Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa
File:                     59f07b4d-cb34-32ed-981a-201e9fd7815e.roa (raw, json)
Hash identifier:          Y1DslJz7G8v+TiG+YpoKjoQY9sV9aw32+kS88yiLs34=
Subject key identifier:   29:8C:3E:19:78:B7:72:19:EC:FD:75:7F:43:4F:13:3E:B0:C7:F5:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E736A37B9B7CD5925A504CDC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        104.77.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:37:b9:b7:cd:59:25:a5:04:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=4f493821-ee56-4a1e-b824-9b15b65d067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:eb:ef:76:a1:20:5e:13:d8:2c:59:eb:42:
                    06:5c:88:16:14:ac:9e:aa:15:4d:df:2c:2b:5e:60:
                    93:8c:71:24:be:02:71:c3:54:50:d8:1f:fb:7c:7c:
                    fa:71:eb:2d:72:83:cf:fd:b4:a6:bc:38:ef:40:a8:
                    fd:00:62:c7:f3:76:80:7b:9d:c9:39:6d:af:a5:99:
                    9b:35:bf:c9:89:73:b8:9b:16:cd:d8:83:93:1b:cd:
                    fc:f6:19:ea:67:0f:fe:34:a6:b0:04:81:02:52:52:
                    6d:0f:a1:cd:43:82:6e:05:24:e9:c9:9b:1f:21:03:
                    ed:b4:73:59:c1:50:63:50:f1:1f:21:f2:89:19:af:
                    b3:10:4c:33:84:38:30:f7:91:1e:fb:22:2c:da:ae:
                    f2:74:5a:dd:7e:fa:2b:57:f6:8c:35:2c:9e:25:ad:
                    82:c0:9d:3a:55:e4:bc:70:4b:83:df:66:27:e1:52:
                    5f:f6:12:73:5d:91:16:07:88:f8:38:23:c2:c8:1e:
                    ae:f2:7f:4f:68:c8:fc:d3:4d:91:07:ac:c6:26:29:
                    66:3f:01:a2:b1:44:88:d4:20:3a:a2:5b:05:a4:0e:
                    45:a8:96:84:20:02:4d:89:f1:60:f8:37:92:a3:04:
                    37:ef:dd:b3:88:93:21:65:87:b2:f5:4a:3c:f8:2e:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:3E:19:78:B7:72:19:EC:FD:75:7F:43:4F:13:3E:B0:C7:F5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:77:4e:e9:c8:5e:df:e8:eb:42:f0:24:f3:81:bd:6e:9a:57:
         e9:df:6a:06:83:22:39:09:12:b6:d7:19:7b:13:a2:c0:b8:74:
         9d:d6:5d:a4:c5:1e:8f:6c:ee:fa:3e:50:77:2b:3e:f0:6c:a6:
         49:e4:b6:0f:41:1f:2f:58:20:69:3b:e6:15:5f:36:df:99:7a:
         75:c1:ff:0d:96:20:56:49:6b:fa:43:54:92:7d:e2:83:51:d0:
         86:e7:14:67:e9:fe:8d:35:d5:8c:ba:6d:45:fa:1e:7f:0a:12:
         6c:7d:36:19:2d:e5:15:67:12:8a:a1:fa:e7:79:91:3b:97:b9:
         18:90:71:c8:3c:83:15:b4:95:ca:4c:ef:3a:08:76:e3:09:80:
         f0:6d:67:69:2f:86:b3:ee:d2:9e:54:78:f3:14:4c:95:8d:a8:
         85:bd:36:b7:97:57:ce:c4:07:f4:ec:8f:59:23:ef:6b:45:be:
         80:bf:f3:36:a8:05:29:06:cc:2e:7e:82:99:14:52:26:dd:ed:
         2a:f9:07:dc:1f:0c:54:da:80:63:69:af:c3:b3:39:05:40:7b:
         39:f3:b5:3d:94:17:48:be:bb:53:19:ba:20:0a:2d:69:7f:ec:
         18:5b:1a:c1:a0:61:5b:f4:1f:bf:46:32:ca:97:ad:35:4f:c3:
         17:5a:a3:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaje5t81ZJaUEzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
NGY0OTM4MjEtZWU1Ni00YTFlLWI4MjQtOWIxNWI2NWQwNjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbHr73ahIF4T2CxZ60IGXIgWFKyeqhVN3ywr
XmCTjHEkvgJxw1RQ2B/7fHz6cestcoPP/bSmvDjvQKj9AGLH83aAe53JOW2vpZmb
Nb/JiXO4mxbN2IOTG8389hnqZw/+NKawBIECUlJtD6HNQ4JuBSTpyZsfIQPttHNZ
wVBjUPEfIfKJGa+zEEwzhDgw95Ee+yIs2q7ydFrdfvorV/aMNSyeJa2CwJ06VeS8
cEuD32Yn4VJf9hJzXZEWB4j4OCPCyB6u8n9PaMj8002RB6zGJilmPwGisUSI1CA6
olsFpA5FqJaEIAJNifFg+DeSowQ3792ziJMhZYey9Uo8+C7wqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmMPhl4t3IZ7P11f0NPEz6wx/V+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlmMDdiNGQtY2IzNC0z
MmVkLTk4MWEtMjAxZTlmZDc4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE3MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADt3TunIXt/o60LwJPOBvW6aV+nfagaDIjkJErbXGXsTosC4dJ3WXaTF
Ho9s7vo+UHcrPvBspknktg9BHy9YIGk75hVfNt+ZenXB/w2WIFZJa/pDVJJ94oNR
0IbnFGfp/o011Yy6bUX6Hn8KEmx9Nhkt5RVnEoqh+ud5kTuXuRiQccg8gxW0lcpM
7zoIduMJgPBtZ2kvhrPu0p5UePMUTJWNqIW9NreXV87EB/Tsj1kj72tFvoC/8zao
BSkGzC5+gpkUUibd7Sr5B9wfDFTagGNpr8OzOQVAeznztT2UF0i+u1MZuiAKLWl/
7BhbGsGgYVv0H79GMsqXrTVPwxdao7w=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:40:19 2026 by rpki-client