Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa
File:                     d75a056f-366e-383d-90ed-f5527e6c9312.roa (raw, json)
Hash identifier:          cYQWkUvn1FrsJKisqHulF4j83JyoFWYiIzIXxGTBB7w=
Subject key identifier:   CB:8E:E5:67:1B:8E:E6:C3:CF:EC:A2:03:6E:97:49:78:EF:84:46:8B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D9325617A6983E86CE5077340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     400175
IP address blocks:        104.129.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:61:7a:69:83:e8:6c:e5:07:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=4234f5cd-43e8-480a-9a43-8968c4c2f7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:78:3a:a3:b4:ec:b3:d7:f4:09:76:06:0a:
                    6e:0b:27:f9:2a:3a:c0:2c:c8:3e:60:e7:2b:8e:8a:
                    c6:b0:37:63:a4:8f:13:9b:1a:83:95:3f:49:35:16:
                    7b:8a:6a:85:95:12:67:2a:97:ca:03:c5:5c:72:6d:
                    94:ca:aa:49:c4:a9:00:00:ac:cd:1c:9b:66:44:7d:
                    ca:19:6e:fb:40:5b:26:f6:10:5d:42:10:4a:b5:17:
                    fe:6f:83:49:b2:d8:a5:04:74:19:39:e0:f5:0b:24:
                    00:e0:a9:be:4d:1c:ca:da:af:76:15:a5:2b:d8:2d:
                    c8:64:3d:f7:f2:71:2f:6c:f2:5e:aa:6f:e5:d6:c6:
                    c6:64:0d:fa:70:98:a6:87:9f:66:3a:4d:af:16:20:
                    3a:15:cb:ff:97:da:a0:f6:bc:3b:81:29:74:0e:25:
                    d4:23:94:90:64:81:e8:c3:92:e0:2a:a6:15:ae:b4:
                    95:36:39:d5:54:32:28:0a:ce:35:d0:1e:71:22:ed:
                    df:2c:39:ff:73:a7:97:50:f2:98:a0:f0:23:72:19:
                    37:8f:23:bb:d9:9f:40:9a:bf:5c:c9:d7:21:52:85:
                    1b:ea:84:37:18:66:cc:5b:ba:ba:73:c7:75:32:e8:
                    65:1b:99:7f:08:cd:7c:08:38:c9:45:17:38:14:17:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:E5:67:1B:8E:E6:C3:CF:EC:A2:03:6E:97:49:78:EF:84:46:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d75a056f-366e-383d-90ed-f5527e6c9312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:5e:4a:23:15:c7:e8:50:ec:90:7d:26:01:aa:d2:4a:d0:
         57:87:fb:8f:d3:3d:61:78:36:fa:88:67:aa:f2:a1:9c:fe:11:
         77:24:eb:02:30:a1:02:45:c4:eb:fa:63:06:79:4b:6d:11:ad:
         23:f6:21:3f:83:b1:cc:38:9e:d3:4f:3f:72:a2:c4:a1:bd:6c:
         07:9e:4f:c1:12:ee:f4:8e:15:01:71:33:d7:43:fa:2a:78:1e:
         41:39:5a:19:cb:c3:27:8e:b3:9c:24:50:10:8b:1c:f9:9d:a1:
         ca:77:2b:e2:19:8f:35:a1:25:94:cf:4e:5c:46:18:a6:1e:9f:
         70:5a:69:c4:57:63:54:b2:0a:ba:34:53:23:62:48:9b:7f:c8:
         52:ea:cc:4c:58:d3:48:e4:32:d8:ba:8b:58:0a:1c:eb:e3:b3:
         95:58:45:11:9a:c7:1d:4e:99:60:9d:5b:7a:cb:20:0b:b5:29:
         26:27:16:96:34:b2:be:30:6e:70:be:bb:72:43:82:77:21:e6:
         f2:22:98:90:91:5f:cb:7b:37:28:77:61:49:90:8b:ef:90:8d:
         20:94:62:8b:75:f3:6a:cd:de:8e:47:48:99:fa:01:57:c0:eb:
         67:c7:49:35:5b:95:fb:87:39:c4:20:dc:8e:bf:eb:3a:7f:71:
         4f:36:af:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWF6aYPobOUHc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
NDIzNGY1Y2QtNDNlOC00ODBhLTlhNDMtODk2OGM0YzJmN2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUZ4OqO07LPX9Al2BgpuCyf5KjrALMg+YOcr
jorGsDdjpI8TmxqDlT9JNRZ7imqFlRJnKpfKA8Vccm2UyqpJxKkAAKzNHJtmRH3K
GW77QFsm9hBdQhBKtRf+b4NJstilBHQZOeD1CyQA4Km+TRzK2q92FaUr2C3IZD33
8nEvbPJeqm/l1sbGZA36cJimh59mOk2vFiA6Fcv/l9qg9rw7gSl0DiXUI5SQZIHo
w5LgKqYVrrSVNjnVVDIoCs410B5xIu3fLDn/c6eXUPKYoPAjchk3jyO72Z9Amr9c
ydchUoUb6oQ3GGbMW7q6c8d1MuhlG5l/CM18CDjJRRc4FBdC/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuO5WcbjubDz+yiA26XSXjvhEaLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDc1YTA1NmYtMzY2ZS0z
ODNkLTkwZWQtZjU1MjdlNmM5MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNrXkojFcfoUOyQfSYBqtJK0FeH+4/TPWF4NvqIZ6ryoZz+EXck6wIw
oQJFxOv6YwZ5S20RrSP2IT+Dscw4ntNPP3KixKG9bAeeT8ES7vSOFQFxM9dD+ip4
HkE5WhnLwyeOs5wkUBCLHPmdocp3K+IZjzWhJZTPTlxGGKYen3BaacRXY1SyCro0
UyNiSJt/yFLqzExY00jkMti6i1gKHOvjs5VYRRGaxx1OmWCdW3rLIAu1KSYnFpY0
sr4wbnC+u3JDgnch5vIimJCRX8t7Nyh3YUmQi++QjSCUYot182rN3o5HSJn6AVfA
62fHSTVblfuHOcQg3I6/6zp/cU82r8M=
-----END CERTIFICATE-----
Generated at Thu May 7 23:11:23 2026 by rpki-client