Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa
File:                     2e685895-2bad-3c7e-addb-e7c8cab0505f.roa (raw, json)
Hash identifier:          UdvIGtuUlBFHRS/3vx/UHWiurJO9CpCdmT+6RQTgYnI=
Subject key identifier:   8B:3F:20:17:38:0D:94:06:3E:5A:37:7D:61:D7:EA:C1:39:9A:C6:F1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E18AEE831153C0626FB80BB00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397630
IP address blocks:        104.243.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e8:31:15:3c:06:26:fb:80:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=ac11f344-d6f1-4de5-8391-05929f8c7cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:d2:49:1f:fa:96:62:9f:2d:a9:1d:bc:dc:
                    29:bf:c7:54:b9:d5:fa:75:dd:42:b7:a2:da:4c:28:
                    0e:40:35:90:43:75:63:29:65:78:a5:2e:f4:29:d5:
                    96:ac:66:16:09:97:07:5d:7d:38:ee:47:de:45:6c:
                    4e:27:55:c4:37:fb:6e:cf:ad:22:b0:ed:37:a8:7b:
                    64:f7:de:f4:08:66:8a:98:a4:b9:b0:a2:de:e2:0f:
                    40:76:4f:0b:3d:5b:9b:89:e6:00:86:e0:05:30:6d:
                    70:0d:a2:d5:ef:10:9f:8d:4c:6f:2b:fb:3d:c4:1d:
                    30:67:7c:78:af:32:fc:14:6f:dd:6d:6e:8b:da:9c:
                    55:26:cc:45:fa:cc:7b:9d:97:e8:d2:40:fb:d0:89:
                    3c:89:3c:12:2d:31:57:53:dc:9a:f4:ac:a7:51:88:
                    c6:a5:78:6f:f0:ec:11:0a:d0:b1:e4:12:8d:3b:7e:
                    c8:91:3d:9a:9b:d5:99:62:bc:2f:99:5f:b6:4b:e2:
                    7a:65:8f:f5:70:e4:fd:11:96:92:90:69:a1:d4:83:
                    ca:8a:48:62:1e:7a:ae:1d:c7:fa:65:fb:97:0a:82:
                    b4:c0:1d:f2:a0:6e:0c:57:de:b3:95:7c:b0:25:83:
                    a7:8b:ac:8c:ec:0d:76:f4:0f:3d:db:17:ec:f3:93:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:20:17:38:0D:94:06:3E:5A:37:7D:61:D7:EA:C1:39:9A:C6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:2a:fb:96:11:87:18:6f:bc:36:fe:a5:dc:4e:79:22:52:
         11:99:62:39:02:b7:1e:5d:3b:3a:60:76:39:0c:f6:6d:1d:8e:
         01:f7:c9:ec:33:54:05:5c:31:5c:14:fe:bf:ae:00:e5:82:4b:
         26:10:c4:7c:20:76:43:25:63:0f:72:9b:50:75:f0:47:dc:0f:
         0f:fd:7b:29:25:d8:bc:27:e6:39:9b:b8:c9:6d:bf:d1:89:1a:
         c4:6f:7a:b3:6f:3a:4f:3e:55:2a:f4:58:dd:3d:c2:3e:05:1f:
         a7:c1:79:ca:99:fc:36:63:c8:4f:10:4c:c9:51:1b:b4:34:d0:
         30:a7:ac:b2:86:5d:84:c9:44:b9:fa:f0:9f:f3:c6:d7:46:3f:
         b2:c4:97:e9:f6:18:31:28:ba:14:5e:c7:57:47:74:21:7f:32:
         c0:9f:1c:8a:74:ea:dd:96:43:88:c2:a5:d9:23:ec:c8:59:a0:
         cc:36:34:d9:ff:c6:b9:51:85:e7:3b:f9:d7:8e:23:47:48:0d:
         98:aa:5f:aa:11:f6:4e:47:46:a8:6e:69:b1:cf:ad:89:37:ac:
         ee:b8:44:0e:ea:c0:85:03:22:dd:ae:e9:33:3d:a6:62:c2:b7:
         0b:d2:da:97:ee:8a:80:57:88:a7:2f:0c:89:73:6a:d6:79:4b:
         60:cd:d6:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrugxFTwGJvuAuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWMxMWYzNDQtZDZmMS00ZGU1LTgzOTEtMDU5MjlmOGM3Y2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPHSSR/6lmKfLakdvNwpv8dUudX6dd1Ct6La
TCgOQDWQQ3VjKWV4pS70KdWWrGYWCZcHXX047kfeRWxOJ1XEN/tuz60isO03qHtk
9970CGaKmKS5sKLe4g9Adk8LPVubieYAhuAFMG1wDaLV7xCfjUxvK/s9xB0wZ3x4
rzL8FG/dbW6L2pxVJsxF+sx7nZfo0kD70Ik8iTwSLTFXU9ya9KynUYjGpXhv8OwR
CtCx5BKNO37IkT2am9WZYrwvmV+2S+J6ZY/1cOT9EZaSkGmh1IPKikhiHnquHcf6
ZfuXCoK0wB3yoG4MV96zlXywJYOni6yM7A129A892xfs85M9CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIs/IBc4DZQGPlo3fWHX6sE5msbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmU2ODU4OTUtMmJhZC0z
YzdlLWFkZGItZTdjOGNhYjA1MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvsKvuWEYcYb7w2/qXcTnkiUhGZYjkCtx5dOzpgdjkM9m0djgH3yewz
VAVcMVwU/r+uAOWCSyYQxHwgdkMlYw9ym1B18EfcDw/9eykl2Lwn5jmbuMltv9GJ
GsRverNvOk8+VSr0WN09wj4FH6fBecqZ/DZjyE8QTMlRG7Q00DCnrLKGXYTJRLn6
8J/zxtdGP7LEl+n2GDEouhRex1dHdCF/MsCfHIp06t2WQ4jCpdkj7MhZoMw2NNn/
xrlRhec7+deOI0dIDZiqX6oR9k5HRqhuabHPrYk3rO64RA7qwIUDIt2u6TM9pmLC
twvS2pfuioBXiKcvDIlzatZ5S2DN1kA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:05 2026 by rpki-client