Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
File:                     3e73c06b-902f-3599-accc-26c4dac8766a.roa (raw, json)
Hash identifier:          WeM5RnhGXxrG3Kx7CpWSS3ZGsIgWf6UnF/ZMht+Dk6M=
Subject key identifier:   F8:5B:EE:BB:65:C1:57:2F:ED:9A:8F:EC:F9:4D:F0:EA:44:E4:E1:25
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584EA7879DE14118DC2B4277D1C0
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40342
IP address blocks:        104.200.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9d:e1:41:18:dc:2b:42:77:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b8dbc2b5-baa3-4065-99a0-af1a8c3676fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:bb:14:a4:75:fe:3c:93:e1:3a:ea:68:87:
                    e2:52:3e:1e:e2:1e:c4:c1:ee:ee:92:85:2f:00:90:
                    cb:7e:16:a9:8e:b1:41:dd:c6:f2:a0:24:3b:21:35:
                    70:44:bb:a7:0e:58:a0:32:e7:5f:ae:34:bb:a6:cf:
                    c1:71:97:84:b2:e2:d2:c8:9b:f7:d3:02:74:c8:83:
                    ce:66:73:58:ac:2f:33:37:d8:bf:71:cd:b4:ec:ff:
                    5f:25:52:0b:c0:e2:88:0b:73:ab:b5:ae:9f:92:89:
                    9e:7d:d8:6b:02:cc:ec:61:9e:d5:5c:f3:31:55:6a:
                    6f:57:42:f9:fe:82:3c:a5:94:d3:02:68:4b:36:e2:
                    95:7f:57:07:21:f6:46:98:f5:fa:4d:10:45:2e:ba:
                    cd:a9:11:c0:8b:de:66:c0:44:f1:d5:f8:0f:eb:a6:
                    dc:39:30:99:1e:9c:ef:05:78:7f:61:d0:2c:fb:9c:
                    a5:cd:59:40:01:e4:c7:0f:57:89:cf:ab:bc:90:c2:
                    c4:8b:83:48:e0:13:ba:d1:a2:1d:07:00:2f:ca:61:
                    e5:a6:a0:b7:53:fe:5d:41:74:ef:93:6a:2d:ab:fe:
                    68:c2:26:eb:9c:f1:cc:4b:3f:23:53:4f:82:eb:de:
                    64:b6:c5:3d:c3:aa:b3:69:bd:95:c7:66:34:f0:a9:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:EE:BB:65:C1:57:2F:ED:9A:8F:EC:F9:4D:F0:EA:44:E4:E1:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:1a:3a:2e:bc:b5:04:97:17:3e:54:e3:a3:b8:3f:d9:61:
         d1:e9:b1:45:47:a0:9b:49:b4:eb:df:f5:cb:28:82:da:ac:f1:
         08:4c:24:50:f6:f9:ec:b3:79:5f:1f:ea:58:50:4c:34:6c:3c:
         d0:1e:f9:ab:8c:e7:2f:e5:15:40:47:21:98:ac:9d:de:9e:df:
         e2:62:33:e7:da:fa:14:88:3b:4a:a9:32:99:6c:ae:dc:2e:ba:
         78:90:e1:97:51:d5:1d:e5:8f:27:90:e6:8a:cc:f3:fb:7f:e2:
         8b:b6:21:47:f5:ae:53:62:4a:f8:56:dc:5f:20:db:f6:ef:c5:
         df:29:fd:87:53:09:ab:f1:89:4e:22:8c:77:88:17:e3:af:e8:
         59:1b:f6:19:2b:b4:59:50:4e:fc:cc:fb:72:4d:54:71:e2:60:
         30:d3:88:c7:80:9b:08:7c:bd:07:cf:ca:7b:f6:49:f6:9a:51:
         7b:fb:96:b2:35:a1:8d:d5:55:cd:5a:f7:29:fa:63:f0:b2:80:
         40:b6:fd:2a:d7:43:98:03:70:17:6d:86:02:b2:94:af:c7:ba:
         b0:c8:4a:a1:c8:6e:e6:eb:ed:9b:79:fb:75:85:c6:9d:93:f3:
         0a:d9:ef:73:06:82:6d:95:cc:c6:48:2d:4a:d2:90:a8:82:36:
         f6:9f:fd:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh53hQRjcK0J30cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1
ODJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjhkYmMyYjUtYmFhMy00MDY1LTk5YTAtYWYxYThjMzY3NmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPu7FKR1/jyT4TrqaIfiUj4e4h7Ewe7ukoUv
AJDLfhapjrFB3cbyoCQ7ITVwRLunDligMudfrjS7ps/BcZeEsuLSyJv30wJ0yIPO
ZnNYrC8zN9i/cc207P9fJVILwOKIC3Orta6fkomefdhrAszsYZ7VXPMxVWpvV0L5
/oI8pZTTAmhLNuKVf1cHIfZGmPX6TRBFLrrNqRHAi95mwETx1fgP66bcOTCZHpzv
BXh/YdAs+5ylzVlAAeTHD1eJz6u8kMLEi4NI4BO60aIdBwAvymHlpqC3U/5dQXTv
k2otq/5owibrnPHMSz8jU0+C695ktsU9w6qzab2Vx2Y08KlA/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhb7rtlwVcv7ZqP7PlN8OpE5OElMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi
ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2U3M2MwNmItOTAyZi0z
NTk5LWFjY2MtMjZjNGRhYzg3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm
NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh
NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx
ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMjZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmuGjouvLUElxc+VOOjuD/ZYdHpsUVHoJtJtOvf9csogtqs8QhMJFD2
+eyzeV8f6lhQTDRsPNAe+auM5y/lFUBHIZisnd6e3+JiM+fa+hSIO0qpMplsrtwu
uniQ4ZdR1R3ljyeQ5orM8/t/4ou2IUf1rlNiSvhW3F8g2/bvxd8p/YdTCavxiU4i
jHeIF+Ov6Fkb9hkrtFlQTvzM+3JNVHHiYDDTiMeAmwh8vQfPynv2SfaaUXv7lrI1
oY3VVc1a9yn6Y/CygEC2/SrXQ5gDcBdthgKylK/HurDISqHIbubr7Zt5+3WFxp2T
8wrZ73MGgm2VzMZILUrSkKiCNvaf/Tw=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:05 2026 by rpki-client