Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa
File:                     ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa (raw, json)
Hash identifier:          T/3mfKEFhk8kf5nEilPkMUiFxY/vCwXT6kD6SkDznzY=
Subject key identifier:   70:C9:BA:51:DF:EF:C8:32:54:76:C7:2D:EB:EB:7F:1A:A5:48:77:A2
Certificate issuer:       /CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8
Certificate serial:       010D0C9F4328584E9D4A71EC7A22951FA5551FE0
Authority key identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     23465
IP address blocks:        104.255.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:71:ec:7a:22:95:1f:a5:55:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=2dd3d0d4-183b-44f4-bfee-cd78d796fca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:36:a7:06:05:d4:4c:f5:b5:88:1f:05:29:17:
                    0d:92:dc:b9:27:c1:4c:fe:ec:a4:06:ef:86:49:26:
                    16:d2:3e:ad:5d:72:93:5c:b2:bc:6c:49:fd:2f:65:
                    c3:eb:b3:0b:b6:cf:b0:45:a4:3d:7f:33:4b:17:e2:
                    d5:a2:78:43:ed:80:6c:f4:c8:1a:ab:17:5e:b6:35:
                    83:65:d9:08:88:d1:6b:c1:f2:39:44:ff:54:f2:d1:
                    71:78:ba:10:40:d7:7f:eb:59:0a:91:7c:04:b1:a9:
                    3b:51:ab:77:1a:4a:c8:23:52:9d:b8:f4:6a:39:46:
                    7b:2b:0e:d6:60:49:aa:fd:98:22:ed:da:0e:58:10:
                    ed:a7:24:88:ba:82:a1:ca:31:ef:a1:64:79:a7:13:
                    a0:29:bd:c6:3c:97:a2:d8:2b:95:e9:4b:e2:56:da:
                    e3:5d:91:01:4a:6d:7a:a5:e9:9d:77:b9:5a:98:e5:
                    9c:08:be:eb:00:33:bc:4f:a9:6d:9f:c2:7f:6f:17:
                    7b:d9:a8:e4:85:52:35:56:49:d6:8a:02:dc:04:0d:
                    69:ba:01:f5:79:c2:d8:0a:66:d5:97:a3:ec:7f:3c:
                    3a:5e:b4:c2:e7:50:fe:ea:c7:b4:da:57:73:07:b4:
                    57:14:f9:01:32:2a:6b:fc:f2:74:3c:64:43:04:b2:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:BA:51:DF:EF:C8:32:54:76:C7:2D:EB:EB:7F:1A:A5:48:77:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl

            X509v3 Authority Key Identifier:
                keyid:42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:97:b1:fe:19:da:1c:f4:96:65:9c:af:7d:91:a0:e2:bd:
         99:8c:ed:fb:a2:7b:da:42:fd:e9:f6:e8:63:3c:57:af:ae:5a:
         07:59:c9:2f:f2:57:71:50:69:0b:ac:f2:de:68:81:d1:96:06:
         3c:1c:c8:86:4c:2e:18:ff:4c:9e:72:09:73:a5:d6:28:bf:39:
         4f:bd:aa:d7:b9:25:58:e0:41:14:b6:21:58:4d:7b:9e:fc:e2:
         90:73:3f:19:4c:0e:79:fe:8c:44:65:ea:ff:58:c2:df:c4:a8:
         36:10:44:4f:cd:44:07:f0:cb:0f:ba:37:00:64:cd:df:56:6c:
         f8:07:7e:e6:ce:89:de:a5:54:c8:5f:3c:bc:38:a8:15:42:f5:
         65:1e:bd:2d:50:7f:4a:c2:ff:1a:8e:b4:2d:7f:66:4a:cb:e5:
         3d:50:c2:27:67:7a:8d:d1:0b:f2:5e:b4:89:04:d7:2e:54:2e:
         ae:d2:a5:0e:60:08:70:35:7b:74:59:57:d3:ab:b2:b0:47:b6:
         79:0b:2b:c4:a1:ea:28:13:11:1d:ff:08:12:74:02:5f:47:47:
         1d:f4:7b:63:60:e3:d2:c7:7a:41:7d:97:52:55:ff:b7:f7:d5:
         38:49:e2:2b:37:b0:d2:ed:d1:77:9a:7a:74:89:b4:c3:02:1e:
         4c:a9:2f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnHseiKVH6VVH+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0N2Y1N2MtYmE1Zi00ZDk2LWJhYTMtYzRhNGRlMzlk
NWE4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MmRkM2QwZDQtMTgzYi00NGY0LWJmZWUtY2Q3OGQ3OTZmY2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzanBgXUTPW1iB8FKRcNkty5J8FM/uykBu+G
SSYW0j6tXXKTXLK8bEn9L2XD67MLts+wRaQ9fzNLF+LVonhD7YBs9MgaqxdetjWD
ZdkIiNFrwfI5RP9U8tFxeLoQQNd/61kKkXwEsak7Uat3GkrII1KduPRqOUZ7Kw7W
YEmq/Zgi7doOWBDtpySIuoKhyjHvoWR5pxOgKb3GPJei2CuV6UviVtrjXZEBSm16
pemdd7lamOWcCL7rADO8T6ltn8J/bxd72ajkhVI1VknWigLcBA1pugH1ecLYCmbV
l6Psfzw6XrTC51D+6se02ldzB7RXFPkBMipr/PJ0PGRDBLJkFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDJulHf78gyVHbHLevrfxqlSHeiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3
ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUzOWQ1YTgvZWJmYzBmYjItMDBhYi0z
NjY4LWFiNmItZGFhZmQxNDE1MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODg0N2Y1N2MtYmE1Zi00ZDk2LWJh
YTMtYzRhNGRlMzlkNWE4Lzg4NDdmNTdjLWJhNWYtNGQ5Ni1iYWEzLWM0YTRkZTM5
ZDVhOC5jcmwwHwYDVR0jBBgwFoAUQmc4R4K5RcCjOC3EPsc40zXZrNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0
ZGUzOWQ1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKrl7H+Gdoc9JZlnK99kaDivZmM7fuie9pC/en26GM8V6+uWgdZyS/y
V3FQaQus8t5ogdGWBjwcyIZMLhj/TJ5yCXOl1ii/OU+9qte5JVjgQRS2IVhNe578
4pBzPxlMDnn+jERl6v9Ywt/EqDYQRE/NRAfwyw+6NwBkzd9WbPgHfubOid6lVMhf
PLw4qBVC9WUevS1Qf0rC/xqOtC1/ZkrL5T1Qwidneo3RC/JetIkE1y5ULq7SpQ5g
CHA1e3RZV9OrsrBHtnkLK8Sh6igTER3/CBJ0Al9HRx30e2Ng49LHekF9l1JV/7f3
1ThJ4is3sNLt0XeaenSJtMMCHkypL4E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:36 2026 by rpki-client