Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cd7cc48c-b215-35f5-951b-99aa9912aaf2.roa
File:                     cd7cc48c-b215-35f5-951b-99aa9912aaf2.roa (raw, json)
Hash identifier:          VfNGHmE3xUFGBjZLgbYQJWm7WZLGpFjQYdJ/x+VF/xg=
Subject key identifier:   2B:2A:9E:BE:8C:40:DB:F1:4E:A3:D1:CD:5A:2F:60:DC:59:16:AA:C6
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584EAD1C6BCCBD5F54F361A92FA8
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cd7cc48c-b215-35f5-951b-99aa9912aaf2.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     9009
IP address blocks:        104.243.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:6b:cc:bd:5f:54:f3:61:a9:2f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=d10c7f7c-03cf-434e-adf8-206876162aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:37:ac:1d:be:b7:f3:33:75:3d:b1:9e:b8:
                    88:1b:86:45:d2:4b:0d:95:f3:f7:de:5e:b8:f0:87:
                    b7:e9:7e:7c:56:14:fa:6b:c3:65:4f:d3:bc:d0:c6:
                    df:aa:d4:b0:2b:4f:32:e9:59:50:20:44:a1:88:39:
                    91:f8:f7:24:ed:23:d3:ef:e5:6a:2c:8c:13:30:5c:
                    e3:07:85:1d:26:58:91:f4:20:d2:5d:e5:6a:6d:1f:
                    16:8b:ad:98:b6:8c:3d:09:62:dd:4d:14:d0:a6:50:
                    2b:84:3c:f5:b3:49:06:47:0d:61:ce:8b:b9:e0:c0:
                    86:d1:dd:64:48:68:cf:3f:46:d0:cf:91:28:06:e0:
                    3c:33:54:f7:66:3e:d6:88:a7:81:b9:4a:3b:90:51:
                    3a:73:9e:69:c8:42:ad:07:13:b6:55:46:89:85:5c:
                    b0:cb:e8:4a:19:99:ca:27:69:be:db:b1:fd:fc:93:
                    f5:44:17:60:2a:f3:3d:af:ed:39:6e:8a:72:30:a8:
                    fe:fd:2c:15:cb:e1:c6:1e:88:af:e3:43:92:f1:75:
                    c8:f7:ac:32:03:7c:f6:f5:00:62:79:fb:e5:b5:f6:
                    62:f2:ea:24:6e:03:72:77:3e:ba:94:73:c1:a3:74:
                    2a:5e:95:14:51:6e:b0:bf:11:47:2f:83:6d:b3:d3:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:9E:BE:8C:40:DB:F1:4E:A3:D1:CD:5A:2F:60:DC:59:16:AA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cd7cc48c-b215-35f5-951b-99aa9912aaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:08:72:1a:bd:7e:db:ea:c3:58:45:e1:9d:46:d8:16:ff:
         c2:dc:a5:b8:5f:36:04:56:fd:2d:c7:16:1d:d0:4d:3f:93:db:
         47:36:b0:04:76:02:ec:05:83:d2:d9:16:56:ea:14:6e:94:68:
         be:48:72:f5:75:df:37:19:0e:c1:28:5f:5a:d8:33:2e:61:15:
         b6:18:43:43:0e:d4:77:8b:fb:83:e8:c8:01:7b:8c:dd:1b:c3:
         33:e3:c7:31:0b:1d:47:7b:8f:b6:d5:1e:af:01:d8:6a:14:36:
         70:90:91:1c:39:83:d2:ac:e9:e9:a1:00:25:05:a7:d5:55:65:
         a7:bd:02:dc:bb:77:c4:71:83:df:89:30:29:5c:6b:9a:f8:f7:
         24:fe:df:6a:8f:5d:69:83:77:b7:8e:48:ff:ee:75:02:79:f2:
         cb:6c:a9:31:eb:64:ff:60:6a:bb:fa:07:6b:16:ed:b9:3d:61:
         b7:2e:a4:54:02:84:b6:66:ce:18:9f:8d:d1:f7:76:12:0e:f5:
         72:27:fb:7e:f1:89:84:8a:5a:a7:32:a5:c7:2b:e5:06:94:eb:
         ed:e5:26:77:03:58:e1:14:21:de:ff:3d:c1:56:0b:65:1b:e2:
         b3:52:cb:37:f7:bf:26:fc:d0:49:56:5d:01:8d:96:7f:6f:9f:
         e9:ce:5a:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHGvMvV9U82GpL6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
ZDEwYzdmN2MtMDNjZi00MzRlLWFkZjgtMjA2ODc2MTYyYWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTs3rB2+t/MzdT2xnriIG4ZF0ksNlfP33l64
8Ie36X58VhT6a8NlT9O80MbfqtSwK08y6VlQIEShiDmR+Pck7SPT7+VqLIwTMFzj
B4UdJliR9CDSXeVqbR8Wi62Ytow9CWLdTRTQplArhDz1s0kGRw1hzou54MCG0d1k
SGjPP0bQz5EoBuA8M1T3Zj7WiKeBuUo7kFE6c55pyEKtBxO2VUaJhVywy+hKGZnK
J2m+27H9/JP1RBdgKvM9r+05bopyMKj+/SwVy+HGHoiv40OS8XXI96wyA3z29QBi
efvltfZi8uokbgNydz66lHPBo3QqXpUUUW6wvxFHL4Nts9MVeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsqnr6MQNvxTqPRzVovYNxZFqrGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvY2Q3Y2M0OGMtYjIxNS0z
NWY1LTk1MWItOTlhYTk5MTJhYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRfCHIavX7b6sNYReGdRtgW/8LcpbhfNgRW/S3HFh3QTT+T20c2sAR2
AuwFg9LZFlbqFG6UaL5IcvV13zcZDsEoX1rYMy5hFbYYQ0MO1HeL+4PoyAF7jN0b
wzPjxzELHUd7j7bVHq8B2GoUNnCQkRw5g9Ks6emhACUFp9VVZae9Aty7d8Rxg9+J
MClca5r49yT+32qPXWmDd7eOSP/udQJ58stsqTHrZP9garv6B2sW7bk9YbcupFQC
hLZmzhifjdH3dhIO9XIn+37xiYSKWqcypccr5QaU6+3lJncDWOEUId7/PcFWC2Ub
4rNSyzf3vyb80ElWXQGNln9vn+nOWhI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:36 2026 by rpki-client