Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa
File:                     8553f576-a5fc-3883-96b6-1ef4147e4548.roa (raw, json)
Hash identifier:          yLOCoIaRQXuchqJ3XYp7eRPGq9KFQjVPYqjncyN4170=
Subject key identifier:   3B:CD:A4:EB:1E:2D:FB:58:48:38:39:1A:DB:96:34:C1:DC:9E:B5:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AA85BB773D5401D69A94A5B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     23243
IP address blocks:        104.117.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b7:73:d5:40:1d:69:a9:4a:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=6446a026-c5fb-400c-85f1-4828da8f4b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:47:16:85:55:c2:d8:b3:af:a4:f9:e3:d6:
                    be:80:e4:76:f4:fa:f4:ec:99:0f:d5:ab:9f:fd:f7:
                    ef:9c:bc:95:9c:ed:d8:39:35:3b:ad:7c:06:0b:80:
                    a4:f2:45:88:76:d6:2b:61:73:5c:fa:46:2e:14:95:
                    c7:ac:59:6c:60:4a:2b:6e:55:42:cc:54:d3:ad:c8:
                    13:a2:62:38:27:d6:22:73:b6:16:22:f6:b1:79:69:
                    9f:9b:13:95:f6:b7:96:5a:69:86:55:ec:a6:91:bd:
                    db:d8:3b:78:fd:0a:4f:5b:cf:fe:3b:39:1c:78:e0:
                    9b:e9:23:53:02:85:8e:f7:05:98:9e:b2:ec:c8:49:
                    7a:2f:4b:ba:1c:2f:ff:72:de:a3:89:37:65:a5:f8:
                    29:2f:1f:97:07:47:cf:61:1f:f5:99:8a:4e:e9:52:
                    cc:53:eb:33:14:e2:3c:a8:5b:ed:28:4c:f8:ca:37:
                    86:98:bc:6c:62:cd:9e:c6:7f:a3:9c:70:3c:16:ef:
                    d4:30:e2:65:99:20:7d:8f:7f:85:70:87:db:7e:89:
                    8b:40:e7:45:ad:92:c5:90:6d:53:5d:02:bf:da:59:
                    98:4f:c0:73:c9:08:a1:ea:af:23:18:0c:3e:ac:d5:
                    34:fe:1a:45:26:49:f5:5e:d9:7e:03:ac:a9:e4:e1:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:A4:EB:1E:2D:FB:58:48:38:39:1A:DB:96:34:C1:DC:9E:B5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.117.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:de:aa:34:49:5f:81:57:bf:29:ed:99:c4:e3:83:49:1d:83:
         52:ee:15:ef:3f:29:5c:e1:ec:95:eb:39:e4:ef:70:8c:59:ea:
         7b:dc:73:c7:ad:cf:80:2a:bb:53:00:4f:bf:41:41:7f:b9:7c:
         ea:d2:ed:7a:d1:d8:b0:63:c0:63:a8:86:6e:61:8a:c1:23:94:
         fe:d2:b9:32:61:d8:53:de:a3:5a:62:08:e6:d8:97:88:da:e8:
         9a:64:ed:01:ef:b0:c0:cc:cd:a2:93:c3:2d:11:e5:d0:78:d4:
         f6:0a:fd:d0:58:e2:ac:7a:27:83:54:de:03:6d:9d:d1:3c:8a:
         73:75:d0:d7:4f:bb:5a:b2:f4:f2:74:29:6b:b8:a0:e8:48:18:
         4e:bc:aa:82:64:3e:d0:6b:e5:9e:dc:2d:9e:f0:47:07:03:67:
         91:5f:24:ad:47:ab:5f:11:8b:76:95:61:7d:40:97:92:84:b5:
         db:be:35:6d:46:3d:be:a7:e1:be:a2:b4:08:e1:09:ec:18:8d:
         41:f5:a6:ec:56:5f:c4:36:73:01:ea:2a:e1:e0:09:58:5b:b1:
         ac:6c:64:e2:c9:b8:08:cd:c2:60:6c:8e:67:43:b3:13:4a:e9:
         32:ee:10:3e:7f:d3:49:e3:a2:48:0a:34:62:b2:ca:d7:47:30:
         52:83:ee:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7dz1UAdaalKW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
NjQ0NmEwMjYtYzVmYi00MDBjLTg1ZjEtNDgyOGRhOGY0YjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRJHFoVVwtizr6T549a+gOR29Pr07JkP1auf
/ffvnLyVnO3YOTU7rXwGC4Ck8kWIdtYrYXNc+kYuFJXHrFlsYEorblVCzFTTrcgT
omI4J9Yic7YWIvaxeWmfmxOV9reWWmmGVeymkb3b2Dt4/QpPW8/+OzkceOCb6SNT
AoWO9wWYnrLsyEl6L0u6HC//ct6jiTdlpfgpLx+XB0fPYR/1mYpO6VLMU+szFOI8
qFvtKEz4yjeGmLxsYs2exn+jnHA8Fu/UMOJlmSB9j3+FcIfbfomLQOdFrZLFkG1T
XQK/2lmYT8BzyQih6q8jGAw+rNU0/hpFJkn1Xtl+A6yp5OHEgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvNpOseLftYSDg5GtuWNMHcnrVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU1M2Y1NzYtYTVmYy0z
ODgzLTk2YjYtMWVmNDE0N2U0NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITeqjRJX4FXvyntmcTjg0kdg1LuFe8/KVzh7JXrOeTvcIxZ6nvcc8et
z4Aqu1MAT79BQX+5fOrS7XrR2LBjwGOohm5hisEjlP7SuTJh2FPeo1piCObYl4ja
6Jpk7QHvsMDMzaKTwy0R5dB41PYK/dBY4qx6J4NU3gNtndE8inN10NdPu1qy9PJ0
KWu4oOhIGE68qoJkPtBr5Z7cLZ7wRwcDZ5FfJK1Hq18Ri3aVYX1Al5KEtdu+NW1G
Pb6n4b6itAjhCewYjUH1puxWX8Q2cwHqKuHgCVhbsaxsZOLJuAjNwmBsjmdDsxNK
6TLuED5/00njokgKNGKyytdHMFKD7ts=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:36 2025 by rpki-client