Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/7b996d20-bc32-3593-a3ad-9e36ed77669f.roa
File:                     7b996d20-bc32-3593-a3ad-9e36ed77669f.roa (raw, json)
Hash identifier:          OxdCG95U/giN7BfjCosiLR45ygwpsUKxK6ziG6DoODQ=
Subject key identifier:   47:BA:85:FA:CE:4A:CC:91:1F:6D:7E:6E:46:2D:E8:9E:1B:D7:F1:E8
Certificate issuer:       /CN=93d9f794-ef47-4b88-87fe-9a9b35304f5b
Certificate serial:       010D0C9F4328584EB2B1A6E082F245E6882CEC00
Authority key identifier: 81:12:D5:FC:5C:53:11:CF:97:6D:E3:60:7F:66:3E:2E:84:E0:D8:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/7b996d20-bc32-3593-a3ad-9e36ed77669f.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     11734
IP address blocks:        104.129.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/93d9f794-ef47-4b88-87fe-9a9b35304f5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/93d9f794-ef47-4b88-87fe-9a9b35304f5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a6:e0:82:f2:45:e6:88:2c:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d9f794-ef47-4b88-87fe-9a9b35304f5b
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=370961bc-cd99-4b4e-800f-299483b1ec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:df:c4:fa:51:8d:ea:60:f9:0a:d9:36:14:
                    6a:17:6c:af:b1:68:73:9b:09:70:16:ac:cd:45:38:
                    c9:97:ec:2c:6f:d4:d3:6f:62:d0:f5:f7:78:88:60:
                    91:2e:e2:fa:f3:99:a8:5b:d1:a2:c3:bc:97:14:81:
                    d2:63:42:95:29:33:e4:89:6c:66:e1:92:6c:b5:b1:
                    72:c6:75:07:48:f7:77:4f:e0:ae:02:ff:9c:74:3c:
                    0d:18:47:8e:b9:22:1a:a3:b5:9a:b8:d6:94:87:a6:
                    95:79:72:57:30:9c:d3:8e:06:df:0f:46:6a:c0:29:
                    79:0d:00:b3:23:26:6e:61:33:c0:39:09:fc:52:21:
                    b5:2a:3d:c5:a7:77:9c:58:a4:45:db:91:90:d4:83:
                    c7:21:db:81:c1:82:e9:1d:4b:9c:08:9d:13:17:f1:
                    31:9e:15:5b:1a:4e:87:fa:45:74:8d:21:3f:57:c0:
                    b5:e5:a9:a3:3a:2a:98:88:18:ba:6e:f3:e2:e8:00:
                    2e:dc:20:44:d6:15:23:a1:d4:b7:0a:c6:11:70:e1:
                    31:71:f1:21:3f:c6:ac:05:00:0a:dc:e0:26:32:6e:
                    81:4f:5f:e0:39:87:32:cd:5d:73:fe:dd:fc:18:5d:
                    b1:33:f3:78:8c:f9:23:70:e7:36:d9:f0:3b:df:4e:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BA:85:FA:CE:4A:CC:91:1F:6D:7E:6E:46:2D:E8:9E:1B:D7:F1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/7b996d20-bc32-3593-a3ad-9e36ed77669f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b/93d9f794-ef47-4b88-87fe-9a9b35304f5b.crl

            X509v3 Authority Key Identifier:
                keyid:81:12:D5:FC:5C:53:11:CF:97:6D:E3:60:7F:66:3E:2E:84:E0:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93d9f794-ef47-4b88-87fe-9a9b35304f5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:81:ae:84:4d:6b:da:8f:36:af:70:af:d0:11:fd:7a:e0:
         93:21:f1:c4:a1:55:99:e1:f1:9d:b9:30:42:6c:19:67:4e:4b:
         f9:ac:b7:38:d4:1b:27:51:42:70:54:10:ca:2c:bd:b7:10:11:
         29:d2:dc:7f:3c:a0:63:82:53:7f:ff:6e:93:8a:0a:dd:50:3f:
         21:ac:7f:f8:56:c1:8d:ff:f5:76:8c:d8:85:23:39:f7:01:39:
         62:db:b6:cb:2d:31:17:37:00:46:13:9f:72:2e:34:a4:b5:42:
         cd:b0:cd:42:a2:01:67:1f:78:1b:f0:35:02:41:ab:1c:33:98:
         b3:ee:59:f2:06:2f:16:96:56:62:02:35:10:07:27:75:59:79:
         06:c3:8e:4f:21:cd:7f:c3:71:17:e5:15:48:a6:22:c4:a6:ba:
         af:30:1a:1e:69:6a:d7:ac:47:85:49:a6:8c:52:0a:31:51:0f:
         e2:51:ad:23:c9:8f:19:7d:3a:ab:12:02:21:e6:87:bd:0b:23:
         3a:b9:a4:b7:ec:e6:0f:c5:6f:07:f2:44:81:5e:2d:18:46:5f:
         e4:1e:ac:c2:34:0a:93:22:09:e5:a3:c3:dc:90:ea:80:86:bf:
         c7:1f:80:98:43:23:b9:c9:a7:b5:bf:28:79:f2:7d:1c:44:dd:
         9f:c2:9a:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysabggvJF5ogs7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNkOWY3OTQtZWY0Ny00Yjg4LTg3ZmUtOWE5YjM1MzA0
ZjViMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MzcwOTYxYmMtY2Q5OS00YjRlLTgwMGYtMjk5NDgzYjFlYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhXfxPpRjepg+QrZNhRqF2yvsWhzmwlwFqzN
RTjJl+wsb9TTb2LQ9fd4iGCRLuL685moW9Giw7yXFIHSY0KVKTPkiWxm4ZJstbFy
xnUHSPd3T+CuAv+cdDwNGEeOuSIao7WauNaUh6aVeXJXMJzTjgbfD0ZqwCl5DQCz
IyZuYTPAOQn8UiG1Kj3Fp3ecWKRF25GQ1IPHIduBwYLpHUucCJ0TF/ExnhVbGk6H
+kV0jSE/V8C15amjOiqYiBi6bvPi6AAu3CBE1hUjodS3CsYRcOExcfEhP8asBQAK
3OAmMm6BT1/gOYcyzV1z/t38GF2xM/N4jPkjcOc22fA7306BHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEe6hfrOSsyRH21+bkYt6J4b1/HoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85M2Q5
Zjc5NC1lZjQ3LTRiODgtODdmZS05YTliMzUzMDRmNWIvN2I5OTZkMjAtYmMzMi0z
NTkzLWEzYWQtOWUzNmVkNzc2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTNkOWY3OTQtZWY0Ny00Yjg4LTg3
ZmUtOWE5YjM1MzA0ZjViLzkzZDlmNzk0LWVmNDctNGI4OC04N2ZlLTlhOWIzNTMw
NGY1Yi5jcmwwHwYDVR0jBBgwFoAUgRLV/FxTEc+XbeNgf2Y+LoTg2NcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85M2Q5Zjc5NC1lZjQ3LTRiODgtODdmZS05YTli
MzUzMDRmNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFebga6ETWvajzavcK/QEf164JMh8cShVZnh8Z25MEJsGWdOS/mstzjU
GydRQnBUEMosvbcQESnS3H88oGOCU3//bpOKCt1QPyGsf/hWwY3/9XaM2IUjOfcB
OWLbtsstMRc3AEYTn3IuNKS1Qs2wzUKiAWcfeBvwNQJBqxwzmLPuWfIGLxaWVmIC
NRAHJ3VZeQbDjk8hzX/DcRflFUimIsSmuq8wGh5patesR4VJpoxSCjFRD+JRrSPJ
jxl9OqsSAiHmh70LIzq5pLfs5g/FbwfyRIFeLRhGX+QerMI0CpMiCeWjw9yQ6oCG
v8cfgJhDI7nJp7W/KHnyfRxE3Z/CmgU=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:53 2026 by rpki-client