Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8316e0bc-7460-3c45-a559-40e1b95958a6.roa
File:                     8316e0bc-7460-3c45-a559-40e1b95958a6.roa (raw, json)
Hash identifier:          lvENgENOfuVhaTx+m9PehRCN1vpC8aIS8hW53hRAnac=
Subject key identifier:   E8:5D:A6:DB:24:F8:43:CE:66:60:CA:3A:BE:93:1F:99:9A:53:A7:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6944F86F4DB489E0312D4E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8316e0bc-7460-3c45-a559-40e1b95958a6.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     63949
IP address blocks:        104.64.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:f8:6f:4d:b4:89:e0:31:2d:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=6993b566-5ab5-45a1-a7fa-ba76782d4352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:ad:6b:00:5d:2c:f9:e5:b2:f9:b6:65:22:
                    bb:36:ff:ab:fb:32:8a:be:7f:fc:42:6c:e0:98:b5:
                    3d:3b:c4:23:b3:d2:5d:f3:2f:5e:bd:37:06:c3:68:
                    6a:7f:da:e1:6f:55:62:45:fd:97:f4:89:70:5c:ae:
                    d0:3f:ad:da:4f:a6:f7:24:fd:05:ee:ba:73:39:0d:
                    51:2b:01:d3:3d:28:e6:b8:54:3d:7d:92:42:8e:02:
                    31:6c:5d:d5:7e:f3:4c:d6:b8:ad:c2:cc:fa:5b:11:
                    e9:c2:db:35:c4:01:43:70:fc:f5:12:05:34:f3:88:
                    89:d3:44:d1:d6:e5:ba:a0:50:63:1c:10:8a:84:76:
                    cf:74:4e:35:16:aa:63:a0:b7:3d:cc:be:7e:1c:2a:
                    67:ac:a1:85:df:f5:ad:30:9b:d6:0a:c7:f3:73:70:
                    9f:87:5b:87:15:ea:71:74:95:10:8d:d5:6e:d6:b6:
                    91:c3:61:cc:df:06:75:c2:68:fd:49:39:64:71:2d:
                    34:47:45:ca:cd:4d:1c:ec:80:ab:db:4b:ac:7c:64:
                    f6:f6:9f:08:25:55:7f:bd:eb:0f:2e:4a:1c:21:96:
                    51:e1:9c:f1:78:11:c7:99:60:3c:fd:e4:04:70:41:
                    f7:2b:dd:1a:e8:40:72:ac:12:5c:0c:b9:7e:8e:b9:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:A6:DB:24:F8:43:CE:66:60:CA:3A:BE:93:1F:99:9A:53:A7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8316e0bc-7460-3c45-a559-40e1b95958a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.64.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:07:2c:44:0b:04:40:7c:e3:6f:db:28:c4:17:53:cd:c8:aa:
         96:28:f5:ef:da:d5:1c:3f:9f:1d:82:ef:c2:09:69:bf:09:c1:
         8a:9c:1c:72:27:ad:9a:13:92:b1:9e:81:d6:98:58:ec:f3:37:
         26:46:6d:6f:52:d9:22:49:be:1a:1a:28:99:1c:f1:db:8e:28:
         61:50:13:81:da:99:77:5e:2c:68:8b:1d:02:92:10:2a:b3:db:
         ce:17:e4:4e:0b:e6:7a:7a:12:c0:35:3e:db:d9:18:11:2d:00:
         f0:a6:29:fc:56:4c:06:5b:b4:d5:2f:f5:35:0c:8d:28:58:d6:
         36:50:71:bb:17:9a:36:45:3d:19:88:48:59:1e:bf:eb:f4:93:
         a4:5f:57:25:3b:14:82:9c:52:ba:6e:13:1c:e1:fa:33:55:a2:
         c5:6d:7d:4e:bf:ce:fa:9d:83:8c:ea:69:df:cf:45:1d:af:06:
         e6:b2:b8:80:55:2a:1d:94:7c:ed:ac:1e:4a:ce:58:42:5a:10:
         64:af:b1:46:3b:52:29:6e:e5:08:49:f2:d1:ca:25:0e:16:9b:
         d2:d6:3d:e5:10:73:95:57:24:58:0a:af:7f:1d:ab:4a:54:94:
         f8:d4:ed:f2:2c:4a:bc:44:14:73:d8:7a:37:66:e1:63:49:84:
         fb:5a:07:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRPhvTbSJ4DEtTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk
Njk5M2I1NjYtNWFiNS00NWExLWE3ZmEtYmE3Njc4MmQ0MzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf2tawBdLPnlsvm2ZSK7Nv+r+zKKvn/8Qmzg
mLU9O8Qjs9Jd8y9evTcGw2hqf9rhb1ViRf2X9IlwXK7QP63aT6b3JP0F7rpzOQ1R
KwHTPSjmuFQ9fZJCjgIxbF3VfvNM1ritwsz6WxHpwts1xAFDcPz1EgU084iJ00TR
1uW6oFBjHBCKhHbPdE41FqpjoLc9zL5+HCpnrKGF3/WtMJvWCsfzc3Cfh1uHFepx
dJUQjdVu1raRw2HM3wZ1wmj9STlkcS00R0XKzU0c7ICr20usfGT29p8IJVV/vesP
LkocIZZR4ZzxeBHHmWA8/eQEcEH3K90a6EByrBJcDLl+jrnLswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhdptsk+EPOZmDKOr6TH5maU6fwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODMxNmUwYmMtNzQ2MC0z
YzQ1LWE1NTktNDBlMWI5NTk1OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaEBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgHLEQLBEB842/bKMQXU83IqpYo9e/a1Rw/nx2C78IJab8JwYqcHHIn
rZoTkrGegdaYWOzzNyZGbW9S2SJJvhoaKJkc8duOKGFQE4HamXdeLGiLHQKSECqz
284X5E4L5np6EsA1PtvZGBEtAPCmKfxWTAZbtNUv9TUMjShY1jZQcbsXmjZFPRmI
SFkev+v0k6RfVyU7FIKcUrpuExzh+jNVosVtfU6/zvqdg4zqad/PRR2vBuayuIBV
Kh2UfO2sHkrOWEJaEGSvsUY7Uilu5QhJ8tHKJQ4Wm9LWPeUQc5VXJFgKr38dq0pU
lPjU7fIsSrxEFHPYejdm4WNJhPtaB8A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:07 2026 by rpki-client