Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa
File:                     92065f68-15cb-3193-8f30-3a5079f02ec7.roa (raw, json)
Hash identifier:          Ya7n9JvN3sc+OLKot+J+1hdACltK/xz/BfhZyqKw+lM=
Subject key identifier:   45:64:B6:8F:9D:77:CB:82:2B:F9:1A:3D:3D:0D:D8:34:46:38:E4:89
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C8476E283595FC83E23D39340
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        104.201.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:e2:83:59:5f:c8:3e:23:d3:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=f470e867-58cf-4cb3-bf1c-c60c70451d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:d6:9c:27:23:b4:7c:d9:f8:d2:9f:52:79:
                    3a:64:ec:6b:69:4b:99:7e:2a:e4:fb:bc:69:9b:e0:
                    ac:12:dd:1e:e3:fb:54:0a:a3:39:c0:f4:4d:a0:3d:
                    b9:ba:67:52:1f:53:57:1d:82:18:49:c6:6d:ae:4f:
                    7f:aa:2b:84:71:e3:97:c0:55:46:fa:e9:17:df:22:
                    c5:eb:50:f8:74:32:9a:80:2d:f5:93:45:b2:7f:ba:
                    95:9b:6c:8d:ec:37:08:60:4d:90:b0:fa:fe:ba:a1:
                    10:a8:c7:0c:5b:30:d4:29:15:08:51:46:6d:47:48:
                    1b:41:65:cb:40:b9:0b:81:11:1f:ab:eb:d5:31:60:
                    9e:4f:e0:08:b6:63:79:9d:96:12:78:54:00:f2:65:
                    da:45:ff:6c:7a:ee:35:e8:0f:a4:02:a8:3b:70:98:
                    d8:b2:88:37:7b:70:bb:e1:8a:17:c5:c7:c4:e8:c7:
                    f4:3a:16:0c:84:81:57:40:71:61:a6:38:4d:8c:ca:
                    93:2d:e8:02:a0:b0:3c:fb:f2:4f:0f:ee:a6:f0:c1:
                    95:66:6a:79:87:a5:69:2a:b9:88:25:df:48:b6:f7:
                    ec:03:08:16:f8:c7:19:a8:75:79:ca:09:94:29:dd:
                    f7:4f:e4:56:e2:fd:d1:fb:d8:27:c4:b2:fe:b7:de:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:B6:8F:9D:77:CB:82:2B:F9:1A:3D:3D:0D:D8:34:46:38:E4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:a3:dd:59:0d:32:55:30:b2:7a:25:0b:62:01:6b:3e:89:
         6b:2d:59:3a:b3:77:9e:91:03:9a:89:ef:2a:59:6d:56:9c:e0:
         98:e3:00:9f:96:5a:7e:63:73:7c:92:8b:61:b3:36:88:3a:e5:
         c7:54:3b:ae:17:6f:9b:b9:44:c3:57:1d:cd:a7:39:d1:9a:6d:
         de:13:2a:f3:a1:5a:bb:b8:d1:15:d7:08:41:39:9e:ed:2d:cb:
         95:50:eb:53:6d:95:8c:d4:90:fb:f0:cf:d6:f0:db:dd:dd:04:
         c8:ac:cc:59:87:34:5a:44:16:dd:b6:8f:9e:af:0e:13:e2:a8:
         78:ff:82:df:ce:3e:15:dc:52:1b:2b:29:f5:65:23:e7:f1:7d:
         6e:bb:5b:2a:cb:1d:fa:ce:07:01:4d:63:40:fd:be:32:d6:f2:
         8f:d0:62:05:09:cd:7f:1f:8c:35:4c:d0:4c:11:19:82:37:13:
         cb:10:9e:5e:61:d7:ea:ba:ee:80:fb:60:78:f0:09:71:6f:bd:
         d3:83:89:41:81:be:7e:6a:13:57:74:98:da:8c:3c:b0:02:14:
         9a:af:bc:05:84:0a:ac:fa:12:fd:89:61:72:e3:50:1a:95:7f:
         47:4c:3c:ed:97:5d:d6:c3:81:7c:b3:0d:6e:0d:c4:31:31:0f:
         7d:97:95:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEduKDWV/IPiPTk0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
ZjQ3MGU4NjctNThjZi00Y2IzLWJmMWMtYzYwYzcwNDUxZDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHPWnCcjtHzZ+NKfUnk6ZOxraUuZfirk+7xp
m+CsEt0e4/tUCqM5wPRNoD25umdSH1NXHYIYScZtrk9/qiuEceOXwFVG+ukX3yLF
61D4dDKagC31k0Wyf7qVm2yN7DcIYE2QsPr+uqEQqMcMWzDUKRUIUUZtR0gbQWXL
QLkLgREfq+vVMWCeT+AItmN5nZYSeFQA8mXaRf9seu416A+kAqg7cJjYsog3e3C7
4YoXxcfE6Mf0OhYMhIFXQHFhpjhNjMqTLegCoLA8+/JPD+6m8MGVZmp5h6VpKrmI
Jd9ItvfsAwgW+McZqHV5ygmUKd33T+RW4v3R+9gnxLL+t96aKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVkto+dd8uCK/kaPT0N2DRGOOSJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTIwNjVmNjgtMTVjYi0z
MTkzLThmMzAtM2E1MDc5ZjAyZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsco91ZDTJVMLJ6JQtiAWs+iWstWTqzd56RA5qJ7ypZbVac4JjjAJ+W
Wn5jc3ySi2GzNog65cdUO64Xb5u5RMNXHc2nOdGabd4TKvOhWru40RXXCEE5nu0t
y5VQ61NtlYzUkPvwz9bw293dBMiszFmHNFpEFt22j56vDhPiqHj/gt/OPhXcUhsr
KfVlI+fxfW67WyrLHfrOBwFNY0D9vjLW8o/QYgUJzX8fjDVM0EwRGYI3E8sQnl5h
1+q67oD7YHjwCXFvvdODiUGBvn5qE1d0mNqMPLACFJqvvAWECqz6Ev2JYXLjUBqV
f0dMPO2XXdbDgXyzDW4NxDExD32XlZY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:52 2026 by rpki-client