Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa
File:                     b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa (raw, json)
Hash identifier:          WQclauc1WO7tJ7HdqpMXL4d6OvVW5Nrl0ZifdlBjQ8Q=
Subject key identifier:   B6:00:E6:3F:28:63:C9:67:B5:A6:92:8C:FC:9A:FF:1F:64:38:C2:F5
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584DE1508337E6D64E2DF3AA9700
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        104.218.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:83:37:e6:d6:4e:2d:f3:aa:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=37429611-8793-42cd-979a-8043bc1ee9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:71:6a:c6:25:e6:49:be:c2:e7:b6:02:0b:
                    a2:11:df:94:ce:84:17:71:c4:c1:9f:22:67:b5:63:
                    5c:b0:77:0b:73:73:9f:35:c7:98:ae:c9:ab:6c:8b:
                    96:d8:a4:b7:23:03:63:b9:e4:0f:5f:e6:35:27:99:
                    45:d9:d1:2f:ed:57:b5:32:a1:e0:b1:c4:4a:05:52:
                    2c:5a:b7:c6:40:d9:4f:1f:fd:7e:91:30:21:ce:dc:
                    f0:fa:9d:93:08:72:09:23:80:4f:eb:b5:00:b9:44:
                    75:2c:90:15:49:e8:f6:0b:a6:14:53:cc:c2:a7:06:
                    6a:e6:a7:38:2a:e2:0f:6c:a1:b1:5d:15:03:53:1c:
                    c8:61:5b:10:83:b2:b0:42:03:c7:65:67:4d:5b:cf:
                    3b:10:a3:36:12:23:94:e5:f7:f9:4a:5a:46:41:90:
                    08:b1:ab:3e:a7:12:9b:47:0d:e1:c9:56:d1:56:66:
                    5e:b1:77:7d:35:09:6f:87:6c:c2:e6:42:22:e1:e6:
                    9b:24:da:5e:e8:92:57:ca:0b:6f:06:24:c8:7e:cd:
                    0c:79:36:59:fb:56:39:3c:d9:b7:e7:8b:2f:82:7e:
                    bc:29:93:5b:8d:d2:a6:22:e1:50:a4:ea:7c:67:e6:
                    d8:b3:2b:dc:f0:6d:6a:dc:cf:54:e6:ce:79:bc:9e:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:E6:3F:28:63:C9:67:B5:A6:92:8C:FC:9A:FF:1F:64:38:C2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/b97a4bd7-5509-3b4c-b144-618edbe6fa2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:af:79:6a:f1:c1:79:af:1e:a1:b3:30:80:8a:39:bd:2d:5d:
         d9:5a:2d:e5:59:92:10:e0:a3:df:c5:20:6c:24:4b:d2:9c:df:
         22:fa:b1:8d:c2:1b:dd:4b:17:18:6b:62:7c:44:aa:24:a8:2f:
         1f:18:d6:18:82:b5:53:e9:61:66:0f:46:01:ff:ae:88:c1:3f:
         eb:72:00:48:16:ca:99:40:a8:03:10:c5:99:3c:13:09:6d:57:
         87:a2:4a:0b:86:3d:81:7b:a1:83:14:3b:cd:e0:43:06:4c:9b:
         d7:4e:b3:bb:63:6f:e6:21:66:ff:90:a7:f0:22:88:2f:76:2e:
         86:ba:7e:a8:b2:65:7b:66:89:f0:2d:76:20:71:22:98:ff:af:
         f7:0f:80:e5:0c:cb:a2:43:0c:b3:dd:d1:34:77:56:8f:9f:dd:
         01:11:36:87:8d:ac:cd:49:64:ea:2e:86:be:74:02:75:2e:3f:
         f9:37:0a:e2:05:6e:8b:e6:19:d1:e6:53:3d:02:73:b5:84:3d:
         79:50:48:92:6c:8a:fb:b4:c4:04:6f:0b:43:58:85:cc:7d:88:
         ae:c6:fc:63:07:28:4e:90:72:6e:85:df:94:99:98:2a:cd:2e:
         ef:ad:c9:90:82:2f:0b:b2:77:59:59:d0:c0:11:df:9d:70:83:
         f6:ef:48:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIM35tZOLfOqlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
Mzc0Mjk2MTEtODc5My00MmNkLTk3OWEtODA0M2JjMWVlOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4pxasYl5km+wue2AguiEd+UzoQXccTBnyJn
tWNcsHcLc3OfNceYrsmrbIuW2KS3IwNjueQPX+Y1J5lF2dEv7Ve1MqHgscRKBVIs
WrfGQNlPH/1+kTAhztzw+p2TCHIJI4BP67UAuUR1LJAVSej2C6YUU8zCpwZq5qc4
KuIPbKGxXRUDUxzIYVsQg7KwQgPHZWdNW887EKM2EiOU5ff5SlpGQZAIsas+pxKb
Rw3hyVbRVmZesXd9NQlvh2zC5kIi4eabJNpe6JJXygtvBiTIfs0MeTZZ+1Y5PNm3
54svgn68KZNbjdKmIuFQpOp8Z+bYsyvc8G1q3M9U5s55vJ7RHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYA5j8oY8lntaaSjPya/x9kOML1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYjk3YTRiZDctNTUwOS0z
YjRjLWIxNDQtNjE4ZWRiZTZmYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCveWrxwXmvHqGzMICKOb0tXdlaLeVZkhDgo9/FIGwkS9Kc3yL6sY3C
G91LFxhrYnxEqiSoLx8Y1hiCtVPpYWYPRgH/rojBP+tyAEgWyplAqAMQxZk8Ewlt
V4eiSguGPYF7oYMUO83gQwZMm9dOs7tjb+YhZv+Qp/AiiC92Loa6fqiyZXtmifAt
diBxIpj/r/cPgOUMy6JDDLPd0TR3Vo+f3QERNoeNrM1JZOouhr50AnUuP/k3CuIF
bovmGdHmUz0Cc7WEPXlQSJJsivu0xARvC0NYhcx9iK7G/GMHKE6Qcm6F35SZmCrN
Lu+tyZCCLwuyd1lZ0MAR351wg/bvSLI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:57 2026 by rpki-client