Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa
File:                     bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa (raw, json)
Hash identifier:          9YPn6tEhlaik7bRTSwJF3EuCEWKrj5g2jf/mAOlYAv0=
Subject key identifier:   FB:B6:3B:F2:14:10:97:0A:FB:4E:FB:35:19:20:02:C2:CB:92:52:BD
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F4328584E210EFBBCD2CA996D6D033A00
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fb:bc:d2:ca:99:6d:6d:03:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=5eb65230-fde1-4b17-96d7-ba0ca1d09b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:82:45:73:fb:1e:37:16:46:55:ea:3c:69:
                    b0:e8:35:16:66:61:18:e6:7c:45:86:06:50:d1:d4:
                    7a:ed:72:1f:fb:83:57:b3:d5:15:d7:8e:11:07:ff:
                    32:ab:80:d2:3f:a2:e1:8c:69:04:99:81:91:df:6e:
                    c4:c0:7d:d4:42:d6:a7:6e:c0:84:05:2c:e0:67:96:
                    74:f9:06:c5:88:97:dc:10:10:e5:ce:44:4d:43:2f:
                    f1:ce:21:14:9d:db:24:b1:bf:9d:16:03:f2:93:9e:
                    7b:32:b7:ee:da:4c:ed:fe:d9:2f:c6:a1:e8:22:da:
                    8a:6e:f6:fc:a0:19:a0:cc:4a:92:d9:91:66:5d:70:
                    b2:cf:ac:22:36:ae:ae:37:92:b7:40:3c:f5:e2:40:
                    bc:c5:db:08:80:df:10:1d:cb:42:57:8b:7a:12:a2:
                    40:be:8a:a8:4a:eb:a9:b6:9f:2e:13:5f:05:e2:0c:
                    7d:c0:fe:4b:94:74:74:94:e9:07:fa:91:a6:71:00:
                    d4:d4:94:85:cf:18:34:b4:9a:82:bd:1a:40:cb:40:
                    8a:32:9f:9c:d4:a6:2f:cb:9e:e5:80:0c:95:ed:0b:
                    d7:60:74:49:c0:ad:e7:9e:95:17:a0:76:46:ec:4d:
                    b7:58:b2:14:85:a6:6f:e4:3c:7a:a5:58:6d:44:51:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:3B:F2:14:10:97:0A:FB:4E:FB:35:19:20:02:C2:CB:92:52:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:57:e0:c9:6d:44:77:a3:ae:01:50:f3:87:21:23:9f:47:
         13:f8:38:c0:3e:e0:b5:80:f6:bb:34:f9:5b:ef:ae:12:c4:e2:
         3d:e8:e6:3a:b8:39:d6:8c:7b:73:fd:7f:94:05:d8:03:56:e8:
         b5:36:df:09:b2:d1:19:a2:25:ac:d8:a8:dd:d5:f8:d6:f4:90:
         79:75:65:1f:c9:85:e0:d6:b3:aa:a4:a2:ad:9d:2a:bc:2b:53:
         93:4f:44:5f:5d:af:22:e9:50:b8:de:45:d5:f8:1d:fa:57:7a:
         58:c4:32:9d:cb:f5:19:4d:5c:fa:ce:99:3f:50:c3:93:bc:0b:
         d5:18:45:99:f8:9c:53:b4:a9:8b:ca:f5:82:2a:54:fe:6f:e6:
         96:19:3e:b7:20:e8:93:df:70:37:95:b2:8f:b5:83:4f:b6:d8:
         4b:23:36:2a:42:c3:0c:fe:82:e5:dd:9c:3e:08:00:b2:de:00:
         37:ce:5e:3a:33:b1:73:6b:2e:8f:0f:af:50:cc:02:4f:f1:bf:
         fb:30:b9:e9:09:9f:26:b7:c1:8e:ff:51:2c:e5:be:57:61:15:
         06:4d:13:65:90:7e:a8:9e:bc:67:76:ca:a0:dc:14:90:00:88:
         e5:0b:d7:17:56:f7:fe:98:0a:fc:be:fe:f7:c4:d0:04:06:b7:
         3f:86:26:25
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4hDvu80sqZbW0DOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI4MjA0ZWItOGNlNS00ZDlhLWIzODMtYjQ0MzNlODA3
NWEwMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
NWViNjUyMzAtZmRlMS00YjE3LTk2ZDctYmEwY2ExZDA5YjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3CCRXP7HjcWRlXqPGmw6DUWZmEY5nxFhgZQ
0dR67XIf+4NXs9UV144RB/8yq4DSP6LhjGkEmYGR327EwH3UQtanbsCEBSzgZ5Z0
+QbFiJfcEBDlzkRNQy/xziEUndsksb+dFgPyk557Mrfu2kzt/tkvxqHoItqKbvb8
oBmgzEqS2ZFmXXCyz6wiNq6uN5K3QDz14kC8xdsIgN8QHctCV4t6EqJAvoqoSuup
tp8uE18F4gx9wP5LlHR0lOkH+pGmcQDU1JSFzxg0tJqCvRpAy0CKMp+c1KYvy57l
gAyV7QvXYHRJwK3nnpUXoHZG7E23WLIUhaZv5Dx6pVhtRFFX4QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFPu2O/IUEJcK+077NRkgAsLLklK9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjgy
MDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4MDc1YTAvYmI5OTNhZTMtMGU2YS0z
YTZkLWFjYTUtNjllZGQyMmNmN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWI4MjA0ZWItOGNlNS00ZDlhLWIz
ODMtYjQ0MzNlODA3NWEwL2ViODIwNGViLThjZTUtNGQ5YS1iMzgzLWI0NDMzZTgw
NzVhMC5jcmwwHwYDVR0jBBgwFoAULGFgsj4J6JefPCz1sTmrvBGlOE8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lYjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQz
M2U4MDc1YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDaCTQMA4E
AgACMAgDBgAmIAEvcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS+VfgyW1Ed6OuAVDzhyEjn0cT+DjAPuC1
gPa7NPlb764SxOI96OY6uDnWjHtz/X+UBdgDVui1Nt8JstEZoiWs2Kjd1fjW9JB5
dWUfyYXg1rOqpKKtnSq8K1OTT0RfXa8i6VC43kXV+B36V3pYxDKdy/UZTVz6zpk/
UMOTvAvVGEWZ+JxTtKmLyvWCKlT+b+aWGT63IOiT33A3lbKPtYNPtthLIzYqQsMM
/oLl3Zw+CACy3gA3zl46M7Fzay6PD69QzAJP8b/7MLnpCZ8mt8GO/1Es5b5XYRUG
TRNlkH6onrxndsqg3BSQAIjlC9cXVvf+mAr8vv73xNAEBrc/hiYl
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:36 2026 by rpki-client