1e:2c:0c:4a:4c:06:7a:96:1d:2b:13:45:14:ff:5e:14:80:2d:
         e3:37:ea:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2abajnGpE8KLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
OGZiYTIxYWYtNTM2OS00ZWE0LTk4ODctN2QyNWM3NTUzMDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFbSB4UxCl6rZ7hWgcqgD0dky4WhPI1F94ze
SG8j7ocxsAz/ufJEsfzLQLpRo1UASE/C/hpa5CiW4qXb8JyQdw+1oL3BQZdXtaQD
ENv4NIt9ZfjwSGUzUmK+ZMuLteVSrA+SmReYnluZVTsQZMvw2+5xw0iFe1SDQZcI
NgQcpPBOCb4kaI5HrpQvsoj04RkPrukqooduJDKxzMhLCAvY8jf5w2qaBGq9Lb9p
HTurPi7D1trIfyHz1uXl1vDQtxQ9syhMQa/LF5niVXsBb9IQvoVXFEGESaoy9Eae
hSEbNuYWrfdxeLPY9/Xog8ST+RQJw1YIG3CBc/TzM1OVTwr2TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGSobCZkYBxLm5mPtAgHVcpGG49MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYzZGMxN2UtNjJiNS0z
ZmU2LWE5ZjAtNGNhODc5ZTA2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEw6ycP4R9GPCTWFuAoZjKms/2Unb6HJwLLTzjWyyKdbNyS4NVgREvLA
tIjYbh6ghYqRs+ltnv+nSknVfyNRBAMJJ4ZPT8Ws8Funj3Wor+k4qd6ePh6K0s6y
8T/hO4He0cPgUhx7y3faQfm3qKzpbAw5N7k4n+4vKRm3vK7CTiPhOKXi2hqA0v/B
xBcVRAHap/xzJsuq8DK2jBTOcHKeIsWVazdRAWDk52Y53R2CvLerPp9XmnyfRGGa
Wb3LpWYjVI8l31D1tA8T9RJzqhAebJjjl9NB8tP41A9AWl7eGNYY7whcqbH8SyQm
IR4sDEpMBnqWHSsTRRT/XhSALeM36ok=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:41:21 2026 by rpki-client