Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          oD5AQRznj5ljOoElP3tBPBIkbMKPWOoDya7EKnas5s0=
Subject key identifier:   67:A8:99:5E:B3:3E:67:1F:8B:E7:80:6B:DC:4D:9E:35:EB:C0:42:C8
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584D703FD27B398122C94EC83680
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d2:7b:39:81:22:c9:4e:c8:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=d21b8984-7fd9-43d5-8f5e-4072e0b50430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:a2:42:2b:7e:58:df:52:b2:fa:de:99:c9:
                    b8:17:66:19:c1:76:d3:17:1a:a5:0b:94:a6:59:18:
                    30:85:fa:4d:a5:82:53:6e:c4:fb:2c:d4:0f:f7:c8:
                    c0:11:70:22:74:e6:af:14:19:7d:d7:36:f4:e9:e9:
                    46:92:e7:37:2b:97:92:47:27:bf:c8:99:20:15:22:
                    bc:e5:d0:b8:32:41:eb:1f:61:32:ff:6a:e4:1f:33:
                    b9:41:9a:06:c4:92:fe:f7:df:dc:66:cb:85:91:b2:
                    14:bf:d2:20:13:05:bd:94:35:22:d6:db:69:4b:68:
                    46:49:d4:c8:cc:9d:e7:06:8a:fc:71:50:01:35:9c:
                    fb:2d:24:8b:6b:60:ae:e5:dd:74:9c:98:28:d2:d5:
                    f9:08:57:9f:9a:d8:9c:db:75:c0:25:6e:a5:c0:81:
                    db:b8:1b:47:90:ca:9e:76:d0:9d:f1:f3:0b:c9:b7:
                    f4:c4:2e:09:22:ec:41:90:19:c9:0e:7c:a8:41:fc:
                    7b:d0:a8:95:68:ac:32:6b:6e:55:84:15:56:20:6e:
                    24:b0:8a:39:41:1a:f7:54:92:c0:b6:fa:b5:f4:c0:
                    29:6a:9d:a8:cd:81:6f:20:ec:2f:c8:a9:f9:da:ca:
                    5a:3e:ee:e4:f0:66:c8:fc:e0:48:87:0e:ac:ed:f9:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A8:99:5E:B3:3E:67:1F:8B:E7:80:6B:DC:4D:9E:35:EB:C0:42:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:34:1a:35:9d:46:0a:94:4a:15:52:b8:8e:59:a4:63:2a:c8:
         76:20:4e:90:4b:ec:3d:da:ec:f2:39:46:bb:7d:51:ee:54:3e:
         92:7b:0e:76:c2:3c:cf:fa:8e:28:4c:78:23:8b:6d:5d:e6:ff:
         f4:93:45:2a:4c:5b:64:ef:05:fa:2e:63:af:38:19:9e:39:b3:
         fd:4a:42:72:30:fa:69:54:2a:79:c4:fd:31:eb:1e:07:e8:15:
         c5:f2:10:05:7e:4e:d5:96:ab:d1:09:db:ba:3d:0e:16:59:9f:
         9a:00:ec:f4:88:8c:ff:f7:97:ee:8c:ec:8e:58:f6:cd:9d:c5:
         91:73:71:3d:c2:79:b8:76:ac:04:f9:9b:68:11:3b:9e:fa:9b:
         73:8e:48:30:8a:70:a6:09:6f:1f:4a:89:5d:74:f4:6e:10:74:
         f1:38:82:43:1f:4b:e0:ff:4f:0f:91:bb:08:1a:f3:b6:61:84:
         c0:cb:e6:cf:40:86:3c:63:48:10:da:06:02:75:ee:8f:a6:a6:
         67:c6:37:64:09:b2:bb:ad:6b:f4:a0:a4:be:f1:cc:98:bd:a5:
         2f:7d:cd:2f:10:60:8c:7c:32:ba:a1:8e:1c:74:58:ab:44:ed:
         e2:06:94:5e:1b:4e:93:62:f9:bb:df:97:18:bf:9f:b6:f8:43:
         24:b9:1a:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9J7OYEiyU7INoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh
Njg4MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDIxYjg5ODQtN2ZkOS00M2Q1LThmNWUtNDA3MmUwYjUwNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM+iQit+WN9Ssvremcm4F2YZwXbTFxqlC5Sm
WRgwhfpNpYJTbsT7LNQP98jAEXAidOavFBl91zb06elGkuc3K5eSRye/yJkgFSK8
5dC4MkHrH2Ey/2rkHzO5QZoGxJL+99/cZsuFkbIUv9IgEwW9lDUi1ttpS2hGSdTI
zJ3nBor8cVABNZz7LSSLa2Cu5d10nJgo0tX5CFefmtic23XAJW6lwIHbuBtHkMqe
dtCd8fMLybf0xC4JIuxBkBnJDnyoQfx70KiVaKwya25VhBVWIG4ksIo5QRr3VJLA
tvq19MApap2ozYFvIOwvyKn52spaPu7k8GbI/OBIhw6s7fnFIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeomV6zPmcfi+eAa9xNnjXrwELIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw
YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvODQzNDM3MDQtYzkzZi0z
MWJiLWFlMmYtNGU4OGYzZTc2MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5
MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh
YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4
YjA5YWE2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFc0GjWdRgqUShVSuI5ZpGMqyHYgTpBL7D3a7PI5Rrt9Ue5UPpJ7DnbC
PM/6jihMeCOLbV3m//STRSpMW2TvBfouY684GZ45s/1KQnIw+mlUKnnE/THrHgfo
FcXyEAV+TtWWq9EJ27o9DhZZn5oA7PSIjP/3l+6M7I5Y9s2dxZFzcT3Cebh2rAT5
m2gRO576m3OOSDCKcKYJbx9KiV109G4QdPE4gkMfS+D/Tw+Ruwga87ZhhMDL5s9A
hjxjSBDaBgJ17o+mpmfGN2QJsruta/SgpL7xzJi9pS99zS8QYIx8Mrqhjhx0WKtE
7eIGlF4bTpNi+bvflxi/n7b4QyS5Gso=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:46:25 2026 by rpki-client