Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa
File:                     9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa (raw, json)
Hash identifier:          ihaPglU7niJwNazmmgAk/dFtxTnLYd/riH+if8Zt9m0=
Subject key identifier:   5C:3A:84:0D:05:68:8E:72:D8:E9:6C:0B:BD:D1:92:00:81:51:C0:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CF2BCF2994CB7FA12DE77F400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     13335
IP address blocks:        104.23.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:f2:99:4c:b7:fa:12:de:77:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=6ee5abc7-588d-4d53-8514-6f7bf9ad98e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:36:3c:00:8b:16:2d:d1:17:05:a7:6e:60:
                    14:68:3f:3c:6b:a9:1b:79:30:6b:45:54:78:e5:df:
                    28:48:d8:ba:c5:e8:53:74:b7:02:72:f8:77:2d:b0:
                    9a:23:ed:d5:d1:f9:5c:1e:e8:4e:05:a1:e2:eb:13:
                    87:a0:27:f4:ba:57:0a:47:32:a7:d6:3e:a2:8f:17:
                    e0:c5:e2:56:b8:00:95:b1:7a:c1:4f:15:e1:73:6d:
                    39:b2:6d:fe:c8:1c:b0:93:79:cc:27:47:5a:9f:e3:
                    8f:41:cb:8a:fc:c6:59:00:fa:ba:2f:44:65:0b:04:
                    86:56:c3:33:75:2b:e2:f8:24:c0:16:71:9e:82:de:
                    87:7d:8c:84:43:66:80:2e:6d:24:8d:d4:ac:9b:c7:
                    cf:0f:56:14:49:dc:e0:c2:17:42:66:34:19:bf:ed:
                    98:73:93:a0:04:ad:61:fc:d0:cd:9c:25:4a:27:de:
                    bb:2b:70:b0:13:9b:3b:03:f6:ff:a6:af:33:0a:69:
                    a3:66:6d:e9:21:57:9d:44:0a:8e:b9:4e:94:9b:6a:
                    6d:2d:40:ec:b2:77:03:b0:6d:7f:94:56:8a:94:5f:
                    98:6a:97:4a:15:0c:8b:7c:70:af:85:3b:03:51:6a:
                    c4:e4:2c:6c:5c:35:18:d1:7f:d1:97:d0:7b:65:5c:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:84:0D:05:68:8E:72:D8:E9:6C:0B:BD:D1:92:00:81:51:C0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9caa4c-5f59-3e8d-bc15-9a79fa911c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:32:ce:a6:cb:11:ee:10:0b:40:60:95:8b:77:da:0f:f9:
         34:de:5b:59:62:ef:20:c9:a9:c1:61:b5:3b:87:4a:a6:45:69:
         c4:cf:d0:a7:b1:fa:30:a3:4a:f8:72:a5:22:38:1a:21:3a:37:
         12:f5:54:72:2c:0e:c8:9e:4d:9a:f8:ca:ae:4f:e4:0a:f4:a9:
         76:de:34:cd:20:20:31:4c:2e:16:b9:6c:57:cc:90:1b:71:95:
         f7:c3:81:be:c9:c9:bf:74:e4:89:1f:51:80:37:60:88:20:9e:
         eb:c3:96:ed:47:6a:fd:84:e0:3a:c1:f3:b2:5b:2d:f4:66:cf:
         ab:ab:69:73:1d:64:70:3b:5b:2d:66:a7:bb:a6:be:05:51:cd:
         28:04:fb:3a:5b:43:ed:98:a5:4a:a5:d4:22:32:2a:97:8d:f1:
         93:0c:e8:25:8d:8c:fc:78:04:33:52:c9:e1:17:e4:67:8c:5b:
         98:be:d2:b9:17:a1:74:42:d0:0a:35:5c:6e:ae:d3:10:dd:a1:
         54:5d:a2:c3:f8:45:26:60:f0:a5:fe:44:8e:f8:19:23:93:fc:
         e4:48:28:4b:0d:e8:5f:e3:23:d2:24:68:4b:fb:b5:e3:a9:58:
         a7:da:47:93:87:66:26:f4:a8:d6:5b:bd:b4:83:9b:05:56:c2:
         fc:b5:01:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvPKZTLf6Et539AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NmVlNWFiYzctNTg4ZC00ZDUzLTg1MTQtNmY3YmY5YWQ5OGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/A2PACLFi3RFwWnbmAUaD88a6kbeTBrRVR4
5d8oSNi6xehTdLcCcvh3LbCaI+3V0flcHuhOBaHi6xOHoCf0ulcKRzKn1j6ijxfg
xeJWuACVsXrBTxXhc205sm3+yBywk3nMJ0dan+OPQcuK/MZZAPq6L0RlCwSGVsMz
dSvi+CTAFnGegt6HfYyEQ2aALm0kjdSsm8fPD1YUSdzgwhdCZjQZv+2Yc5OgBK1h
/NDNnCVKJ967K3CwE5s7A/b/pq8zCmmjZm3pIVedRAqOuU6Um2ptLUDssncDsG1/
lFaKlF+YapdKFQyLfHCvhTsDUWrE5CxsXDUY0X/Rl9B7ZVzAJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFw6hA0FaI5y2OlsC73RkgCBUcDbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI5Y2FhNGMtNWY1OS0z
ZThkLWJjMTUtOWE3OWZhOTExYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBekMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyaMs6myxHuEAtAYJWLd9oP+TTeW1li7yDJqcFhtTuHSqZFacTP0Kex
+jCjSvhypSI4GiE6NxL1VHIsDsieTZr4yq5P5Ar0qXbeNM0gIDFMLha5bFfMkBtx
lffDgb7Jyb905IkfUYA3YIggnuvDlu1Hav2E4DrB87JbLfRmz6uraXMdZHA7Wy1m
p7umvgVRzSgE+zpbQ+2YpUql1CIyKpeN8ZMM6CWNjPx4BDNSyeEX5GeMW5i+0rkX
oXRC0Ao1XG6u0xDdoVRdosP4RSZg8KX+RI74GSOT/ORIKEsN6F/jI9IkaEv7teOp
WKfaR5OHZib0qNZbvbSDmwVWwvy1AWI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:54 2026 by rpki-client