Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa
File:                     17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa (raw, json)
Hash identifier:          xYepvXGZQMx2R2xXrVBc3+m5kyMvNfD6woAl6nFFMM4=
Subject key identifier:   EC:04:B5:2B:B0:18:8A:3C:FB:01:6A:3E:E7:89:D5:DB:B0:00:65:AB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA2DFCFF65748CE67BF3B2A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     202623
IP address blocks:        104.23.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cf:f6:57:48:ce:67:bf:3b:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=8153c7b1-4334-4afb-a2ba-c508dafffe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:6e:65:dd:2b:66:c3:2f:e4:9b:e8:26:6d:
                    ed:a3:18:73:02:eb:39:a0:48:b2:c1:a4:3f:30:35:
                    db:75:a0:fa:cb:3f:57:d5:c5:3e:7d:75:51:ca:ba:
                    4c:de:3c:17:5f:0b:ff:40:45:35:16:2b:da:38:43:
                    e3:0a:d2:b1:dd:2e:5a:fc:f1:e0:45:44:0a:f3:41:
                    a9:78:9b:8e:9b:02:44:03:d0:fe:0a:01:65:8c:8b:
                    e6:0d:4c:7c:e0:8d:6b:dc:b6:fb:38:82:08:db:0b:
                    3a:b6:4f:90:55:fc:cf:0e:25:e5:ec:db:11:59:ed:
                    33:ad:88:d6:26:17:2b:85:42:46:31:4b:bd:c7:0a:
                    97:2d:ba:31:94:54:96:98:5f:77:9c:f8:4b:46:5e:
                    67:c7:11:44:fe:83:b9:46:cf:34:6a:f0:88:0d:3c:
                    b7:af:2c:a1:e7:6d:66:d9:f2:af:3e:cd:47:12:ad:
                    10:be:99:9b:b1:bb:91:f7:53:00:43:6a:da:ef:f2:
                    75:eb:ab:1f:65:72:d7:6d:1b:49:da:60:c0:91:ea:
                    c6:06:6f:69:f5:ba:e8:94:fa:17:90:51:53:ef:0b:
                    f2:52:4a:19:ee:19:12:67:e1:99:a4:29:24:58:f5:
                    f0:13:ef:6a:57:79:47:a3:2c:6c:ea:76:15:51:01:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:B5:2B:B0:18:8A:3C:FB:01:6A:3E:E7:89:D5:DB:B0:00:65:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:27:7d:37:1b:d5:e7:ea:8a:9c:a9:14:92:a5:a5:6e:cd:27:
         28:30:46:9c:5f:6e:ac:f6:6b:54:f3:3b:20:bd:92:48:5f:43:
         a0:4a:c2:de:9d:c0:27:c3:c1:f6:bd:1b:39:89:05:3e:59:1d:
         a6:12:c0:87:e8:c4:23:ed:3d:74:fc:e2:50:48:fa:be:93:93:
         7c:11:5a:20:a0:72:45:4d:33:f2:ae:c0:14:33:14:0a:09:87:
         32:82:b2:c9:65:20:34:34:65:6a:dd:c0:99:8c:84:bb:26:bc:
         72:8b:51:37:d5:45:7a:9e:5a:96:91:1c:16:71:9a:5c:56:91:
         2e:5a:77:d2:4e:b0:bd:4c:18:3f:2d:91:bd:ab:90:1d:30:56:
         60:04:19:af:ac:3b:50:be:85:cd:5f:1b:d9:9b:5a:53:f1:85:
         8d:1c:b2:80:28:3b:64:a4:e7:ac:9b:9c:3e:c5:bc:47:65:e1:
         5b:c4:8b:f4:96:81:6b:6f:eb:a4:00:9c:0e:3e:d9:97:68:b0:
         11:d4:92:5e:61:e4:84:e3:7a:c6:08:51:d7:d5:a6:cc:84:4b:
         a6:82:aa:05:a5:7c:af:1d:f8:c4:fe:0a:2e:a7:4b:5f:08:c7:
         1f:28:57:ff:f3:e8:99:a4:ae:fa:99:b1:98:97:60:c9:bb:0b:
         ab:cc:0a:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38/2V0jOZ787KoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ODE1M2M3YjEtNDMzNC00YWZiLWEyYmEtYzUwOGRhZmZmZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNuZd0rZsMv5JvoJm3toxhzAus5oEiywaQ/
MDXbdaD6yz9X1cU+fXVRyrpM3jwXXwv/QEU1FivaOEPjCtKx3S5a/PHgRUQK80Gp
eJuOmwJEA9D+CgFljIvmDUx84I1r3Lb7OIII2ws6tk+QVfzPDiXl7NsRWe0zrYjW
JhcrhUJGMUu9xwqXLboxlFSWmF93nPhLRl5nxxFE/oO5Rs80avCIDTy3ryyh521m
2fKvPs1HEq0QvpmbsbuR91MAQ2ra7/J166sfZXLXbRtJ2mDAkerGBm9p9brolPoX
kFFT7wvyUkoZ7hkSZ+GZpCkkWPXwE+9qV3lHoyxs6nYVUQF8fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwEtSuwGIo8+wFqPueJ1duwAGWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdiZDU2NTYtZmFhNy0z
YmUzLWIzY2ItZGVkYzRhOTZiYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8nfTcb1efqipypFJKlpW7NJygwRpxfbqz2a1TzOyC9kkhfQ6BKwt6d
wCfDwfa9GzmJBT5ZHaYSwIfoxCPtPXT84lBI+r6Tk3wRWiCgckVNM/KuwBQzFAoJ
hzKCssllIDQ0ZWrdwJmMhLsmvHKLUTfVRXqeWpaRHBZxmlxWkS5ad9JOsL1MGD8t
kb2rkB0wVmAEGa+sO1C+hc1fG9mbWlPxhY0csoAoO2Sk56ybnD7FvEdl4VvEi/SW
gWtv66QAnA4+2ZdosBHUkl5h5ITjesYIUdfVpsyES6aCqgWlfK8d+MT+Ci6nS18I
xx8oV//z6JmkrvqZsZiXYMm7C6vMCuM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:24 2026 by rpki-client