Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa
File:                     0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa (raw, json)
Hash identifier:          fSFZdDutFzTroOaVC1n15VUsiun54EGgbmV6DrrTR2g=
Subject key identifier:   B3:F1:52:92:EF:47:84:34:91:4E:EB:1A:2B:F4:52:53:4F:BC:84:BB
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584D20AF5768849AB43E0BEF9F40
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     213122
IP address blocks:        104.224.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:57:68:84:9a:b4:3e:0b:ef:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=e9ef4cb6-3274-44f5-8ccd-81cc3aff171e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:a4:09:f0:6b:e6:67:47:0e:a7:e6:0e:10:
                    be:68:6c:9e:67:24:da:22:09:a8:0c:51:33:42:44:
                    31:6b:a1:e1:e5:44:c5:0c:55:85:15:15:27:8e:ba:
                    70:ed:29:0e:0b:3a:2d:99:aa:5a:18:6b:1f:d0:c3:
                    34:96:19:10:a6:09:bf:21:26:13:2e:a3:a2:fa:7b:
                    c1:d3:06:42:43:00:12:4e:1f:b9:99:9e:8a:b6:b4:
                    24:7a:d1:ca:b6:85:ad:bb:9c:dd:93:d9:f0:ce:77:
                    dc:6d:69:41:20:e4:e2:b1:f3:8f:30:46:e6:60:0d:
                    56:e8:cd:c7:c1:5d:cb:d0:12:c5:0c:d7:78:6c:f0:
                    a4:f7:4f:74:90:09:79:20:d2:4d:02:9b:4d:f3:93:
                    27:73:86:62:8e:16:8f:0f:f6:c0:6e:86:7d:13:aa:
                    f0:b7:80:2e:f0:da:0b:75:6e:a1:f2:94:db:37:3d:
                    c4:e5:99:d1:b0:39:50:c6:b6:ba:ab:43:b0:69:9a:
                    25:2c:b0:c2:b5:24:5a:a3:3b:c1:91:42:7c:0e:bd:
                    e4:36:b2:d0:4a:65:0d:da:b4:a9:16:e0:21:59:10:
                    ca:80:0f:3b:ae:7a:03:92:3e:11:60:72:6e:fb:87:
                    fc:36:c2:44:90:52:80:e1:12:ca:b4:c3:91:63:98:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:52:92:EF:47:84:34:91:4E:EB:1A:2B:F4:52:53:4F:BC:84:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:c3:48:16:fd:be:5f:90:6a:9c:b7:a9:e9:58:28:0d:96:
         60:1a:1b:e0:34:de:f6:2e:02:6f:5e:e6:77:2a:e3:c7:b0:75:
         62:ac:57:d7:e9:05:3d:13:98:21:ed:fe:e5:dd:90:c7:7b:18:
         eb:98:6a:d5:5a:3f:2a:21:46:bb:92:f1:22:3c:91:91:2b:16:
         73:46:bc:02:4d:a7:b7:e9:b1:e8:52:f0:22:44:8c:ac:12:fe:
         26:d7:22:9e:ae:1b:96:31:6d:51:1c:d6:e8:6c:d4:63:25:5c:
         90:06:6a:d1:50:9d:b7:7a:bd:b9:b4:96:84:bd:3f:32:6e:b4:
         c3:c4:c7:56:aa:ce:85:b7:d6:ee:63:7b:83:9a:8d:3c:f9:a0:
         79:3b:ab:7b:7f:55:2e:60:fb:6d:23:aa:61:45:f6:37:dc:98:
         9e:ca:5e:b3:a1:7e:69:cb:17:1b:aa:75:af:b4:42:8e:55:4a:
         51:90:98:b8:e1:09:f2:9d:45:12:1d:04:af:fb:fd:5c:ec:3c:
         7c:72:b5:9b:b2:3f:f6:62:0a:48:9d:ff:b0:51:a4:5c:b3:61:
         d1:22:bd:66:e2:75:a3:23:d9:b9:7f:b9:35:5f:f5:59:fd:c2:
         11:93:79:86:9c:21:43:18:c9:ea:ed:14:ba:4a:06:4b:a2:1f:
         4b:93:e9:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1dohJq0Pgvvn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTllZjRjYjYtMzI3NC00NGY1LThjY2QtODFjYzNhZmYxNzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW6kCfBr5mdHDqfmDhC+aGyeZyTaIgmoDFEz
QkQxa6Hh5UTFDFWFFRUnjrpw7SkOCzotmapaGGsf0MM0lhkQpgm/ISYTLqOi+nvB
0wZCQwASTh+5mZ6KtrQketHKtoWtu5zdk9nwznfcbWlBIOTisfOPMEbmYA1W6M3H
wV3L0BLFDNd4bPCk9090kAl5INJNAptN85Mnc4ZijhaPD/bAboZ9E6rwt4Au8NoL
dW6h8pTbNz3E5ZnRsDlQxra6q0OwaZolLLDCtSRaozvBkUJ8Dr3kNrLQSmUN2rSp
FuAhWRDKgA87rnoDkj4RYHJu+4f8NsJEkFKA4RLKtMORY5i4pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPxUpLvR4Q0kU7rGiv0UlNPvIS7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMGQ2NjcwMGUtMWM0Mi0z
Y2U1LTlmYWItZGQ4NTIwMmYzNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT7w0gW/b5fkGqct6npWCgNlmAaG+A03vYuAm9e5ncq48ewdWKsV9fp
BT0TmCHt/uXdkMd7GOuYatVaPyohRruS8SI8kZErFnNGvAJNp7fpsehS8CJEjKwS
/ibXIp6uG5YxbVEc1uhs1GMlXJAGatFQnbd6vbm0loS9PzJutMPEx1aqzoW31u5j
e4OajTz5oHk7q3t/VS5g+20jqmFF9jfcmJ7KXrOhfmnLFxuqda+0Qo5VSlGQmLjh
CfKdRRIdBK/7/VzsPHxytZuyP/ZiCkid/7BRpFyzYdEivWbidaMj2bl/uTVf9Vn9
whGTeYacIUMYyertFLpKBkuiH0uT6ZU=
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:05 2026 by rpki-client