Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1a498c2-fd4b-3045-8d61-ddced06be464.roa
File:                     b1a498c2-fd4b-3045-8d61-ddced06be464.roa (raw, json)
Hash identifier:          l1fVjT/v7TNUWZWGSIXNlyqlM6Z6K/Lvh31pknMX8MY=
Subject key identifier:   CC:5C:4C:0F:6F:CF:6C:02:59:EA:DF:4F:0A:F5:D2:EB:1D:E4:74:1B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0005FC968FA0FB0CEFA56900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1a498c2-fd4b-3045-8d61-ddced06be464.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        104.196.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fc:96:8f:a0:fb:0c:ef:a5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d9823eef-977e-4e83-b8ee-0c3db47f0f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:a7:e9:be:13:88:e1:04:cf:c5:a2:58:81:
                    5f:65:36:07:2b:df:e2:d3:47:53:1e:01:02:93:cd:
                    8b:a4:6b:40:08:77:38:a2:8d:85:02:c3:06:bd:21:
                    50:df:53:aa:24:76:6f:f4:82:d0:95:16:31:c7:c3:
                    eb:e6:ef:60:ec:17:2a:5d:b2:fa:7a:2d:b2:21:ea:
                    6c:2d:f4:00:f7:e1:e2:6f:e7:aa:83:f1:46:ce:08:
                    53:8e:63:6c:2c:3b:23:c0:d4:7d:0d:f4:87:37:a8:
                    b6:c7:f1:01:62:bb:00:74:4c:94:88:0a:fb:b6:60:
                    14:eb:61:de:23:68:5f:50:8f:cc:44:c6:11:09:4e:
                    ab:96:3b:80:b2:ac:c2:d2:e5:50:01:27:61:ac:f9:
                    91:79:83:34:a7:a6:7a:d2:ac:fa:b6:e3:89:eb:d3:
                    9e:f2:86:d3:24:13:ab:82:6f:37:5e:95:05:44:28:
                    ab:78:ee:09:9c:da:4e:de:34:47:4e:57:32:79:68:
                    c4:9e:bb:d4:85:cd:1d:cf:5e:6c:22:da:0f:35:de:
                    40:ec:ed:da:c9:f5:88:2e:62:48:e0:ac:6b:cc:cf:
                    3d:0a:a0:c1:fb:6c:99:18:61:2b:21:70:98:7d:54:
                    b8:9e:0c:ae:90:7e:4a:a2:61:16:c7:74:ef:61:1f:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5C:4C:0F:6F:CF:6C:02:59:EA:DF:4F:0A:F5:D2:EB:1D:E4:74:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1a498c2-fd4b-3045-8d61-ddced06be464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:47:3c:58:30:6e:76:79:c7:3f:6b:bd:a0:a1:72:56:80:f3:
         a7:94:2c:03:cb:6a:75:4c:41:be:02:6a:09:ee:8c:87:fe:71:
         5b:3b:ad:18:31:7e:a4:85:83:00:8c:b0:59:28:10:42:ce:53:
         7f:4d:2d:cb:b1:35:70:e6:20:af:5c:57:0b:38:c7:83:75:da:
         6e:0f:92:1b:af:2d:c0:23:ea:dd:6e:34:06:66:9e:2c:d2:80:
         01:78:e3:d7:08:de:15:8e:42:9e:0c:67:2c:e2:17:ca:5f:20:
         d9:82:fa:51:ef:44:73:18:7b:e6:63:20:2e:89:b1:26:6d:70:
         c3:3c:b2:59:3f:91:29:66:a3:93:4d:15:0c:40:49:96:46:36:
         3b:0d:91:06:15:dd:79:01:26:84:b9:f2:ed:bf:fa:ab:b3:c8:
         ed:c4:d1:e7:e2:bc:a6:5f:a4:3f:81:8d:ea:bb:fb:61:ba:30:
         53:87:cf:41:8d:c0:a1:3c:ab:24:33:42:7d:7b:8e:a8:8d:e0:
         6d:37:cc:5c:f9:7d:ee:c9:70:f0:c1:f5:3c:b2:ec:16:67:68:
         c0:b9:49:ef:ee:71:a1:e9:01:f0:fc:9b:e5:d7:89:a5:8a:0d:
         19:5d:5d:ba:83:86:79:a4:35:fd:c2:1f:f7:f3:a1:69:45:85:
         ca:ac:14:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfyWj6D7DO+laQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZDk4MjNlZWYtOTc3ZS00ZTgzLWI4ZWUtMGMzZGI0N2YwZjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHan6b4TiOEEz8WiWIFfZTYHK9/i00dTHgEC
k82LpGtACHc4oo2FAsMGvSFQ31OqJHZv9ILQlRYxx8Pr5u9g7BcqXbL6ei2yIeps
LfQA9+Hib+eqg/FGzghTjmNsLDsjwNR9DfSHN6i2x/EBYrsAdEyUiAr7tmAU62He
I2hfUI/MRMYRCU6rljuAsqzC0uVQASdhrPmReYM0p6Z60qz6tuOJ69Oe8obTJBOr
gm83XpUFRCireO4JnNpO3jRHTlcyeWjEnrvUhc0dz15sItoPNd5A7O3ayfWILmJI
4KxrzM89CqDB+2yZGGErIXCYfVS4ngyukH5KomEWx3TvYR/5UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxcTA9vz2wCWerfTwr10usd5HQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjFhNDk4YzItZmQ0Yi0z
MDQ1LThkNjEtZGRjZWQwNmJlNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlHPFgwbnZ5xz9rvaChclaA86eULAPLanVMQb4CagnujIf+cVs7rRgx
fqSFgwCMsFkoEELOU39NLcuxNXDmIK9cVws4x4N12m4PkhuvLcAj6t1uNAZmnizS
gAF449cI3hWOQp4MZyziF8pfINmC+lHvRHMYe+ZjIC6JsSZtcMM8slk/kSlmo5NN
FQxASZZGNjsNkQYV3XkBJoS58u2/+quzyO3E0efivKZfpD+Bjeq7+2G6MFOHz0GN
wKE8qyQzQn17jqiN4G03zFz5fe7JcPDB9Tyy7BZnaMC5Se/ucaHpAfD8m+XXiaWK
DRldXbqDhnmkNf3CH/fzoWlFhcqsFB8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:53 2026 by rpki-client