Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa
File:                     bb315c7f-790d-3247-a71a-800d1d409d51.roa (raw, json)
Hash identifier:          +LYAc4eR9sXTCQGY/xHmig/p9PaV+jmG7MAJP4LLNZQ=
Subject key identifier:   6B:0D:A5:85:E9:C1:39:B1:5E:78:7B:9D:11:6B:E2:A5:E6:D6:B6:BE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE64C94B032653C3438D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.17.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e6:4c:94:b0:32:65:3c:34:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=36fb2c24-7a69-4183-9b9b-2330371ae099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6d:d2:31:c8:12:d9:93:53:d5:82:84:51:b3:
                    7b:5f:93:79:10:58:cd:4d:bd:a9:a7:41:42:57:35:
                    0a:4d:be:6d:d6:a2:23:ac:cc:22:09:3f:5e:16:3c:
                    fd:c4:23:95:7b:03:2f:6c:a6:ea:0a:19:df:97:a9:
                    46:d6:b6:7c:93:f7:24:e6:a9:06:4d:63:4e:3e:aa:
                    2e:9e:57:00:59:95:e5:a9:2b:da:ff:1b:e1:d6:a2:
                    25:12:69:e4:0e:b6:22:84:48:eb:bd:0c:1e:b8:9b:
                    18:db:85:71:95:a0:c9:23:dd:b1:40:78:10:9f:2f:
                    29:42:d1:53:86:73:6b:42:6e:9e:08:84:1f:fa:9b:
                    44:97:26:47:ab:4c:39:48:6f:9b:59:ec:01:5d:1e:
                    58:3a:53:5e:52:e4:7b:da:ba:fb:38:c2:f6:8f:98:
                    ee:9f:a3:54:10:d8:21:5c:74:bf:81:bb:5f:99:b8:
                    9d:91:c0:37:34:60:28:d2:56:fe:98:96:80:2f:6a:
                    16:ee:ee:56:25:a2:81:02:e3:15:59:37:4a:ff:8f:
                    a8:e5:a3:c6:08:0c:ff:a9:30:38:19:39:ff:73:f7:
                    bf:5d:ed:5f:5c:dd:f2:77:4e:21:5f:3a:ab:9f:67:
                    7f:2b:5c:40:24:b8:6d:42:3c:eb:01:7c:de:e8:83:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:A5:85:E9:C1:39:B1:5E:78:7B:9D:11:6B:E2:A5:E6:D6:B6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb315c7f-790d-3247-a71a-800d1d409d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:38:20:a7:2b:b4:d9:73:71:31:66:8a:56:7d:bb:af:44:77:
         fe:f5:fe:78:ff:f0:a0:0d:4c:90:a0:65:c8:e6:d1:35:26:34:
         8a:80:28:59:fe:8a:6b:73:82:5a:a7:45:88:bf:48:65:d1:c8:
         4e:37:1e:33:c2:44:4f:9e:6d:49:5f:2f:73:5e:27:82:43:97:
         88:b1:c9:17:4f:1a:d9:e8:f8:dd:bf:69:df:32:d1:30:fa:e8:
         c8:c1:77:13:6f:1c:e0:d2:38:27:05:71:23:40:b4:1b:d5:b5:
         cd:02:e5:d5:66:71:69:44:68:6b:4f:61:69:81:3f:4d:9e:1a:
         4f:46:e2:73:db:3b:db:ff:d2:ea:f6:5f:1a:34:1e:67:5e:3f:
         6a:a0:0d:03:90:42:d8:be:92:9b:18:ef:01:c2:01:a8:8c:f4:
         fb:2c:a3:5f:ee:96:89:83:c7:63:73:bf:33:f8:40:e3:78:9a:
         95:8f:64:37:51:08:b0:39:96:c6:f1:2c:e5:ac:3d:ea:f5:d9:
         3f:78:05:7b:da:c7:01:41:c6:a4:d4:ee:0f:5e:2d:37:07:63:
         5c:7a:75:3e:b4:f3:a2:83:b2:63:3b:c2:c9:0e:f9:cd:d9:41:
         47:76:67:39:42:64:31:75:73:26:1d:52:1b:d3:ba:60:24:29:
         f7:bb:aa:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+ZMlLAyZTw0ONAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
MzZmYjJjMjQtN2E2OS00MTgzLTliOWItMjMzMDM3MWFlMDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W3SMcgS2ZNT1YKEUbN7X5N5EFjNTb2pp0FC
VzUKTb5t1qIjrMwiCT9eFjz9xCOVewMvbKbqChnfl6lG1rZ8k/ck5qkGTWNOPqou
nlcAWZXlqSva/xvh1qIlEmnkDrYihEjrvQweuJsY24VxlaDJI92xQHgQny8pQtFT
hnNrQm6eCIQf+ptElyZHq0w5SG+bWewBXR5YOlNeUuR72rr7OML2j5jun6NUENgh
XHS/gbtfmbidkcA3NGAo0lb+mJaAL2oW7u5WJaKBAuMVWTdK/4+o5aPGCAz/qTA4
GTn/c/e/Xe1fXN3yd04hXzqrn2d/K1xAJLhtQjzrAXze6IM4gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsNpYXpwTmxXnh7nRFr4qXm1ra+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmIzMTVjN2YtNzkwZC0z
MjQ3LWE3MWEtODAwZDFkNDA5ZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFU4IKcrtNlzcTFmilZ9u69Ed/71/nj/8KANTJCgZcjm0TUmNIqAKFn+
imtzglqnRYi/SGXRyE43HjPCRE+ebUlfL3NeJ4JDl4ixyRdPGtno+N2/ad8y0TD6
6MjBdxNvHODSOCcFcSNAtBvVtc0C5dVmcWlEaGtPYWmBP02eGk9G4nPbO9v/0ur2
Xxo0HmdeP2qgDQOQQti+kpsY7wHCAaiM9Psso1/ulomDx2NzvzP4QON4mpWPZDdR
CLA5lsbxLOWsPer12T94BXvaxwFBxqTU7g9eLTcHY1x6dT6086KDsmM7wskO+c3Z
QUd2ZzlCZDF1cyYdUhvTumAkKfe7qgk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:21 2026 by rpki-client