Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38b3e3d0-96b5-3e0b-b4f1-b8ffd664644f.roa
File:                     38b3e3d0-96b5-3e0b-b4f1-b8ffd664644f.roa (raw, json)
Hash identifier:          ARZRh3jt8wFF7EnndcTIWJvynFHRltBipDJamGbERls=
Subject key identifier:   35:6C:BF:20:A9:DD:F3:81:34:A6:CD:3A:A6:B5:2D:AB:A5:98:7F:CF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E614561C39E7AB0935CAC3300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38b3e3d0-96b5-3e0b-b4f1-b8ffd664644f.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     13335
IP address blocks:        104.23.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:61:c3:9e:7a:b0:93:5c:ac:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=8314f4b5-ae4e-4f29-9c91-e1f40d48bef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:68:a9:5d:23:a5:85:bb:21:d9:23:bd:74:
                    9a:76:7a:01:8d:e9:ad:d7:d9:aa:eb:13:8e:5d:08:
                    02:80:42:c4:75:c9:db:72:cc:12:69:a3:b7:fe:64:
                    8d:90:cf:0e:30:be:0f:63:05:6f:22:0f:d8:87:3f:
                    76:e1:ec:9b:32:ba:c8:87:00:27:e9:fd:37:88:cb:
                    5b:bd:ad:ee:d5:8c:c6:3c:ad:fd:94:0d:a9:f3:a2:
                    11:25:a4:1b:5d:42:4b:53:66:ec:c3:e2:73:e4:63:
                    d6:9e:62:bd:ee:75:1d:aa:49:65:bc:e9:cb:89:8d:
                    ba:e1:0b:31:bd:a4:89:1a:a8:7c:83:7a:04:63:61:
                    15:97:e8:fa:10:fc:35:c2:4b:f8:5f:d8:11:89:52:
                    35:3d:5b:7b:73:35:cb:a7:e6:6c:ad:c6:57:54:7f:
                    df:fd:4d:75:97:6e:f9:17:4a:bc:ee:db:04:9d:76:
                    ad:a1:78:54:6e:4e:2b:e2:c1:e1:d9:e2:fa:8e:fa:
                    c1:4d:12:b4:f6:af:48:46:b4:3a:8c:2d:8b:89:bc:
                    d2:00:2e:82:26:2f:22:a2:b2:5e:42:5d:b3:56:12:
                    a2:4c:59:4e:91:ad:2a:53:88:ef:c2:36:d5:b2:23:
                    2d:e6:7d:81:f3:d1:7c:94:09:b6:50:f8:f6:08:c7:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6C:BF:20:A9:DD:F3:81:34:A6:CD:3A:A6:B5:2D:AB:A5:98:7F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38b3e3d0-96b5-3e0b-b4f1-b8ffd664644f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:41:fe:67:58:0e:65:8b:a6:f8:aa:23:10:b0:b8:b2:f9:d4:
         9b:e7:53:7e:bc:0f:61:2f:52:49:63:d4:5c:2a:b2:73:e0:16:
         39:f9:60:e0:7b:18:04:5e:01:a5:ce:4c:a2:a4:ee:6c:e5:a5:
         66:01:bd:3b:c7:db:2b:1f:50:bc:1f:fb:a3:82:15:4d:69:1a:
         9b:b9:01:80:0a:89:cf:d1:9a:bc:48:de:cc:f0:64:fb:f7:89:
         52:43:c2:6f:0e:7a:89:24:b8:d8:9a:24:9f:de:16:65:85:bc:
         1a:a7:ed:1c:d0:7e:64:71:90:17:e3:cd:db:2a:4e:12:04:b3:
         a0:8b:3e:d7:18:c7:22:9f:ac:9c:fc:e5:93:8b:86:43:86:97:
         aa:b8:0e:2f:f2:af:3d:28:f0:9b:75:0f:2d:f4:ea:4c:2b:a8:
         a6:73:ed:c5:af:58:8b:10:1f:46:1e:cb:e5:35:2f:96:75:56:
         7f:1e:03:73:93:1c:00:4b:28:76:eb:95:4e:28:40:66:44:bd:
         e4:fa:06:9d:b7:c2:b8:86:12:e8:2c:25:1c:79:f8:e1:ab:ab:
         2e:be:86:9d:e0:b6:79:c8:48:42:ff:17:3c:f6:e0:48:f8:7e:
         ff:50:14:59:ba:e8:57:48:88:cb:b2:57:c4:67:dd:db:b1:9c:
         f6:5c:c8:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRWHDnnqwk1ysMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ODMxNGY0YjUtYWU0ZS00ZjI5LTljOTEtZTFmNDBkNDhiZWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo79oqV0jpYW7IdkjvXSadnoBjemt19mq6xOO
XQgCgELEdcnbcswSaaO3/mSNkM8OML4PYwVvIg/Yhz924eybMrrIhwAn6f03iMtb
va3u1YzGPK39lA2p86IRJaQbXUJLU2bsw+Jz5GPWnmK97nUdqkllvOnLiY264Qsx
vaSJGqh8g3oEY2EVl+j6EPw1wkv4X9gRiVI1PVt7czXLp+ZsrcZXVH/f/U11l275
F0q87tsEnXatoXhUbk4r4sHh2eL6jvrBTRK09q9IRrQ6jC2LibzSAC6CJi8iorJe
Ql2zVhKiTFlOka0qU4jvwjbVsiMt5n2B89F8lAm2UPj2CMepHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVsvyCp3fOBNKbNOqa1LaulmH/PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhiM2UzZDAtOTZiNS0z
ZTBiLWI0ZjEtYjhmZmQ2NjQ2NDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpB/mdYDmWLpviqIxCwuLL51JvnU368D2EvUklj1FwqsnPgFjn5YOB7
GAReAaXOTKKk7mzlpWYBvTvH2ysfULwf+6OCFU1pGpu5AYAKic/RmrxI3szwZPv3
iVJDwm8OeokkuNiaJJ/eFmWFvBqn7RzQfmRxkBfjzdsqThIEs6CLPtcYxyKfrJz8
5ZOLhkOGl6q4Di/yrz0o8Jt1Dy306kwrqKZz7cWvWIsQH0Yey+U1L5Z1Vn8eA3OT
HABLKHbrlU4oQGZEveT6Bp23wriGEugsJRx5+OGrqy6+hp3gtnnISEL/Fzz24Ej4
fv9QFFm66FdIiMuyV8Rn3duxnPZcyAI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:47 2026 by rpki-client