Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb13f4b4-3bcc-3760-8c00-510dcf9c8010.roa
File:                     eb13f4b4-3bcc-3760-8c00-510dcf9c8010.roa (raw, json)
Hash identifier:          7dfMb3Imh5RIsysb/tLXrucc1XJ1s5cupBmumCkTEkk=
Subject key identifier:   02:88:3A:F6:D1:5D:39:97:DE:35:70:C6:43:4F:E4:84:B9:40:42:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64EB66C8F53D65E3397D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb13f4b4-3bcc-3760-8c00-510dcf9c8010.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     35994
IP address blocks:        104.123.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:eb:66:c8:f5:3d:65:e3:39:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0e490094-9a91-4b97-84c9-9bce9073deef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:bd:f6:b2:9b:18:3e:1f:28:7d:83:85:25:
                    66:71:21:39:cb:86:a9:08:a2:07:d5:8d:2a:ab:8f:
                    03:a0:d3:12:fe:a7:d3:d5:a9:b7:83:da:23:ae:28:
                    00:fc:7e:25:26:3b:33:a8:19:57:10:a6:c0:fe:c0:
                    27:9f:1b:59:9e:30:d8:3e:1d:0c:76:7a:0a:0b:6b:
                    a9:e3:1e:9e:0e:a0:42:6d:e8:4a:2e:5f:c8:83:43:
                    3a:00:65:9e:03:26:a9:d7:ab:61:c9:98:52:58:1e:
                    1f:33:c9:62:7d:a2:ac:96:59:99:35:0b:d7:e4:da:
                    3a:c5:23:38:4c:cc:4d:d3:c8:27:d6:e3:fd:10:1b:
                    a7:7e:6b:7a:b4:ca:3e:57:ea:48:c1:32:f8:72:a9:
                    67:71:0a:f7:4c:42:8a:7b:df:e2:4c:ae:79:2f:d5:
                    36:b5:bf:09:de:dc:c9:6e:03:44:90:a4:ba:f4:53:
                    88:52:6b:42:11:fe:26:79:6e:fa:82:d9:fe:28:52:
                    b0:66:eb:07:58:a9:08:f3:e8:eb:a2:94:e1:64:21:
                    ae:d7:ea:7a:d4:87:ec:60:6e:e5:0a:c7:cb:9e:f7:
                    e9:6a:f7:ea:13:60:88:9a:a8:d3:1c:ab:5c:82:d7:
                    de:ee:24:39:d2:43:c0:b7:70:2d:52:60:62:13:63:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:3A:F6:D1:5D:39:97:DE:35:70:C6:43:4F:E4:84:B9:40:42:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb13f4b4-3bcc-3760-8c00-510dcf9c8010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:8b:a2:6d:bb:aa:e0:13:e5:16:15:93:dd:0c:d2:de:aa:
         0a:e1:b4:49:e1:6c:d3:5e:99:00:7a:0d:ee:3d:91:2a:00:23:
         08:27:7d:a9:b6:04:45:ba:67:b7:bf:ce:80:25:53:5b:2c:c7:
         7d:f6:df:74:8a:62:b1:91:7b:53:52:73:28:f9:46:44:88:b9:
         0c:1d:93:18:b5:ad:aa:3f:04:51:49:c5:ea:ae:a7:6d:45:07:
         ec:89:e2:e6:99:78:36:21:b9:e2:03:d5:5c:97:22:f0:79:a6:
         d5:d0:62:d6:24:e6:b5:88:70:60:30:37:d0:61:12:b4:47:4a:
         db:40:d7:b4:1b:c5:ca:62:31:1f:b5:cc:72:c1:2a:45:8c:9a:
         32:88:a3:48:5b:dd:ba:5f:3c:6f:3f:cf:5d:de:f6:53:0b:3d:
         c5:2b:07:55:09:25:4e:a5:70:d4:38:f0:ae:5a:1b:ab:20:ce:
         47:bb:61:a8:08:eb:66:50:d6:7e:89:d3:bc:a6:77:e3:cb:1c:
         c9:a2:a7:90:be:a8:9d:1e:f4:3c:9b:19:6e:ee:bc:95:a3:c1:
         50:18:a9:e2:17:be:de:3e:e5:cb:2b:e0:56:f5:5f:96:bd:bc:
         a3:c0:f0:63:11:58:e1:6a:f5:67:96:c6:d3:49:d5:b8:d5:30:
         95:d8:25:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZOtmyPU9ZeM5fUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
MGU0OTAwOTQtOWE5MS00Yjk3LTg0YzktOWJjZTkwNzNkZWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SW99rKbGD4fKH2DhSVmcSE5y4apCKIH1Y0q
q48DoNMS/qfT1am3g9ojrigA/H4lJjszqBlXEKbA/sAnnxtZnjDYPh0MdnoKC2up
4x6eDqBCbehKLl/Ig0M6AGWeAyap16thyZhSWB4fM8lifaKsllmZNQvX5No6xSM4
TMxN08gn1uP9EBunfmt6tMo+V+pIwTL4cqlncQr3TEKKe9/iTK55L9U2tb8J3tzJ
bgNEkKS69FOIUmtCEf4meW76gtn+KFKwZusHWKkI8+jropThZCGu1+p61IfsYG7l
CsfLnvfpavfqE2CImqjTHKtcgtfe7iQ50kPAt3AtUmBiE2OHxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKIOvbRXTmX3jVwxkNP5IS5QEIUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWIxM2Y0YjQtM2JjYy0z
NzYwLThjMDAtNTEwZGNmOWM4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHubMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGsi6Jtu6rgE+UWFZPdDNLeqgrhtEnhbNNemQB6De49kSoAIwgnfam2
BEW6Z7e/zoAlU1ssx33233SKYrGRe1NScyj5RkSIuQwdkxi1rao/BFFJxequp21F
B+yJ4uaZeDYhueID1VyXIvB5ptXQYtYk5rWIcGAwN9BhErRHSttA17QbxcpiMR+1
zHLBKkWMmjKIo0hb3bpfPG8/z13e9lMLPcUrB1UJJU6lcNQ48K5aG6sgzke7YagI
62ZQ1n6J07ymd+PLHMmip5C+qJ0e9DybGW7uvJWjwVAYqeIXvt4+5csr4Fb1X5a9
vKPA8GMRWOFq9WeWxtNJ1bjVMJXYJRs=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:49 2026 by rpki-client