Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa
File:                     09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa (raw, json)
Hash identifier:          lOvogmTjsjXUcx1Ny6OTEW+YoQtt/cjJTrb6BnJ0c1g=
Subject key identifier:   76:C2:8D:78:27:2B:EC:44:48:8E:78:B4:94:BA:0F:B2:6B:BB:AD:89
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584E00061018EA01EBD4E99C0A80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        104.237.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:10:18:ea:01:eb:d4:e9:9c:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d70ade6b-7099-4014-b106-8bd7c30d517f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:c2:0d:d0:40:b7:72:94:fc:f7:3e:24:47:
                    da:7b:f9:05:02:24:de:0a:91:9b:06:31:14:74:34:
                    47:43:3c:7c:77:91:de:d5:1c:cf:c0:ca:67:e8:0f:
                    0e:10:65:e7:5d:c9:4e:27:93:a8:75:de:84:3c:fa:
                    9e:51:91:a5:de:49:f3:71:6e:72:55:15:d1:f7:e3:
                    8f:f4:29:7a:c1:c1:f3:03:e1:f8:3f:15:90:1f:92:
                    53:fc:21:1c:76:3b:17:f0:de:bf:e1:f8:83:d7:52:
                    e1:67:32:cc:6c:20:53:d4:fa:e1:31:41:34:76:44:
                    60:6d:e1:9a:71:cc:50:e9:37:08:48:38:e8:12:a6:
                    e1:ec:75:75:09:58:1a:5f:46:cc:ea:fc:09:4d:73:
                    1f:37:02:01:44:94:93:be:1e:68:f3:d9:ac:dc:cf:
                    60:b0:23:0c:9c:7d:83:88:5f:fd:68:f9:b9:1e:c1:
                    e8:34:30:4d:c7:84:3b:4c:d3:9d:78:ec:e4:f6:3d:
                    04:2f:a2:b5:37:fb:a0:b9:52:f6:4c:df:2b:e3:49:
                    36:43:2f:d7:80:a1:04:7e:9f:5f:60:7e:4e:57:86:
                    18:7d:8b:53:25:72:54:b8:27:71:1b:02:43:29:9d:
                    e0:25:63:f3:ac:00:bd:96:07:fc:c7:c8:5c:b5:53:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C2:8D:78:27:2B:EC:44:48:8E:78:B4:94:BA:0F:B2:6B:BB:AD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:f6:55:d9:b6:c0:7b:bb:6c:9f:04:9a:de:20:cb:ae:ef:
         54:f3:fd:df:4f:79:ca:da:8d:51:aa:87:30:86:6a:81:a5:97:
         f9:00:8e:78:39:8d:6b:23:0d:41:10:72:c2:8d:6c:fd:3e:79:
         15:b5:6e:07:a2:17:0a:55:ae:97:c9:ef:8d:a3:92:af:ab:b4:
         c5:50:f4:e2:66:a8:1a:90:e1:72:60:97:f1:ad:34:9e:7b:24:
         f6:bb:ba:76:88:8a:31:b8:94:d5:e5:b4:38:4b:26:cd:61:24:
         19:0f:10:95:a0:69:73:f5:1f:85:29:77:12:07:ff:cb:10:5f:
         43:52:6d:e8:54:2c:f9:e0:4c:96:34:1d:2b:d6:51:6c:3e:0c:
         e7:e4:e4:e8:99:7e:43:b5:e7:59:7b:dd:12:b8:29:17:e3:af:
         fd:54:7c:f2:09:22:26:c5:8c:b7:ff:a0:c7:88:7f:e2:ef:ee:
         9c:87:2e:c2:60:67:ed:1d:b6:86:9a:7b:b3:d2:c8:be:90:9d:
         ae:d1:51:ec:89:65:e8:f8:04:a3:6b:d7:24:93:42:d2:8e:2c:
         8a:ef:d8:54:5e:ab:f2:ea:79:d9:12:9f:25:09:c4:e4:07:bb:
         19:e8:d6:71:30:d3:cc:6c:68:75:90:79:c7:a9:c8:14:21:75:
         55:98:05:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhAY6gHr1OmcCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZDcwYWRlNmItNzA5OS00MDE0LWIxMDYtOGJkN2MzMGQ1MTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbTCDdBAt3KU/Pc+JEfae/kFAiTeCpGbBjEU
dDRHQzx8d5He1RzPwMpn6A8OEGXnXclOJ5Oodd6EPPqeUZGl3knzcW5yVRXR9+OP
9Cl6wcHzA+H4PxWQH5JT/CEcdjsX8N6/4fiD11LhZzLMbCBT1PrhMUE0dkRgbeGa
ccxQ6TcISDjoEqbh7HV1CVgaX0bM6vwJTXMfNwIBRJSTvh5o89ms3M9gsCMMnH2D
iF/9aPm5HsHoNDBNx4Q7TNOdeOzk9j0EL6K1N/uguVL2TN8r40k2Qy/XgKEEfp9f
YH5OV4YYfYtTJXJUuCdxGwJDKZ3gJWPzrAC9lgf8x8hctVOqBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbCjXgnK+xESI54tJS6D7Jru62JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMDliM2VjZjItOTBkOC0z
YjlhLWIxYmMtZDljMWExMzJiYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoF9lXZtsB7u2yfBJreIMuu71Tz/d9PecrajVGqhzCGaoGll/kAjng5
jWsjDUEQcsKNbP0+eRW1bgeiFwpVrpfJ742jkq+rtMVQ9OJmqBqQ4XJgl/GtNJ57
JPa7unaIijG4lNXltDhLJs1hJBkPEJWgaXP1H4UpdxIH/8sQX0NSbehULPngTJY0
HSvWUWw+DOfk5OiZfkO151l73RK4KRfjr/1UfPIJIibFjLf/oMeIf+Lv7pyHLsJg
Z+0dtoaae7PSyL6Qna7RUeyJZej4BKNr1ySTQtKOLIrv2FReq/LqedkSnyUJxOQH
uxno1nEw08xsaHWQecepyBQhdVWYBZk=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:06 2026 by rpki-client