Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa
File:                     039fd28c-4707-3b52-98d5-0ddcc86648ca.roa (raw, json)
Hash identifier:          7vfCDrPbXGAIEk9cp8lLzA8ARH9cu53ncdq8Hp5KP0M=
Subject key identifier:   69:BF:82:35:9C:CB:D0:22:5F:36:89:2E:71:CD:6C:38:6F:F9:78:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA7637B0294AF01628FB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24319
IP address blocks:        104.96.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:76:37:b0:29:4a:f0:16:28:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=d141feca-faca-45df-a497-2566f052f5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:e7:36:da:17:18:ed:dd:0a:a1:bb:d1:f5:
                    09:60:c2:b4:b3:e5:f5:e8:f8:d8:7e:d2:1e:20:91:
                    75:31:7a:5a:45:ed:3a:02:27:cd:20:f1:d5:5f:4f:
                    5f:dd:0d:db:e2:b7:62:f9:94:0a:fc:25:05:9a:3a:
                    5a:e2:a6:26:1b:6b:21:d0:2b:e6:2a:54:7b:0c:44:
                    ad:53:63:42:fe:79:86:c6:d9:c7:1c:9c:ca:3b:6a:
                    d0:08:d8:a5:f1:1c:af:04:ac:1a:ba:d4:cb:a8:e2:
                    7b:51:fd:76:dd:ef:25:18:46:ac:a2:9c:ba:79:f2:
                    ea:b1:41:4d:e1:9a:ae:cb:69:fb:dc:cc:e6:33:96:
                    d6:c3:fb:59:03:2f:08:7c:7c:69:2d:8d:63:06:7d:
                    f6:ab:83:a1:bf:0c:18:d4:e8:84:cc:ba:4a:cb:69:
                    93:8b:e4:a5:e8:56:1a:64:07:04:6d:24:f2:ab:ab:
                    7b:f5:91:53:fe:62:fe:1a:3f:b2:4b:a7:39:0c:09:
                    6e:d5:c6:fb:a9:79:8d:a7:8e:eb:71:74:83:14:0e:
                    83:71:47:cc:de:53:c4:fb:e3:61:54:16:b6:12:04:
                    63:4a:9e:b0:0e:71:57:29:a9:36:2c:84:08:2e:a5:
                    82:ec:25:85:40:c5:c2:b2:dc:8c:b1:ae:f6:83:0f:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BF:82:35:9C:CB:D0:22:5F:36:89:2E:71:CD:6C:38:6F:F9:78:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:ba:00:9d:58:96:4a:03:75:3b:ca:86:89:51:96:6e:ab:
         14:20:28:1c:ee:0f:a7:7d:d1:22:45:39:f6:43:89:3a:0e:20:
         c1:db:a5:e4:7a:3e:bc:5a:2f:d8:78:85:1e:02:f1:fe:47:61:
         3f:50:8d:0e:1e:a9:98:9d:3e:ce:c5:02:53:3c:8a:8c:7d:9c:
         4e:4d:f4:72:33:8e:49:a3:13:5b:21:76:e4:d4:69:87:7f:36:
         21:22:c7:23:5a:a1:d9:aa:5a:fd:3c:5e:a2:5c:1d:44:58:c1:
         e1:c2:c1:dd:2c:9f:a4:94:56:f1:74:12:ea:68:2a:41:06:95:
         d9:47:33:d1:0b:a7:b8:63:39:b3:46:a0:7f:30:1f:d4:a6:1f:
         35:28:58:d5:b8:0a:da:e5:ca:ad:8e:38:09:1c:44:93:ac:9b:
         5e:5b:c3:72:e8:74:17:73:1f:04:56:74:68:c8:ce:ec:ce:c1:
         8f:7b:11:36:c8:1d:6e:db:d8:e8:ba:85:67:61:3e:0f:1d:ab:
         58:b7:39:e9:87:bd:8d:0a:c9:6e:cc:10:d1:6d:0b:36:4d:88:
         2b:2b:5f:bd:60:01:18:fc:3e:8d:cf:1f:8c:aa:96:92:34:d2:
         00:73:f8:bd:41:a3:3d:6e:44:6a:db:ae:09:da:10:3c:fc:ff:
         91:db:f6:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnY3sClK8BYo+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDE0MWZlY2EtZmFjYS00NWRmLWE0OTctMjU2NmYwNTJmNWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp7nNtoXGO3dCqG70fUJYMK0s+X16PjYftIe
IJF1MXpaRe06AifNIPHVX09f3Q3b4rdi+ZQK/CUFmjpa4qYmG2sh0CvmKlR7DESt
U2NC/nmGxtnHHJzKO2rQCNil8RyvBKwautTLqOJ7Uf123e8lGEasopy6efLqsUFN
4Zquy2n73MzmM5bWw/tZAy8IfHxpLY1jBn32q4OhvwwY1OiEzLpKy2mTi+Sl6FYa
ZAcEbSTyq6t79ZFT/mL+Gj+yS6c5DAlu1cb7qXmNp47rcXSDFA6DcUfM3lPE++Nh
VBa2EgRjSp6wDnFXKak2LIQILqWC7CWFQMXCstyMsa72gw/HXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGm/gjWcy9AiXzaJLnHNbDhv+Xg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDM5ZmQyOGMtNDcwNy0z
YjUyLTk4ZDUtMGRkY2M4NjY0OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGDSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDougCdWJZKA3U7yoaJUZZuqxQgKBzuD6d90SJFOfZDiToOIMHbpeR6
PrxaL9h4hR4C8f5HYT9QjQ4eqZidPs7FAlM8iox9nE5N9HIzjkmjE1shduTUaYd/
NiEixyNaodmqWv08XqJcHURYweHCwd0sn6SUVvF0EupoKkEGldlHM9ELp7hjObNG
oH8wH9SmHzUoWNW4Ctrlyq2OOAkcRJOsm15bw3LodBdzHwRWdGjIzuzOwY97ETbI
HW7b2Oi6hWdhPg8dq1i3OemHvY0KyW7MENFtCzZNiCsrX71gARj8Po3PH4yqlpI0
0gBz+L1Boz1uRGrbrgnaEDz8/5Hb9vw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:07 2026 by rpki-client