Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa
File:                     5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa (raw, json)
Hash identifier:          q8jaY5HpR1N281x0jb4ooOl48PdGghmyTzgy0jbOBzk=
Subject key identifier:   D2:8A:81:41:E7:46:B1:B0:2D:58:D4:47:FC:69:E8:E6:5D:C1:B5:E4
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584EA7974D330309F798E1ED9240
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63201
IP address blocks:        104.193.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:4d:33:03:09:f7:98:e1:ed:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8d7d8797-7bf1-43f3-8be1-40b513fc8d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:bf:6b:f2:36:2c:46:b4:e1:d7:41:b4:95:
                    f8:04:11:ec:b4:7d:97:42:ea:13:a6:c0:4d:65:49:
                    e2:2f:3b:f1:62:02:05:b0:ca:c6:3f:3d:9c:bf:f3:
                    43:e1:73:92:65:c6:f8:9e:47:f0:41:de:eb:02:8d:
                    47:59:53:2e:d9:79:e8:73:ab:12:cf:78:5b:de:4a:
                    cf:a5:ab:c2:d4:4e:45:86:a4:2a:cb:fa:0a:9e:0c:
                    5d:19:21:6c:4b:cd:b5:34:cb:62:8f:13:6a:ed:45:
                    e8:a3:25:a6:c2:f2:b4:0f:84:af:86:2d:73:4a:ac:
                    77:3c:a4:3d:22:1e:15:12:89:3f:36:65:1a:93:b6:
                    a5:f4:93:ab:c3:fe:a3:5f:f8:b4:02:1d:61:54:14:
                    ee:6c:89:ef:77:f2:0f:0f:6e:00:bc:3a:c1:73:5d:
                    7b:b6:c9:17:0a:5a:7f:91:55:04:1d:2f:72:34:bc:
                    cd:58:5d:7d:e0:86:b0:46:81:d0:ea:cf:16:b6:2f:
                    5d:7d:e6:39:82:75:28:56:37:e1:c2:18:63:26:03:
                    8b:14:8f:08:94:2f:c7:b5:82:cc:07:86:99:fe:07:
                    d5:f6:18:f0:e6:90:89:70:e2:c4:8e:3b:9b:0f:bc:
                    d1:75:cc:3b:d3:15:7f:b0:39:16:a6:b3:8a:d1:98:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8A:81:41:E7:46:B1:B0:2D:58:D4:47:FC:69:E8:E6:5D:C1:B5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/5b0abce2-8358-3937-a7a4-4e3cc004db1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:df:27:5d:86:4c:6a:d2:93:a7:0b:b6:ee:2f:ef:77:59:36:
         3d:62:6d:76:d6:24:18:85:92:52:cb:65:2c:d3:8f:3d:e3:6f:
         53:a0:92:eb:e4:13:8b:63:9c:61:ac:ee:58:bd:f0:d1:21:75:
         fd:cc:d1:45:25:62:54:b1:08:fc:fc:ea:66:e3:b6:34:f2:6f:
         51:3a:de:2f:ff:86:b3:4e:fa:09:c2:a5:21:e1:b7:6b:bc:59:
         27:5f:d1:e5:84:3f:67:92:93:93:14:f0:4b:32:00:56:c8:12:
         a5:ee:44:13:2d:6c:52:86:b0:16:89:15:c1:30:b7:16:ec:bb:
         d3:44:ea:c0:32:57:6e:70:12:d9:af:4e:cd:32:5c:71:a2:8a:
         69:2b:68:4d:0d:61:2b:c3:0c:10:d9:5a:1d:a6:9e:de:d4:01:
         49:ca:b8:f5:cf:38:e2:db:4f:ae:e9:a8:9f:19:01:29:5e:5d:
         9d:1e:97:02:79:b5:9e:7d:e9:8c:3a:b0:03:bc:4a:94:da:26:
         4a:7c:fb:f0:d4:c2:8c:51:03:5b:75:12:3c:a0:a3:8c:c7:4a:
         79:c7:cd:d9:42:63:dc:e0:8d:e8:58:52:11:5f:fc:16:55:c7:
         b0:21:bc:53:f6:ba:a3:59:ba:8a:95:75:29:19:c4:b4:cc:a5:
         6e:6d:34:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl00zAwn3mOHtkkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez
ODYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGQ3ZDg3OTctN2JmMS00M2YzLThiZTEtNDBiNTEzZmM4ZDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9C/a/I2LEa04ddBtJX4BBHstH2XQuoTpsBN
ZUniLzvxYgIFsMrGPz2cv/ND4XOSZcb4nkfwQd7rAo1HWVMu2Xnoc6sSz3hb3krP
pavC1E5FhqQqy/oKngxdGSFsS821NMtijxNq7UXooyWmwvK0D4Svhi1zSqx3PKQ9
Ih4VEok/NmUak7al9JOrw/6jX/i0Ah1hVBTubInvd/IPD24AvDrBc117tskXClp/
kVUEHS9yNLzNWF194IawRoHQ6s8Wti9dfeY5gnUoVjfhwhhjJgOLFI8IlC/HtYLM
B4aZ/gfV9hjw5pCJcOLEjjubD7zRdcw70xV/sDkWprOK0ZgGIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKKgUHnRrGwLVjUR/xp6OZdwbXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw
ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvNWIwYWJjZTItODM1OC0z
OTM3LWE3YTQtNGUzY2MwMDRkYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk
NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh
Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz
YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMF2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbfJ12GTGrSk6cLtu4v73dZNj1ibXbWJBiFklLLZSzTjz3jb1Ogkuvk
E4tjnGGs7li98NEhdf3M0UUlYlSxCPz86mbjtjTyb1E63i//hrNO+gnCpSHht2u8
WSdf0eWEP2eSk5MU8EsyAFbIEqXuRBMtbFKGsBaJFcEwtxbsu9NE6sAyV25wEtmv
Ts0yXHGiimkraE0NYSvDDBDZWh2mnt7UAUnKuPXPOOLbT67pqJ8ZASleXZ0elwJ5
tZ596Yw6sAO8SpTaJkp8+/DUwoxRA1t1Ejygo4zHSnnHzdlCY9zgjehYUhFf/BZV
x7AhvFP2uqNZuoqVdSkZxLTMpW5tNHk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:12 2026 by rpki-client