Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa
File:                     56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa (raw, json)
Hash identifier:          WZ+2EHVZd7TBml3Hje7y/PkSK1bq9BYx67SnkSKxgPM=
Subject key identifier:   81:85:2C:DC:83:E9:5A:AF:F1:85:DC:A7:C3:73:36:F4:88:17:D6:E7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB69AA9967E06D69851420
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:69:aa:99:67:e0:6d:69:85:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=bab98f0e-781d-479a-ba2a-30150a48e28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:a2:4a:20:14:d1:89:73:ad:24:68:2b:ce:
                    27:ed:e2:2b:28:8f:e1:93:61:5f:4f:97:2b:44:0d:
                    f4:25:de:e8:b4:e7:70:5d:cc:c3:3d:19:59:e2:7a:
                    e3:57:d0:d3:85:a9:fe:f8:16:8b:c5:c5:c4:65:2b:
                    44:b6:18:6d:dd:4f:d6:90:89:20:95:e5:16:a2:c0:
                    be:61:5d:e1:ba:75:d4:01:d1:e7:c0:b9:52:cf:0d:
                    90:15:9f:a8:3b:45:3b:45:1a:61:13:d3:99:d4:48:
                    3d:09:b7:e2:f3:8a:45:0c:56:32:bc:d5:29:55:8f:
                    da:57:68:4e:14:b1:da:0f:71:63:8e:41:e8:2b:ca:
                    db:99:2e:5d:92:bd:fd:e2:d1:e5:ba:81:e3:af:a3:
                    10:bc:fb:5d:8a:83:e5:7c:1b:46:ab:5e:58:48:f1:
                    1b:55:8a:d2:cb:cd:18:45:d5:01:b5:59:5d:1c:6b:
                    c8:c3:b9:bc:c8:81:a2:f7:36:d7:57:a6:17:2e:92:
                    6f:8f:fa:41:4c:47:28:8d:90:06:cf:e9:73:de:8b:
                    70:c0:8e:62:5e:f0:9f:3c:03:8f:53:a0:ac:7c:7f:
                    b8:32:e6:93:8e:23:83:a0:fa:5d:fe:2d:68:4e:a8:
                    a7:38:78:80:10:35:bf:dd:67:75:3d:f3:85:a3:23:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:85:2C:DC:83:E9:5A:AF:F1:85:DC:A7:C3:73:36:F4:88:17:D6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:f6:7d:8b:cd:23:5e:b9:ff:a5:61:ba:e5:26:18:0d:f9:
         69:18:c2:3f:06:fa:d3:8a:7e:8c:29:30:3e:32:b4:22:4f:15:
         56:17:ab:df:ab:93:9e:43:68:61:1d:78:23:e9:6a:42:47:95:
         64:54:e9:52:99:ba:64:50:ed:94:b0:34:a7:66:63:54:05:ba:
         7c:1c:a4:d2:81:55:4a:73:cf:f4:96:07:b7:75:8b:99:02:9d:
         79:26:38:3e:57:88:c1:7d:be:aa:6d:48:7c:eb:25:da:89:d9:
         08:57:d0:37:e8:97:54:df:35:cb:8d:84:97:8d:33:2d:7f:65:
         6e:59:bb:ca:11:63:58:51:f9:bf:8c:c1:4a:20:44:62:a7:15:
         07:85:fb:07:0e:3c:6e:9d:68:08:af:c2:a3:31:5d:c1:83:03:
         bb:b9:0c:b4:e2:b7:b2:50:03:d5:c3:48:b0:bd:9e:c2:4f:d2:
         b0:cb:4e:19:a1:9c:6b:0d:90:84:f6:47:43:78:64:a0:1b:4e:
         20:29:c7:86:4c:dd:41:a3:1c:3a:9b:e1:8e:20:22:f5:ee:1b:
         44:26:c5:33:0d:e4:3b:3e:03:5a:5c:f8:a6:e9:5c:db:cd:87:
         41:0a:cf:a9:73:03:c6:47:4e:e7:78:ca:2a:c7:d5:8d:8b:14:
         74:0e:90:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022mqmWfgbWmFFCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YmFiOThmMGUtNzgxZC00NzlhLWJhMmEtMzAxNTBhNDhlMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikCiSiAU0YlzrSRoK84n7eIrKI/hk2FfT5cr
RA30Jd7otOdwXczDPRlZ4nrjV9DThan++BaLxcXEZStEthht3U/WkIkgleUWosC+
YV3hunXUAdHnwLlSzw2QFZ+oO0U7RRphE9OZ1Eg9Cbfi84pFDFYyvNUpVY/aV2hO
FLHaD3FjjkHoK8rbmS5dkr394tHluoHjr6MQvPtdioPlfBtGq15YSPEbVYrSy80Y
RdUBtVldHGvIw7m8yIGi9zbXV6YXLpJvj/pBTEcojZAGz+lz3otwwI5iXvCfPAOP
U6CsfH+4MuaTjiODoPpd/i1oTqinOHiAEDW/3Wd1PfOFoyPz4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGFLNyD6Vqv8YXcp8NzNvSIF9bnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTZiZDUwYTctZmQyYy0z
MzdiLWIxN2YtZTMyMGIzZGJjMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEl89n2LzSNeuf+lYbrlJhgN+WkYwj8G+tOKfowpMD4ytCJPFVYXq9+r
k55DaGEdeCPpakJHlWRU6VKZumRQ7ZSwNKdmY1QFunwcpNKBVUpzz/SWB7d1i5kC
nXkmOD5XiMF9vqptSHzrJdqJ2QhX0Dfol1TfNcuNhJeNMy1/ZW5Zu8oRY1hR+b+M
wUogRGKnFQeF+wcOPG6daAivwqMxXcGDA7u5DLTit7JQA9XDSLC9nsJP0rDLThmh
nGsNkIT2R0N4ZKAbTiApx4ZM3UGjHDqb4Y4gIvXuG0QmxTMN5Ds+A1pc+KbpXNvN
h0EKz6lzA8ZHTud4yirH1Y2LFHQOkFA=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:15 2026 by rpki-client