Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/d17e77fb-991a-3648-8f8f-b142cd4f2993.roa
File:                     d17e77fb-991a-3648-8f8f-b142cd4f2993.roa (raw, json)
Hash identifier:          d5iTkvSIZB+oqb6jSkFt4qvw1vgl5aCXeUdJLzvFeuQ=
Subject key identifier:   B3:76:1A:D9:7F:52:F8:7C:DA:C6:85:D8:79:0A:7A:89:B9:F9:37:E9
Certificate issuer:       /CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
Certificate serial:       010D0C9F4328584F69B622712E88D46BFFDBE600
Authority key identifier: CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/d17e77fb-991a-3648-8f8f-b142cd4f2993.roa
Signing time:             Tue 06 Oct 2026 14:22:18 +0000
ROA not before:           Tue 06 Oct 2026 14:22:18 +0000
ROA not after:            Mon 04 Jan 2027 15:22:18 +0000
asID:                     11796
IP address blocks:        104.241.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:b6:22:71:2e:88:d4:6b:ff:db:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed327a2-62ee-4bd2-be90-1cf122db3819
        Validity
            Not Before: Oct  6 14:22:18 2026 GMT
            Not After : Jan  4 15:22:18 2027 GMT
        Subject: CN=97c1dd5d-392e-408a-a99f-403f5b916b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:e3:6f:28:33:af:98:ae:78:37:b7:f0:2d:
                    bd:c8:f2:28:36:6d:df:56:01:e0:7a:d1:f6:42:a5:
                    f8:c2:8b:4c:bb:e7:d8:ee:b9:1d:df:35:a0:2d:67:
                    77:3f:67:17:9f:0f:e2:fd:3d:15:27:a4:31:87:93:
                    f8:7a:f8:53:27:7a:74:59:1e:d5:1d:a3:11:e9:91:
                    4c:ae:e4:09:c3:5c:3c:a8:fa:3d:e6:17:db:b2:ca:
                    bf:44:7d:7a:64:61:25:44:4b:05:e9:74:91:73:8f:
                    33:99:97:d4:1d:0c:0b:71:87:bc:97:5e:a2:d9:d4:
                    54:0e:57:0a:47:a4:42:66:cb:34:2a:f8:47:9a:73:
                    37:18:d9:15:77:17:f2:34:e4:e2:bb:74:ce:b6:95:
                    f1:c3:35:5c:4d:69:63:c2:49:e0:d9:8c:af:1a:8d:
                    40:3d:10:cf:8d:84:71:04:01:8f:41:32:69:97:e9:
                    bb:c7:86:0d:44:8b:3a:25:77:46:a5:a9:24:6d:65:
                    cc:eb:06:ef:f7:c6:9e:5d:6d:2a:03:a7:f1:34:57:
                    3e:65:5c:6f:63:27:0d:58:ce:d5:1a:e0:44:2f:25:
                    30:65:d2:1c:d9:55:af:94:15:3a:92:77:7c:d1:08:
                    4e:32:0b:99:d0:ed:ad:4f:74:4c:79:25:99:80:b2:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:1A:D9:7F:52:F8:7C:DA:C6:85:D8:79:0A:7A:89:B9:F9:37:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/d17e77fb-991a-3648-8f8f-b142cd4f2993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819/9ed327a2-62ee-4bd2-be90-1cf122db3819.crl

            X509v3 Authority Key Identifier:
                keyid:CA:67:09:F5:E9:84:71:C3:8D:ED:F6:A7:3A:EE:E2:99:24:9C:B9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9ed327a2-62ee-4bd2-be90-1cf122db3819.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:98:b3:2e:d5:5f:2f:56:f1:03:57:94:bd:86:30:fa:5b:ba:
         4a:98:df:0f:2a:1b:3e:d3:f2:65:50:40:ae:e1:41:64:0c:54:
         e3:6b:70:0c:21:6e:92:fc:ad:75:8d:53:52:ce:bd:ab:da:bc:
         d9:4f:c5:1a:34:f6:95:a3:df:62:f9:0f:c9:0b:f9:3b:55:a3:
         40:49:58:8f:0f:b5:98:2d:2b:24:01:ac:01:9d:8c:19:1c:33:
         03:fc:25:bf:17:89:7a:aa:0b:b8:29:96:a0:d9:70:e7:e4:40:
         54:e8:c0:71:8b:44:e1:a7:3d:32:8b:4e:84:c1:6e:df:0d:78:
         d4:73:23:15:c5:52:07:9a:bc:83:66:65:c3:39:45:7e:a1:8a:
         1d:e2:b3:23:f1:95:a9:41:5d:19:73:5d:e2:78:0f:c5:d0:b5:
         57:8d:1c:fe:4c:6a:ca:54:f7:0d:a9:d7:91:c4:16:29:76:23:
         bc:97:f5:53:65:d1:07:4f:eb:bd:48:ef:77:03:89:5c:d1:6f:
         c8:6d:6c:69:86:82:f3:76:b2:96:b7:49:79:8d:09:8e:31:e1:
         e3:21:a1:d2:f4:32:3f:9d:1f:f5:15:7b:7b:33:e1:a2:45:a2:
         40:b6:73:96:fe:c5:e9:92:a0:45:ec:65:fc:ca:14:85:48:0a:
         bd:25:ce:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ptiJxLojUa//b5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkMzI3YTItNjJlZS00YmQyLWJlOTAtMWNmMTIyZGIz
ODE5MB4XDTI2MTAwNjE0MjIxOFoXDTI3MDEwNDE1MjIxOFowLzEtMCsGA1UEAxMk
OTdjMWRkNWQtMzkyZS00MDhhLWE5OWYtNDAzZjViOTE2YjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz17jbygzr5iueDe38C29yPIoNm3fVgHgetH2
QqX4wotMu+fY7rkd3zWgLWd3P2cXnw/i/T0VJ6Qxh5P4evhTJ3p0WR7VHaMR6ZFM
ruQJw1w8qPo95hfbssq/RH16ZGElREsF6XSRc48zmZfUHQwLcYe8l16i2dRUDlcK
R6RCZss0KvhHmnM3GNkVdxfyNOTiu3TOtpXxwzVcTWljwkng2YyvGo1APRDPjYRx
BAGPQTJpl+m7x4YNRIs6JXdGpakkbWXM6wbv98aeXW0qA6fxNFc+ZVxvYycNWM7V
GuBELyUwZdIc2VWvlBU6knd80QhOMguZ0O2tT3RMeSWZgLKmgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLN2Gtl/Uvh82saF2HkKeom5+TfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQz
MjdhMi02MmVlLTRiZDItYmU5MC0xY2YxMjJkYjM4MTkvZDE3ZTc3ZmItOTkxYS0z
NjQ4LThmOGYtYjE0MmNkNGYyOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWVkMzI3YTItNjJlZS00YmQyLWJl
OTAtMWNmMTIyZGIzODE5LzllZDMyN2EyLTYyZWUtNGJkMi1iZTkwLTFjZjEyMmRi
MzgxOS5jcmwwHwYDVR0jBBgwFoAUymcJ9emEccON7fanOu7imSScuZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZWQzMjdhMi02MmVlLTRiZDItYmU5MC0xY2Yx
MjJkYjM4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPHSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCYsy7VXy9W8QNXlL2GMPpbukqY3w8qGz7T8mVQQK7hQWQMVONrcAwh
bpL8rXWNU1LOvavavNlPxRo09pWj32L5D8kL+TtVo0BJWI8PtZgtKyQBrAGdjBkc
MwP8Jb8XiXqqC7gplqDZcOfkQFTowHGLROGnPTKLToTBbt8NeNRzIxXFUgeavINm
ZcM5RX6hih3isyPxlalBXRlzXeJ4D8XQtVeNHP5MaspU9w2p15HEFil2I7yX9VNl
0QdP671I73cDiVzRb8htbGmGgvN2spa3SXmNCY4x4eMhodL0Mj+dH/UVe3sz4aJF
okC2c5b+xemSoEXsZfzKFIVICr0lznk=
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:13:53 2026 by rpki-client