Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6b523b6-a5b5-3945-ac76-5277537b7bd2.roa
File:                     f6b523b6-a5b5-3945-ac76-5277537b7bd2.roa (raw, json)
Hash identifier:          EOasAomDTr3ZtoPKTlnEriXmqJi5wSHbzwNTBM/gQcg=
Subject key identifier:   6C:7B:D2:E8:EB:40:30:A5:A9:BC:9E:93:D7:EC:1D:55:BA:FF:AB:B0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D735A41C0705E2FA379019000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6b523b6-a5b5-3945-ac76-5277537b7bd2.roa
Signing time:             Thu 09 Apr 2026 15:41:23 +0000
ROA not before:           Thu 09 Apr 2026 15:41:23 +0000
ROA not after:            Wed 08 Jul 2026 15:41:23 +0000
asID:                     212238
IP address blocks:        104.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:5a:41:c0:70:5e:2f:a3:79:01:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  9 15:41:23 2026 GMT
            Not After : Jul  8 15:41:23 2026 GMT
        Subject: CN=8ef524f9-f68a-4c87-9397-aff86b0e9cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:3b:31:ee:23:eb:8a:0b:08:dc:74:f6:91:
                    74:12:e5:d2:01:78:5e:7e:9f:e0:ec:b3:8d:25:69:
                    a9:69:08:a5:b0:c2:25:6e:75:8a:20:2d:62:c7:7c:
                    f1:c8:e0:45:d8:f2:2f:5c:77:79:f1:9f:df:8f:cf:
                    34:8c:05:96:2e:36:08:b8:91:9e:ca:ec:68:09:f6:
                    f8:33:a0:61:24:4b:f6:da:4e:c1:bd:7e:bc:58:23:
                    7e:ef:6b:19:0c:2b:5a:f4:b4:cb:f4:54:51:b6:d6:
                    9b:2a:e9:ad:f0:93:37:69:99:44:0e:31:60:19:1e:
                    74:c6:19:a1:0b:37:d8:76:ba:d1:51:dc:86:86:eb:
                    a0:9d:0d:e2:6f:ca:ba:d9:d2:c7:0f:a5:87:eb:a6:
                    c7:9a:d6:f4:5d:ac:14:78:38:3d:72:80:16:7f:18:
                    3e:cf:e5:15:df:a8:ea:47:83:3f:40:66:d3:18:82:
                    fb:6e:0a:d0:e6:e7:11:17:6b:d1:bc:36:d1:8e:68:
                    38:9b:85:85:1e:68:47:e1:44:32:d7:8d:f3:cc:2c:
                    ab:9d:61:0e:df:a5:ae:33:25:d8:3a:a2:de:a1:c7:
                    0f:b7:f2:2c:34:cb:0b:c4:ca:42:9e:3f:27:e7:37:
                    a2:6f:69:62:27:2d:5d:21:c5:fa:cf:7a:b2:9e:dc:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:D2:E8:EB:40:30:A5:A9:BC:9E:93:D7:EC:1D:55:BA:FF:AB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6b523b6-a5b5-3945-ac76-5277537b7bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:c4:c1:17:eb:a5:c1:99:39:fb:5a:d9:9c:a9:dc:18:80:
         ff:0d:7e:59:1e:f8:23:2f:28:ac:60:48:da:d2:35:93:c3:d4:
         64:9b:be:36:e4:ba:72:2a:87:9d:d8:f3:e9:87:98:bb:05:16:
         a5:9b:e7:e5:1b:74:14:eb:91:b1:6c:96:a8:7a:85:3d:f4:ed:
         39:a2:da:90:c3:61:75:b4:64:c7:40:21:84:54:98:17:6e:75:
         e0:ac:4d:5b:84:13:2b:71:a7:42:bb:b9:bf:27:7f:e9:fb:3f:
         5a:82:1c:72:17:be:4e:21:7a:e9:c8:c8:b7:18:e2:4f:fb:68:
         3d:d7:33:f7:7d:b3:12:b9:78:29:8f:e6:60:ed:5c:19:be:90:
         f6:4c:69:47:5d:fd:9b:d2:c4:13:a7:28:6c:00:90:0e:97:d8:
         c5:01:76:04:4a:27:67:26:c4:2e:9f:fe:ca:93:6b:ff:78:7a:
         71:dd:f9:83:d7:ff:c4:a2:6e:d7:f9:e1:c7:32:6c:f4:8a:dc:
         c3:e0:90:ef:22:da:cf:4c:b7:7f:cc:4b:66:cf:3b:6f:59:ce:
         66:6f:2a:59:4d:61:99:03:4a:d1:63:78:af:21:7e:56:36:c8:
         47:83:6d:39:8f:54:7b:bf:26:10:b4:31:d3:49:b1:68:7a:62:
         8d:84:46:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zWkHAcF4vo3kBkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQwOTE1NDEyM1oXDTI2MDcwODE1NDEyM1owLzEtMCsGA1UEAxMk
OGVmNTI0ZjktZjY4YS00Yzg3LTkzOTctYWZmODZiMGU5Y2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk47Me4j64oLCNx09pF0EuXSAXhefp/g7LON
JWmpaQilsMIlbnWKIC1ix3zxyOBF2PIvXHd58Z/fj880jAWWLjYIuJGeyuxoCfb4
M6BhJEv22k7BvX68WCN+72sZDCta9LTL9FRRttabKumt8JM3aZlEDjFgGR50xhmh
CzfYdrrRUdyGhuugnQ3ib8q62dLHD6WH66bHmtb0XawUeDg9coAWfxg+z+UV36jq
R4M/QGbTGIL7bgrQ5ucRF2vRvDbRjmg4m4WFHmhH4UQy143zzCyrnWEO36WuMyXY
OqLeoccPt/IsNMsLxMpCnj8n5zeib2liJy1dIcX6z3qyntyTlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx70ujrQDClqbyek9fsHVW6/6uwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjZiNTIzYjYtYTViNS0z
OTQ1LWFjNzYtNTI3NzUzN2I3YmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2SxMEX66XBmTn7WtmcqdwYgP8Nflke+CMvKKxgSNrSNZPD1GSbvjbk
unIqh53Y8+mHmLsFFqWb5+UbdBTrkbFslqh6hT307Tmi2pDDYXW0ZMdAIYRUmBdu
deCsTVuEEytxp0K7ub8nf+n7P1qCHHIXvk4heunIyLcY4k/7aD3XM/d9sxK5eCmP
5mDtXBm+kPZMaUdd/ZvSxBOnKGwAkA6X2MUBdgRKJ2cmxC6f/sqTa/94enHd+YPX
/8Sibtf54ccybPSK3MPgkO8i2s9Mt3/MS2bPO29ZzmZvKllNYZkDStFjeK8hflY2
yEeDbTmPVHu/JhC0MdNJsWh6Yo2ERho=
-----END CERTIFICATE-----
Generated at Sat Apr 11 05:35:24 2026 by rpki-client