Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6548e6-0941-3baa-9d5d-343822f2dfee.roa
File:                     3a6548e6-0941-3baa-9d5d-343822f2dfee.roa (raw, json)
Hash identifier:          nKB44M4EnvbnIEo+re4knyZr+Os2/WBu+tAdH9ZUxSQ=
Subject key identifier:   6B:23:80:6B:E0:E8:3F:89:33:21:33:C0:23:83:A5:36:88:94:21:28
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA877EE80D00478462EC3780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6548e6-0941-3baa-9d5d-343822f2dfee.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.29.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:7e:e8:0d:00:47:84:62:ec:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=85dd085f-e3ad-4114-afbf-e4b842b9409a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:bf:b4:ad:df:fb:56:c3:1b:2e:01:f0:02:
                    1c:05:04:d9:c4:68:62:93:72:1a:16:10:65:bc:fa:
                    1d:3d:39:25:42:cb:6a:93:20:da:42:3d:43:b8:8b:
                    a6:90:5f:cb:a8:6e:bc:96:f3:90:a6:ea:79:d9:33:
                    36:05:51:d9:ed:68:83:c5:81:ef:3c:d1:7b:b6:96:
                    d3:ce:69:63:f3:68:17:03:59:17:44:c0:41:13:49:
                    8a:40:69:21:cf:16:d1:4b:cb:5a:69:c7:0b:19:dc:
                    67:54:cb:b6:32:b6:97:a6:13:88:41:ff:c0:7e:02:
                    ac:d1:63:03:c2:2d:b0:5f:d2:3e:cb:8e:0d:09:80:
                    15:75:d5:a1:72:27:17:67:3a:8b:cb:71:ba:c3:10:
                    06:3c:97:30:b5:69:05:bb:d3:32:d1:0b:b3:db:a8:
                    aa:dd:c6:b1:75:02:40:94:f5:16:13:22:b7:79:22:
                    c9:92:bc:09:35:dc:39:ab:d9:79:6d:a1:57:81:85:
                    a5:7a:b8:79:eb:5b:8d:13:9d:7b:6a:fc:d4:76:3f:
                    d0:5b:20:7c:e1:c8:44:87:75:07:c3:5f:36:16:d1:
                    6d:34:30:f0:cd:f4:07:97:c8:65:72:81:ba:fa:8d:
                    9b:74:8b:14:a1:5a:c6:13:cd:d8:7f:59:bc:16:8a:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:80:6B:E0:E8:3F:89:33:21:33:C0:23:83:A5:36:88:94:21:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a6548e6-0941-3baa-9d5d-343822f2dfee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:42:c0:39:92:10:2f:14:b6:28:62:d3:1d:b0:1b:a5:c0:61:
         2d:97:d7:43:a0:d7:f3:8c:8b:05:c8:e0:4f:eb:f5:69:d6:c9:
         af:6f:21:93:b5:2c:b7:f5:2c:4d:06:12:ca:f6:48:0e:30:e8:
         dd:04:f1:0b:d5:26:98:1a:31:a6:69:2c:b1:73:df:04:84:e2:
         ba:d3:0b:7e:f5:00:4c:58:75:8a:ae:8e:55:47:5f:a0:4f:ed:
         5c:9c:f6:2d:3d:74:32:e2:46:5b:bc:00:3b:69:b8:4b:fa:4f:
         5c:fc:3f:02:19:53:9a:3c:f4:b9:51:4a:fc:f1:91:90:25:26:
         d7:be:ac:72:c5:c1:e9:b0:be:57:9d:68:eb:2d:10:da:b8:f6:
         f3:cf:17:1d:38:01:9a:40:bc:47:aa:20:bb:7b:fd:1c:2d:0d:
         61:7a:19:dd:ff:4e:e2:1c:67:a4:c4:f6:e4:c4:5d:e8:2b:6b:
         3d:57:1d:7d:63:52:11:ec:3f:78:b4:af:fb:80:44:f2:b9:50:
         0c:69:c5:f6:a0:11:59:b7:fe:48:a9:b2:57:06:00:f8:41:41:
         30:bd:82:fe:0b:bc:82:06:4e:9f:c4:d7:75:35:00:5b:49:cb:
         46:58:42:69:d9:d6:22:3a:84:49:c7:38:1d:78:4c:2d:a9:d3:
         a3:46:8a:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh37oDQBHhGLsN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
ODVkZDA4NWYtZTNhZC00MTE0LWFmYmYtZTRiODQyYjk0MDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+y/tK3f+1bDGy4B8AIcBQTZxGhik3IaFhBl
vPodPTklQstqkyDaQj1DuIumkF/LqG68lvOQpup52TM2BVHZ7WiDxYHvPNF7tpbT
zmlj82gXA1kXRMBBE0mKQGkhzxbRS8taaccLGdxnVMu2MraXphOIQf/AfgKs0WMD
wi2wX9I+y44NCYAVddWhcicXZzqLy3G6wxAGPJcwtWkFu9My0Quz26iq3caxdQJA
lPUWEyK3eSLJkrwJNdw5q9l5baFXgYWlerh561uNE517avzUdj/QWyB84chEh3UH
w182FtFtNDDwzfQHl8hlcoG6+o2bdIsUoVrGE83Yf1m8FoorSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsjgGvg6D+JMyEzwCODpTaIlCEoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2E2NTQ4ZTYtMDk0MS0z
YmFhLTlkNWQtMzQzODIyZjJkZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpCwDmSEC8Utihi0x2wG6XAYS2X10Og1/OMiwXI4E/r9WnWya9vIZO1
LLf1LE0GEsr2SA4w6N0E8QvVJpgaMaZpLLFz3wSE4rrTC371AExYdYqujlVHX6BP
7Vyc9i09dDLiRlu8ADtpuEv6T1z8PwIZU5o89LlRSvzxkZAlJte+rHLFwemwvled
aOstENq49vPPFx04AZpAvEeqILt7/RwtDWF6Gd3/TuIcZ6TE9uTEXegraz1XHX1j
UhHsP3i0r/uARPK5UAxpxfagEVm3/kipslcGAPhBQTC9gv4LvIIGTp/E13U1AFtJ
y0ZYQmnZ1iI6hEnHOB14TC2p06NGigY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:09:54 2026 by rpki-client