Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa
File:                     9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa (raw, json)
Hash identifier:          rUgsJCnVBpBEYfVVgKyzYTDYVbfT1U9+TgAUmAXj9kk=
Subject key identifier:   78:D5:AB:1A:5E:95:9B:A6:F4:C3:99:F2:9B:32:95:E6:9C:F5:1D:90
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA7880CD0D173A407A33C2E78
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        104.23.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0c:d0:d1:73:a4:07:a3:3c:2e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e6987b77-aa6c-4c87-8fe0-730e483898c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:a1:e2:74:70:68:29:60:31:15:10:25:ea:
                    a4:1c:17:9d:e6:d8:c8:3d:be:86:1f:ed:a1:ad:42:
                    15:08:fb:ed:fb:cd:70:33:77:36:41:76:26:c1:22:
                    bb:f5:d4:48:0f:f3:bc:42:f3:69:2b:a1:a3:79:c8:
                    86:40:88:39:48:f0:10:50:8d:23:34:61:b5:3f:b3:
                    c8:89:46:cf:85:fb:49:a4:9d:61:0f:fa:bc:e4:46:
                    7d:91:a9:86:02:c9:68:7e:02:be:5b:e4:e6:40:85:
                    7e:f8:7e:f9:fa:a5:74:83:f5:69:91:43:51:41:77:
                    b9:2a:b9:15:3a:bf:61:ef:d9:14:17:dc:ed:87:f6:
                    83:23:1b:eb:4b:44:76:d8:a4:ad:d9:ea:dc:e6:52:
                    d6:17:7a:b7:ee:00:46:9f:95:22:53:78:95:0e:b5:
                    81:83:fa:3f:9e:19:57:cf:4d:47:0f:c3:de:66:ac:
                    0f:9b:55:a2:c6:f3:83:1d:cc:37:5a:2a:5b:21:f4:
                    69:99:31:08:e9:e5:0d:ee:73:89:de:e0:b6:24:62:
                    05:a4:61:a6:06:ce:7a:6a:33:8d:29:30:15:a0:ff:
                    b4:a3:d6:36:89:ad:a5:e5:38:b7:27:23:26:29:dc:
                    3f:d0:97:be:77:17:e3:47:56:71:c2:8d:11:6e:f5:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:AB:1A:5E:95:9B:A6:F4:C3:99:F2:9B:32:95:E6:9C:F5:1D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:10:97:cf:3a:e8:ba:86:bf:dd:a7:8c:47:bb:2a:eb:e7:ba:
         6b:10:ce:ae:7f:4b:88:51:68:a9:91:c3:66:24:34:5c:ca:a4:
         bf:7a:c5:83:e6:bf:89:f3:53:c1:fd:d2:ec:90:9a:c7:50:3d:
         bb:60:26:29:4f:0b:88:8d:64:31:1c:3c:31:85:98:56:06:de:
         d2:56:bc:83:3a:cf:7c:87:75:df:d1:77:35:7b:69:d5:65:10:
         16:00:fe:aa:6a:db:29:47:1a:ef:63:61:ef:ce:5b:f2:d4:0e:
         15:4e:bd:d0:c5:85:87:9d:82:63:97:ee:66:07:5b:82:b0:0c:
         b3:0e:cb:69:37:9c:71:bd:37:7c:bf:80:84:e7:40:31:b4:45:
         24:b2:01:7f:76:88:f6:39:c6:af:04:bb:8b:36:1b:3f:0c:f8:
         f0:47:2c:1c:16:f9:48:78:ca:05:6e:41:98:ba:19:47:73:f3:
         31:40:b7:0b:9c:cf:ef:95:17:af:74:33:ac:cb:80:d8:de:90:
         d4:0d:e4:07:ea:ac:61:25:66:7f:d3:54:34:b7:59:e8:ba:20:
         18:1a:12:a5:0f:69:93:70:ec:4b:1d:8b:c7:82:ef:ca:d2:37:
         04:64:e8:69:ab:ea:a6:e6:70:7b:dd:1a:10:37:22:29:09:cc:
         f8:cc:47:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niAzQ0XOkB6M8LngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTY5ODdiNzctYWE2Yy00Yzg3LThmZTAtNzMwZTQ4Mzg5OGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2h4nRwaClgMRUQJeqkHBed5tjIPb6GH+2h
rUIVCPvt+81wM3c2QXYmwSK79dRID/O8QvNpK6GjeciGQIg5SPAQUI0jNGG1P7PI
iUbPhftJpJ1hD/q85EZ9kamGAslofgK+W+TmQIV++H75+qV0g/VpkUNRQXe5KrkV
Or9h79kUF9zth/aDIxvrS0R22KSt2erc5lLWF3q37gBGn5UiU3iVDrWBg/o/nhlX
z01HD8PeZqwPm1WixvODHcw3WipbIfRpmTEI6eUN7nOJ3uC2JGIFpGGmBs56ajON
KTAVoP+0o9Y2ia2l5Ti3JyMmKdw/0Je+dxfjR1Zxwo0RbvUUTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjVqxpelZum9MOZ8psyleac9R2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI5Y2FhNGMtNWY1OS0z
ZThkLWJjMTUtOWE3OWZhOTExYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBekMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQQl8866LqGv92njEe7KuvnumsQzq5/S4hRaKmRw2YkNFzKpL96xYPm
v4nzU8H90uyQmsdQPbtgJilPC4iNZDEcPDGFmFYG3tJWvIM6z3yHdd/RdzV7adVl
EBYA/qpq2ylHGu9jYe/OW/LUDhVOvdDFhYedgmOX7mYHW4KwDLMOy2k3nHG9N3y/
gITnQDG0RSSyAX92iPY5xq8Eu4s2Gz8M+PBHLBwW+Uh4ygVuQZi6GUdz8zFAtwuc
z++VF690M6zLgNjekNQN5AfqrGElZn/TVDS3Wei6IBgaEqUPaZNw7Esdi8eC78rS
NwRk6Gmr6qbmcHvdGhA3IikJzPjMR3Q=
-----END CERTIFICATE-----
Generated at Sat Aug 8 02:51:24 2026 by rpki-client