Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa
File:                     f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa (raw, json)
Hash identifier:          lmj0oLgvshDxD3XuF0sKSVeVragZ2JwcOIUUn37AEIQ=
Subject key identifier:   46:61:E0:DB:E2:0E:8B:45:36:0A:EF:D0:02:9D:D6:41:6B:32:EA:BF
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E0005D31E91FB9468C8CE6740
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     398993
IP address blocks:        104.233.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d3:1e:91:fb:94:68:c8:ce:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5e49d89a-13bd-4bba-a848-2246de508602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:c3:57:ab:96:c8:7b:5d:76:c6:52:6a:bf:
                    64:41:e9:94:ed:8a:be:82:48:14:df:32:37:33:5e:
                    8b:7d:24:a5:ef:00:a7:ff:c1:58:1e:dc:cf:2e:ba:
                    75:28:2b:0a:a2:b6:7b:f2:21:e3:e8:3a:66:a8:98:
                    75:6a:79:be:10:01:f5:e4:86:99:6a:a1:87:a8:44:
                    bf:8b:b6:c3:83:9b:79:19:0a:8b:4a:30:87:ff:ae:
                    5f:89:99:03:b4:cb:f9:46:00:2d:af:dc:95:df:d3:
                    b8:17:2a:3b:f7:57:44:86:6b:4c:0e:20:18:bb:b4:
                    39:53:ab:6b:15:11:63:57:48:76:46:e5:b9:ea:21:
                    e9:aa:47:81:32:51:58:22:28:2a:05:b4:30:e5:46:
                    d0:dd:42:3e:d9:82:14:c2:12:06:35:fa:b2:bb:8e:
                    57:36:0d:e8:18:b1:fa:06:62:99:a2:66:58:41:e2:
                    b3:06:7d:89:12:46:0e:ab:ef:44:4c:f5:db:88:b5:
                    ff:e0:04:21:e4:28:f3:89:17:4b:17:dd:23:e2:81:
                    97:57:95:67:d8:c0:ff:d5:43:0d:e0:e7:d5:94:58:
                    bc:1d:df:56:e2:ef:93:f2:4e:e9:99:13:83:6e:4f:
                    5d:bc:b4:a7:64:dd:25:66:cd:eb:5f:92:66:d8:46:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:E0:DB:E2:0E:8B:45:36:0A:EF:D0:02:9D:D6:41:6B:32:EA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:9f:dd:9c:2d:9f:15:95:b8:2b:0f:83:2c:0e:c3:b9:4f:
         70:3f:bc:25:9e:a9:5c:89:02:82:42:58:91:4a:29:68:19:8b:
         0d:5c:f4:54:3b:ed:61:b6:a3:9b:8f:10:a6:19:a9:91:66:df:
         62:d8:25:57:29:0b:e2:14:c7:32:55:b2:aa:b9:19:97:ef:ff:
         d4:91:d0:ee:07:c7:bb:96:96:e2:d0:ea:60:83:e6:ec:e2:03:
         66:8a:24:2c:a6:2e:71:bf:9a:c2:9d:a8:13:54:4c:f3:29:1b:
         07:cd:c2:0f:df:f2:11:80:d3:ca:e6:79:ae:3e:e1:46:bf:cc:
         23:bf:06:8b:a3:32:89:11:5b:54:ff:81:05:29:22:ae:e7:24:
         a4:d6:7f:e0:93:9c:35:45:7e:7e:83:b0:be:8f:80:39:c3:f3:
         1a:2f:d8:40:77:27:ad:a2:72:ad:dd:d7:53:40:37:f3:1d:b9:
         e7:04:d8:9a:7b:1b:8b:31:15:77:c6:f5:8d:5d:52:36:4e:d4:
         9d:b1:4f:79:20:6f:7a:33:93:f4:64:bc:54:3c:a1:21:6f:f7:
         18:c5:f5:c2:9e:d1:bb:f4:fe:e7:4d:a8:54:07:eb:d5:74:b1:
         12:c1:9b:5b:d9:98:a9:c9:56:17:e9:ec:cb:e2:59:dd:85:2f:
         28:7b:cc:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABdMekfuUaMjOZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NWU0OWQ4OWEtMTNiZC00YmJhLWE4NDgtMjI0NmRlNTA4NjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYXDV6uWyHtddsZSar9kQemU7Yq+gkgU3zI3
M16LfSSl7wCn/8FYHtzPLrp1KCsKorZ78iHj6DpmqJh1anm+EAH15IaZaqGHqES/
i7bDg5t5GQqLSjCH/65fiZkDtMv5RgAtr9yV39O4Fyo791dEhmtMDiAYu7Q5U6tr
FRFjV0h2RuW56iHpqkeBMlFYIigqBbQw5UbQ3UI+2YIUwhIGNfqyu45XNg3oGLH6
BmKZomZYQeKzBn2JEkYOq+9ETPXbiLX/4AQh5CjziRdLF90j4oGXV5Vn2MD/1UMN
4OfVlFi8Hd9W4u+T8k7pmRODbk9dvLSnZN0lZs3rX5Jm2Ea3WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZh4NviDotFNgrv0AKd1kFrMuq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZjEzM2Q2MTktMGFlNS0z
MTJhLThkMmYtZjBjMWJlZjE1ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxXn92cLZ8VlbgrD4MsDsO5T3A/vCWeqVyJAoJCWJFKKWgZiw1c9FQ7
7WG2o5uPEKYZqZFm32LYJVcpC+IUxzJVsqq5GZfv/9SR0O4Hx7uWluLQ6mCD5uzi
A2aKJCymLnG/msKdqBNUTPMpGwfNwg/f8hGA08rmea4+4Ua/zCO/BoujMokRW1T/
gQUpIq7nJKTWf+CTnDVFfn6DsL6PgDnD8xov2EB3J62icq3d11NAN/MduecE2Jp7
G4sxFXfG9Y1dUjZO1J2xT3kgb3ozk/RkvFQ8oSFv9xjF9cKe0bv0/udNqFQH69V0
sRLBm1vZmKnJVhfp7MviWd2FLyh7zC0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:31:05 2026 by rpki-client