Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa
File:                     89f66484-c420-393b-8ff3-72ec15d2a01c.roa (raw, json)
Hash identifier:          ypwfeFmIZspMg+vnmLgQjYAo/olkslFL2rkRpfS3wC8=
Subject key identifier:   B5:FC:C6:53:ED:A8:F5:C5:56:6F:5A:D9:6C:DC:AC:1A:70:EE:6A:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EE0C1F9BD2D48498934713420
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     20001
IP address blocks:        104.224.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f9:bd:2d:48:49:89:34:71:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=5cbf1e7b-b441-4419-a793-720492a7c058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:09:78:54:d6:5f:f6:59:f1:c9:9e:35:1e:
                    45:55:dc:d8:34:33:ea:33:e8:cc:87:75:ac:06:96:
                    21:46:4c:8c:67:d6:7b:5f:5a:68:0c:24:c9:b6:94:
                    9a:b4:05:c3:c2:db:1a:a1:52:ab:f9:a1:6b:77:90:
                    fe:37:0c:f6:2f:66:e7:23:b1:90:2c:f4:64:a5:d7:
                    f3:5f:43:ac:b0:c5:1b:85:4d:7a:ca:a9:72:c5:52:
                    f6:7a:90:7c:65:e9:62:48:34:20:a1:8c:34:91:d5:
                    7e:16:ed:ed:70:10:d5:2c:f0:cf:23:d8:7d:7d:38:
                    a5:66:43:c8:89:3f:76:e1:4c:1f:22:03:5e:84:96:
                    0b:62:51:45:36:a5:31:1b:cb:e4:a3:82:c7:ac:33:
                    84:96:8d:cc:0c:f3:32:10:70:20:26:87:22:fe:46:
                    09:b9:4e:94:d5:f0:63:72:d1:a5:46:90:77:68:63:
                    2a:bb:27:3c:5d:1c:c8:70:ee:f5:e8:6d:7f:14:55:
                    6f:70:5e:9d:4e:56:5f:5c:af:07:90:85:ce:43:36:
                    2c:64:e7:60:42:8d:9c:55:24:ab:99:8d:56:88:62:
                    ad:8d:16:ed:04:96:6c:d0:16:2f:1d:18:e3:82:d8:
                    62:de:91:16:e8:ac:d7:45:24:72:f4:b9:bb:3f:f2:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:C6:53:ED:A8:F5:C5:56:6F:5A:D9:6C:DC:AC:1A:70:EE:6A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:a6:f5:6e:dd:26:d2:6b:90:06:0d:e3:41:57:5d:95:0d:
         37:99:44:4a:c4:da:b1:25:f8:b4:82:1f:15:b3:6e:f5:36:2f:
         f9:eb:f9:0c:6d:3d:63:0e:3f:b3:51:4f:32:10:ea:24:ad:28:
         44:23:8c:c7:4e:8a:9f:9d:83:31:19:ba:d1:55:e5:1b:df:41:
         de:13:03:5f:49:24:6e:81:05:df:6a:64:fb:10:68:df:ad:ec:
         32:15:fb:19:73:2b:50:89:aa:4e:db:8b:a7:b1:fb:53:48:ed:
         b6:cc:64:43:ba:db:06:d1:ae:ee:20:61:ff:86:4e:b6:9b:ef:
         ee:82:9b:8b:b8:a0:1a:87:29:00:50:7c:71:02:2f:0e:7c:ca:
         e7:28:aa:5e:25:72:b2:0b:95:6d:71:23:a3:b2:08:05:60:42:
         0c:eb:28:02:a7:0b:b5:b4:4f:bb:c5:c2:4e:65:87:9d:57:bd:
         ca:be:e1:90:fd:25:20:3c:45:4b:a3:a8:e8:88:c5:5b:18:bc:
         5f:02:2d:47:c5:95:2c:12:ae:fd:19:c1:42:60:68:04:6d:12:
         45:b0:72:76:4b:3a:3d:ce:15:ca:51:89:92:a3:31:60:31:5e:
         55:f4:6b:ee:f7:34:d7:46:58:78:dc:c5:a6:6c:0d:0c:8c:3c:
         4f:fc:4d:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwfm9LUhJiTRxNCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NWNiZjFlN2ItYjQ0MS00NDE5LWE3OTMtNzIwNDkyYTdjMDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDoJeFTWX/ZZ8cmeNR5FVdzYNDPqM+jMh3Ws
BpYhRkyMZ9Z7X1poDCTJtpSatAXDwtsaoVKr+aFrd5D+Nwz2L2bnI7GQLPRkpdfz
X0OssMUbhU16yqlyxVL2epB8ZeliSDQgoYw0kdV+Fu3tcBDVLPDPI9h9fTilZkPI
iT924UwfIgNehJYLYlFFNqUxG8vko4LHrDOElo3MDPMyEHAgJoci/kYJuU6U1fBj
ctGlRpB3aGMquyc8XRzIcO716G1/FFVvcF6dTlZfXK8HkIXOQzYsZOdgQo2cVSSr
mY1WiGKtjRbtBJZs0BYvHRjjgthi3pEW6KzXRSRy9Lm7P/JtOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX8xlPtqPXFVm9a2WzcrBpw7moJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODlmNjY0ODQtYzQyMC0z
OTNiLThmZjMtNzJlYzE1ZDJhMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoPpvVu3SbSa5AGDeNBV12VDTeZRErE2rEl+LSCHxWzbvU2L/nr+Qxt
PWMOP7NRTzIQ6iStKEQjjMdOip+dgzEZutFV5RvfQd4TA19JJG6BBd9qZPsQaN+t
7DIV+xlzK1CJqk7bi6ex+1NI7bbMZEO62wbRru4gYf+GTrab7+6Cm4u4oBqHKQBQ
fHECLw58yucoql4lcrILlW1xI6OyCAVgQgzrKAKnC7W0T7vFwk5lh51Xvcq+4ZD9
JSA8RUujqOiIxVsYvF8CLUfFlSwSrv0ZwUJgaARtEkWwcnZLOj3OFcpRiZKjMWAx
XlX0a+73NNdGWHjcxaZsDQyMPE/8Td8=
-----END CERTIFICATE-----
Generated at Thu Sep 10 04:52:22 2026 by rpki-client