Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa
File:                     4891ec23-8655-37a8-bed4-a2fa941dd916.roa (raw, json)
Hash identifier:          P++OKbBkKN/l8VpYq7cuK6oK/ynGAB9SFUn3ol/nElM=
Subject key identifier:   96:C0:6B:E0:50:68:73:F6:3C:3E:5B:79:32:2B:C2:5A:5F:5E:50:93
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E11DA151E0CCE45F225960
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        104.201.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1d:a1:51:e0:cc:e4:5f:22:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7ca638a0-2284-43ad-b673-4b6f716972ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:84:72:fe:7c:10:0b:d5:f0:9a:82:95:da:
                    3d:29:80:3b:af:5b:62:d4:be:0c:07:09:a4:92:76:
                    fe:0c:ac:fd:ed:13:ba:67:77:e6:34:11:46:c6:fd:
                    7c:fb:17:fa:f8:06:7b:32:4d:fa:e5:52:3e:da:40:
                    d9:ec:8e:89:1c:fd:0f:70:3a:1d:68:c6:b4:fb:82:
                    6e:ee:1e:31:54:73:fe:89:fe:e8:59:4f:74:c3:2f:
                    9b:cc:fc:b0:20:84:34:63:51:87:42:29:9f:0e:f9:
                    8c:33:e9:22:e1:03:f2:73:bd:44:8f:97:b3:a6:ea:
                    64:19:7d:89:e2:15:60:7b:8a:5f:f9:59:7e:b3:46:
                    90:2b:ac:64:74:fc:cd:53:b4:cf:93:d9:b1:8c:51:
                    af:08:1d:21:c4:e0:09:2e:7e:bd:ac:b2:30:83:25:
                    a4:b0:85:09:20:11:33:3d:8f:b9:74:e0:2c:c4:4e:
                    75:fb:1a:25:ea:95:a1:6c:e4:b7:ec:5e:67:b8:28:
                    93:90:27:ff:2a:1f:81:7f:2d:3d:d5:bf:f7:d6:99:
                    33:32:5f:b1:f2:70:ac:e4:f2:8d:f3:03:42:57:86:
                    1e:43:b7:0b:68:42:da:ed:32:3c:ec:4c:a6:bb:04:
                    0b:34:4a:a8:80:2c:de:0f:5c:9c:5e:e2:1f:17:29:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:6B:E0:50:68:73:F6:3C:3E:5B:79:32:2B:C2:5A:5F:5E:50:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4891ec23-8655-37a8-bed4-a2fa941dd916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:ef:06:b2:da:24:b5:f3:59:e3:ce:fc:90:ca:3a:1c:3b:
         74:72:48:88:5c:34:b1:b5:45:3b:3d:60:ff:6a:4c:60:6b:59:
         6a:bd:e9:48:c3:92:13:ed:53:35:65:57:f3:e7:4d:a7:85:8c:
         39:a6:f8:29:ec:3c:93:53:b6:c5:88:16:49:c4:b4:90:3e:f4:
         7d:6c:17:7b:8b:23:05:de:9d:94:e9:5f:c6:b9:02:af:7c:4f:
         5d:54:1b:02:19:76:27:4f:cb:04:1b:3c:a9:43:68:9c:e2:e3:
         e3:7d:36:f1:ae:60:71:06:98:60:da:71:a0:df:6b:89:dc:05:
         7c:d9:bb:5d:d9:d9:78:56:d3:79:d1:ef:3d:51:63:f8:ab:33:
         5e:c2:2e:cc:90:ce:2f:6e:a8:82:e8:fa:68:ed:a1:e7:15:3e:
         a3:7c:a2:be:16:72:e9:a9:ea:52:e0:83:ca:5d:4c:94:5d:e8:
         0c:50:ef:9d:25:55:96:e9:98:da:d9:71:d5:5d:e9:b4:db:f9:
         13:6e:18:00:d9:14:ee:97:8b:2a:34:32:2c:b0:3d:e2:f7:24:
         1b:4c:48:ac:91:79:80:c5:06:48:d0:b0:0b:bf:67:e8:70:65:
         d1:9f:42:6c:b5:90:cf:6f:03:e3:de:8d:dc:4e:f6:9d:1c:84:
         14:7e:4f:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R2hUeDM5F8iWWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
N2NhNjM4YTAtMjI4NC00M2FkLWI2NzMtNGI2ZjcxNjk3MmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuEcv58EAvV8JqCldo9KYA7r1ti1L4MBwmk
knb+DKz97RO6Z3fmNBFGxv18+xf6+AZ7Mk365VI+2kDZ7I6JHP0PcDodaMa0+4Ju
7h4xVHP+if7oWU90wy+bzPywIIQ0Y1GHQimfDvmMM+ki4QPyc71Ej5ezpupkGX2J
4hVge4pf+Vl+s0aQK6xkdPzNU7TPk9mxjFGvCB0hxOAJLn69rLIwgyWksIUJIBEz
PY+5dOAsxE51+xol6pWhbOS37F5nuCiTkCf/Kh+Bfy091b/31pkzMl+x8nCs5PKN
8wNCV4YeQ7cLaELa7TI87EymuwQLNEqogCzeD1ycXuIfFykkZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbAa+BQaHP2PD5beTIrwlpfXlCTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDg5MWVjMjMtODY1NS0z
N2E4LWJlZDQtYTJmYTk0MWRkOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFt77way2iS181njzvyQyjocO3RySIhcNLG1RTs9YP9qTGBrWWq96UjD
khPtUzVlV/PnTaeFjDmm+CnsPJNTtsWIFknEtJA+9H1sF3uLIwXenZTpX8a5Aq98
T11UGwIZdidPywQbPKlDaJzi4+N9NvGuYHEGmGDacaDfa4ncBXzZu13Z2XhW03nR
7z1RY/irM17CLsyQzi9uqILo+mjtoecVPqN8or4Wcump6lLgg8pdTJRd6AxQ750l
VZbpmNrZcdVd6bTb+RNuGADZFO6Xiyo0MiywPeL3JBtMSKyReYDFBkjQsAu/Z+hw
ZdGfQmy1kM9vA+PejdxO9p0chBR+Txc=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:23 2025 by rpki-client