Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d29b52dd-d142-35de-b64f-bfdc90dc85d6.roa
File:                     d29b52dd-d142-35de-b64f-bfdc90dc85d6.roa (raw, json)
Hash identifier:          xpu8aPu8805oZsjjTndpH7UCnc1VM8GnhbBSrlawpkU=
Subject key identifier:   A2:4B:BB:EE:0A:9E:9B:16:E8:8B:40:00:8A:9C:F2:F4:B3:1A:7F:50
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F807F56AF072BF21020559600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d29b52dd-d142-35de-b64f-bfdc90dc85d6.roa
Signing time:             Wed 14 Oct 2026 18:15:29 +0000
ROA not before:           Wed 14 Oct 2026 18:15:29 +0000
ROA not after:            Tue 12 Jan 2027 19:15:29 +0000
asID:                     212238
IP address blocks:        104.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:7f:56:af:07:2b:f2:10:20:55:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 14 18:15:29 2026 GMT
            Not After : Jan 12 19:15:29 2027 GMT
        Subject: CN=f705f8cf-7dc7-4b82-bd39-8da835a58df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:24:76:85:1b:cd:2e:b3:bd:f7:de:13:fc:
                    e7:78:05:8d:eb:84:07:80:83:43:b9:47:a1:61:8d:
                    4e:7d:09:38:7e:f8:a3:fa:3b:80:6a:45:51:d1:22:
                    2e:54:1a:d3:0c:c9:99:8a:af:dd:07:bb:5f:a9:73:
                    90:c4:a5:38:b1:16:33:83:34:e1:68:de:e3:e1:21:
                    58:73:9f:0e:36:0a:1d:51:bf:73:69:69:c0:b6:fc:
                    fb:98:79:35:c3:c7:96:43:f8:1e:89:76:91:be:d5:
                    5d:e5:13:b9:05:9d:13:87:b3:d7:22:9f:96:86:1d:
                    0e:2b:df:2b:29:70:6a:94:dd:84:dd:10:bb:66:bc:
                    cf:52:c8:63:fe:86:c8:f1:ff:db:d1:a8:1a:df:8b:
                    56:c2:9e:de:f7:eb:35:6b:78:b1:64:ce:3f:5b:01:
                    ab:64:8b:0f:e0:f4:bd:e5:4a:3b:59:1d:46:ba:34:
                    1c:8f:15:dc:0e:e7:9a:85:de:5a:6d:03:28:d4:c6:
                    d5:02:70:48:69:df:d0:df:ad:36:1a:85:20:b7:d5:
                    d1:05:55:73:54:dc:0c:18:cb:d9:1d:c4:84:3f:6d:
                    5e:f4:a3:e3:a0:a5:32:c9:2e:0e:e2:88:e0:45:2c:
                    73:90:bc:79:32:42:30:04:f7:0b:65:2b:97:46:9e:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:BB:EE:0A:9E:9B:16:E8:8B:40:00:8A:9C:F2:F4:B3:1A:7F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d29b52dd-d142-35de-b64f-bfdc90dc85d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0b:b4:37:85:bd:fd:23:fb:1d:9b:76:19:96:46:86:a2:aa:
         9b:a0:01:d6:1a:da:8e:bc:55:3e:9e:87:e4:45:48:01:2b:40:
         63:10:ab:c2:55:67:4b:15:47:9f:23:5f:76:fd:c3:13:92:ef:
         73:fb:57:34:1d:d9:d8:d2:b4:8f:52:07:a1:77:ad:30:4c:64:
         5e:13:85:7e:45:41:4a:60:f7:be:d9:e1:13:5c:c6:33:7b:3b:
         72:d2:47:0a:4e:23:95:84:63:5b:dc:aa:99:c0:62:ff:ad:71:
         58:41:fa:f2:36:0b:35:43:43:8c:5e:82:c2:6e:da:32:bb:f4:
         f9:19:fc:b6:61:88:ef:6b:3b:7f:79:59:60:15:ac:aa:b4:67:
         1b:c8:0c:48:14:03:44:6a:1c:03:9a:b2:e5:43:b8:30:87:b1:
         46:74:84:a9:98:c1:d2:a7:16:17:31:b0:f2:3f:f2:a5:24:2c:
         b1:ae:67:5b:b9:5f:31:22:81:4f:f0:8f:4f:14:45:8b:7b:f9:
         d6:8f:84:3b:4d:f5:df:b9:1a:16:f1:aa:d1:f2:f5:5c:18:d0:
         4f:71:1e:04:0e:08:1b:4f:64:d4:ca:71:6c:c4:58:87:51:0c:
         83:c8:df:4d:57:90:2b:00:fd:8e:0d:3a:36:1b:40:28:0e:33:
         1b:34:04:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Af1avByvyECBVlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MTAxNDE4MTUyOVoXDTI3MDExMjE5MTUyOVowLzEtMCsGA1UEAxMk
ZjcwNWY4Y2YtN2RjNy00YjgyLWJkMzktOGRhODM1YTU4ZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxUkdoUbzS6zvffeE/zneAWN64QHgINDuUeh
YY1OfQk4fvij+juAakVR0SIuVBrTDMmZiq/dB7tfqXOQxKU4sRYzgzThaN7j4SFY
c58ONgodUb9zaWnAtvz7mHk1w8eWQ/geiXaRvtVd5RO5BZ0Th7PXIp+Whh0OK98r
KXBqlN2E3RC7ZrzPUshj/obI8f/b0aga34tWwp7e9+s1a3ixZM4/WwGrZIsP4PS9
5Uo7WR1GujQcjxXcDueahd5abQMo1MbVAnBIad/Q3602GoUgt9XRBVVzVNwMGMvZ
HcSEP21e9KPjoKUyyS4O4ojgRSxzkLx5MkIwBPcLZSuXRp6ebQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJLu+4KnpsW6ItAAIqc8vSzGn9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDI5YjUyZGQtZDE0Mi0z
NWRlLWI2NGYtYmZkYzkwZGM4NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoLtDeFvf0j+x2bdhmWRoaiqpugAdYa2o68VT6eh+RFSAErQGMQq8JV
Z0sVR58jX3b9wxOS73P7VzQd2djStI9SB6F3rTBMZF4ThX5FQUpg977Z4RNcxjN7
O3LSRwpOI5WEY1vcqpnAYv+tcVhB+vI2CzVDQ4xegsJu2jK79PkZ/LZhiO9rO395
WWAVrKq0ZxvIDEgUA0RqHAOasuVDuDCHsUZ0hKmYwdKnFhcxsPI/8qUkLLGuZ1u5
XzEigU/wj08URYt7+daPhDtN9d+5GhbxqtHy9VwY0E9xHgQOCBtPZNTKcWzEWIdR
DIPI301XkCsA/Y4NOjYbQCgOMxs0BNg=
-----END CERTIFICATE-----
Generated at Thu Oct 15 11:54:55 2026 by rpki-client