Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa
File:                     8f032378-47d6-37ac-af0b-c39a0edea420.roa (raw, json)
Hash identifier:          9s0f4jugRqV+B2XH2kTTqhKdSMxdBbFl8psdKouBIfY=
Subject key identifier:   EB:43:F3:14:CD:47:EB:10:72:76:C9:9A:AB:DE:5E:BC:D4:51:80:B8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4984CC126DCEA949FE5654F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        104.198.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:cc:12:6d:ce:a9:49:fe:56:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=077d8a72-96f3-457b-960c-8c12a5a08aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:73:45:8b:c2:4f:e5:81:45:14:36:c6:ab:
                    1e:69:91:8a:09:db:77:14:5f:09:3c:80:fa:11:79:
                    11:50:3f:7e:39:42:21:67:85:61:05:7a:9b:e7:5a:
                    f6:5f:45:5f:62:ae:9e:2d:f9:bd:05:ac:ef:7f:03:
                    78:9e:5d:64:43:e7:0f:f6:d8:c9:66:3e:ab:6f:6c:
                    ec:0f:44:34:db:4a:25:1e:20:c2:4f:cb:ae:90:10:
                    df:b9:c3:82:cb:a4:41:ef:52:ea:8d:da:2d:e8:11:
                    57:51:ff:d5:24:23:ee:58:cd:c0:a9:b6:70:19:94:
                    06:b1:7c:70:2a:38:e0:74:4d:32:a2:be:be:c9:dc:
                    bd:72:dd:f4:53:78:12:db:68:57:b3:78:45:16:6f:
                    a4:aa:6b:7f:67:08:22:0b:1f:71:6e:91:a8:82:c4:
                    08:19:8f:e3:5c:0a:5d:bc:56:5e:88:46:bc:89:5a:
                    cf:c7:0a:a3:48:5f:a9:61:6c:14:fb:4b:42:fe:ee:
                    d4:74:e1:0e:ba:20:92:5a:c6:09:dc:32:02:79:34:
                    11:5b:0b:ba:26:eb:33:7c:84:22:04:de:c0:a3:dc:
                    6f:3c:4c:19:87:50:08:2a:1b:2f:3e:45:6c:e4:34:
                    81:8a:eb:d8:b0:6e:49:88:30:e7:23:37:2d:88:85:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:F3:14:CD:47:EB:10:72:76:C9:9A:AB:DE:5E:BC:D4:51:80:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:d9:93:b2:37:7c:f2:a3:84:16:64:5e:64:6c:6f:d4:2a:
         11:62:db:a8:63:b0:07:c6:e2:d4:6d:48:25:c3:aa:8f:ad:f0:
         b7:65:ca:83:d6:27:40:53:99:99:7c:82:86:d7:09:87:ce:ea:
         e3:1c:99:56:1c:9e:64:76:cd:ee:26:2e:32:b2:0f:93:34:b0:
         b1:53:2b:81:5f:68:f8:06:5e:3b:f4:de:d2:31:43:aa:9e:e3:
         32:f8:66:93:5c:0c:f1:bb:9d:dd:f5:3b:83:f7:08:c7:8a:c1:
         80:d9:6c:9a:bb:23:97:e1:bf:48:d9:9d:06:e0:d4:ab:cc:44:
         78:77:5b:38:0d:14:40:50:2a:97:d7:8a:c2:47:0e:57:00:c4:
         f3:e6:59:94:05:a6:39:60:19:a9:16:0e:d1:1f:37:b5:b7:8b:
         c8:bc:0e:2e:49:ff:a3:66:3b:e6:c1:0c:f4:ae:4a:85:5d:06:
         15:9a:8c:67:45:fd:b4:2f:35:9b:be:39:cd:08:7e:a2:86:d3:
         8c:87:80:16:48:65:f6:f7:43:d0:02:62:1c:3d:73:fc:c7:b8:
         19:0d:94:fd:0e:a3:d3:61:a9:07:eb:97:1c:67:82:76:70:82:
         1c:eb:d3:a0:89:bd:c7:1a:a4:b5:28:97:13:2d:a3:4a:b9:a2:
         4c:50:55:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMwSbc6pSf5WVPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDc3ZDhhNzItOTZmMy00NTdiLTk2MGMtOGMxMmE1YTA4YWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfBzRYvCT+WBRRQ2xqseaZGKCdt3FF8JPID6
EXkRUD9+OUIhZ4VhBXqb51r2X0VfYq6eLfm9BazvfwN4nl1kQ+cP9tjJZj6rb2zs
D0Q020olHiDCT8uukBDfucOCy6RB71Lqjdot6BFXUf/VJCPuWM3AqbZwGZQGsXxw
KjjgdE0yor6+ydy9ct30U3gS22hXs3hFFm+kqmt/ZwgiCx9xbpGogsQIGY/jXApd
vFZeiEa8iVrPxwqjSF+pYWwU+0tC/u7UdOEOuiCSWsYJ3DICeTQRWwu6JuszfIQi
BN7Ao9xvPEwZh1AIKhsvPkVs5DSBiuvYsG5JiDDnIzctiIVolQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtD8xTNR+sQcnbJmqveXrzUUYC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGYwMzIzNzgtNDdkNi0z
N2FjLWFmMGItYzM5YTBlZGVhNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQm2ZOyN3zyo4QWZF5kbG/UKhFi26hjsAfG4tRtSCXDqo+t8LdlyoPW
J0BTmZl8gobXCYfO6uMcmVYcnmR2ze4mLjKyD5M0sLFTK4FfaPgGXjv03tIxQ6qe
4zL4ZpNcDPG7nd31O4P3CMeKwYDZbJq7I5fhv0jZnQbg1KvMRHh3WzgNFEBQKpfX
isJHDlcAxPPmWZQFpjlgGakWDtEfN7W3i8i8Di5J/6NmO+bBDPSuSoVdBhWajGdF
/bQvNZu+Oc0IfqKG04yHgBZIZfb3Q9ACYhw9c/zHuBkNlP0Oo9NhqQfrlxxngnZw
ghzr06CJvccapLUolxMto0q5okxQVZ8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:21:20 2026 by rpki-client