Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a95350-e9ab-32b8-8a04-efd0fe24c690.roa
File:                     87a95350-e9ab-32b8-8a04-efd0fe24c690.roa (raw, json)
Hash identifier:          OVgHge9XS2jbw832dzpaBARzYP+RDoy3YpxxxxaJUxU=
Subject key identifier:   9C:EC:90:EA:D0:91:C4:0A:C6:87:77:8D:D4:3B:5F:A7:F6:CC:E2:2B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E0C038621185270D65755CC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a95350-e9ab-32b8-8a04-efd0fe24c690.roa
Signing time:             Wed 03 Jun 2026 08:05:19 +0000
ROA not before:           Wed 03 Jun 2026 08:05:19 +0000
ROA not after:            Tue 01 Sep 2026 08:05:19 +0000
asID:                     14789
IP address blocks:        104.22.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:03:86:21:18:52:70:d6:57:55:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  3 08:05:19 2026 GMT
            Not After : Sep  1 08:05:19 2026 GMT
        Subject: CN=214fc08c-d7a6-45fe-a40d-f210efe69ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:a3:a1:2f:bc:47:4d:a8:79:d9:43:75:4b:
                    f2:7d:61:21:9e:e3:fd:56:37:e0:49:7d:ac:14:c1:
                    09:21:4a:60:20:39:eb:73:a4:3c:20:38:99:51:37:
                    24:8d:80:99:b4:49:00:bd:b0:a9:d0:55:ee:d7:af:
                    e9:7c:7f:68:50:fc:19:94:05:35:a9:9c:bb:2c:c5:
                    3b:ce:aa:2a:09:ed:b9:c5:fb:96:9c:37:2f:94:8d:
                    ea:43:de:a2:db:8a:30:41:0c:d5:8b:59:9f:07:8f:
                    4a:98:b4:a4:bd:50:20:8c:83:ff:d8:e5:cc:50:0e:
                    53:4b:f7:08:f0:20:8f:8d:7d:17:17:63:71:9a:9e:
                    89:07:55:66:bf:09:b1:fd:d2:e4:d4:a1:ab:49:5e:
                    7c:d6:cb:21:93:69:d9:53:2c:9b:0f:93:aa:88:e8:
                    57:cb:8a:fa:28:fd:b7:96:cd:70:db:ab:c0:37:36:
                    a0:ef:8b:fa:05:88:fc:5e:74:fc:c4:c6:42:e4:82:
                    9d:79:d9:64:23:33:21:29:2d:81:99:db:ce:f9:8f:
                    82:3e:37:d5:fd:b7:cd:5c:48:7b:20:0f:18:80:33:
                    7f:48:1c:ed:a5:aa:0e:aa:90:0b:3c:79:6e:4c:aa:
                    7c:9f:47:f1:ed:e7:34:c8:8f:23:d9:f0:df:cb:6e:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:90:EA:D0:91:C4:0A:C6:87:77:8D:D4:3B:5F:A7:F6:CC:E2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a95350-e9ab-32b8-8a04-efd0fe24c690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.22.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:42:f4:de:b0:fe:8d:05:3c:1b:9d:c1:d8:60:3a:a3:6b:
         34:3a:92:58:02:41:cb:c4:7b:1c:79:ab:61:ef:2d:f6:bd:81:
         16:ff:8e:0e:19:da:93:12:84:ea:58:88:49:82:da:f6:a8:ac:
         c9:25:a8:85:56:8f:ab:21:7b:84:11:50:81:24:c5:7b:4f:bc:
         09:27:71:ca:95:51:1d:85:81:b8:33:8b:76:8f:22:67:62:f7:
         67:24:97:5b:79:79:25:8b:f7:3a:f3:84:ee:3c:dc:50:19:9d:
         93:2a:6f:0e:fa:dc:ab:b0:e1:81:ec:de:b2:87:41:22:f0:32:
         b6:46:bb:4f:7d:7e:08:48:10:f1:b9:10:58:21:51:2a:e8:c2:
         ee:b6:a5:e7:5c:c5:46:89:f0:85:8d:49:18:fa:cc:e7:2b:fd:
         42:89:5e:ac:0a:94:b8:07:65:3a:ad:b5:12:23:d0:96:13:90:
         04:5d:4f:19:75:19:1c:1f:21:21:56:fb:b7:9e:93:6c:ad:53:
         28:59:ea:11:20:67:23:95:34:e9:7f:3b:08:76:44:5a:cf:86:
         72:75:75:86:00:e0:d2:f5:a9:48:62:a5:64:f1:43:a9:11:c8:
         c8:6f:0b:27:fa:fc:14:25:f9:15:b0:6f:3a:a4:4d:a1:9f:8d:
         31:c5:85:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MA4YhGFJw1ldVzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYwMzA4MDUxOVoXDTI2MDkwMTA4MDUxOVowLzEtMCsGA1UEAxMk
MjE0ZmMwOGMtZDdhNi00NWZlLWE0MGQtZjIxMGVmZTY5ZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9GjoS+8R02oedlDdUvyfWEhnuP9VjfgSX2s
FMEJIUpgIDnrc6Q8IDiZUTckjYCZtEkAvbCp0FXu16/pfH9oUPwZlAU1qZy7LMU7
zqoqCe25xfuWnDcvlI3qQ96i24owQQzVi1mfB49KmLSkvVAgjIP/2OXMUA5TS/cI
8CCPjX0XF2Nxmp6JB1Vmvwmx/dLk1KGrSV581sshk2nZUyybD5OqiOhXy4r6KP23
ls1w26vANzag74v6BYj8XnT8xMZC5IKdedlkIzMhKS2BmdvO+Y+CPjfV/bfNXEh7
IA8YgDN/SBztpaoOqpALPHluTKp8n0fx7ec0yI8j2fDfy24r8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzskOrQkcQKxod3jdQ7X6f2zOIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODdhOTUzNTAtZTlhYi0z
MmI4LThhMDQtZWZkMGZlMjRjNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBYoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5vQvTesP6NBTwbncHYYDqjazQ6klgCQcvEexx5q2HvLfa9gRb/jg4Z
2pMShOpYiEmC2vaorMklqIVWj6she4QRUIEkxXtPvAknccqVUR2Fgbgzi3aPImdi
92ckl1t5eSWL9zrzhO483FAZnZMqbw763Kuw4YHs3rKHQSLwMrZGu099fghIEPG5
EFghUSrowu62pedcxUaJ8IWNSRj6zOcr/UKJXqwKlLgHZTqttRIj0JYTkARdTxl1
GRwfISFW+7eek2ytUyhZ6hEgZyOVNOl/Owh2RFrPhnJ1dYYA4NL1qUhipWTxQ6kR
yMhvCyf6/BQl+RWwbzqkTaGfjTHFhYU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:44 2026 by rpki-client