Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8fc367f0-aeb5-39a5-9c25-8f110a45c529.roa
File:                     8fc367f0-aeb5-39a5-9c25-8f110a45c529.roa (raw, json)
Hash identifier:          GzukqKtwiAYs4NTPb8sRe94WqvmlPJ+DOdBd9iOFTZM=
Subject key identifier:   84:64:A4:8E:DC:47:E0:35:B1:CD:68:35:02:62:EE:27:E0:D2:47:96
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D27AA46FF42696FA301461300
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8fc367f0-aeb5-39a5-9c25-8f110a45c529.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        64.15.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:46:ff:42:69:6f:a3:01:46:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=a19adae4-24e0-4aba-a525-7bee4e73d560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:11:bc:27:2c:6e:74:c1:dc:54:fc:07:1d:
                    46:63:83:5c:05:7a:ee:5d:42:21:41:fa:0e:a6:6e:
                    df:9f:d2:b3:86:3d:cd:23:0d:13:74:c3:ca:53:a6:
                    de:3c:31:aa:13:b3:bf:ca:a2:80:bb:a4:2f:54:98:
                    0d:40:5c:ec:c9:97:72:37:50:f8:f0:70:b9:b4:ed:
                    19:00:4d:93:94:25:7e:0c:ea:91:e2:40:d7:d7:7c:
                    67:dc:1a:c4:49:04:51:40:b7:7a:5b:d7:a1:23:df:
                    54:ce:e1:81:6e:a3:ed:b8:10:eb:25:b1:9d:c9:5d:
                    cf:e7:3d:aa:c4:2f:77:08:b2:00:e5:88:6d:98:ac:
                    25:05:ee:dc:4d:e3:56:b7:03:a4:82:98:ef:75:5c:
                    98:1a:d1:86:59:4d:21:e4:8f:d0:97:47:b8:f4:78:
                    84:03:20:5c:be:d1:e5:c5:a7:6e:dc:7c:25:f5:d8:
                    be:09:9c:cb:70:13:bd:b9:f1:d6:cf:5e:24:1a:b1:
                    1b:69:98:a5:b6:a9:27:5e:11:fc:7e:74:ca:49:9e:
                    1d:86:bd:a2:c7:e2:4c:b7:6b:02:01:95:59:00:97:
                    22:98:5e:fd:30:4e:b2:13:29:16:33:47:f2:a9:d2:
                    e4:fd:b1:c2:d1:99:df:a2:fa:53:d5:8b:1a:0e:fd:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:A4:8E:DC:47:E0:35:B1:CD:68:35:02:62:EE:27:E0:D2:47:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8fc367f0-aeb5-39a5-9c25-8f110a45c529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:3a:33:c3:f9:ac:71:46:1c:d5:36:6b:ff:ed:c9:10:9c:
         44:04:84:15:2d:9b:77:75:e8:cd:6d:59:cd:82:ac:5e:83:9e:
         6d:7c:38:6b:0a:41:be:84:99:2e:b2:63:73:c0:8e:15:28:9c:
         c5:c4:e1:de:72:6a:98:12:b9:c9:6d:cd:76:2e:4a:1a:94:b3:
         9e:f7:8d:d2:c2:4d:3d:78:f0:b1:a0:86:9d:b9:31:2d:37:d7:
         4b:a8:48:a3:b1:f4:11:25:06:3d:d0:69:03:a3:5a:ef:0c:a2:
         ce:12:55:3c:b6:20:3e:c2:eb:fd:09:15:84:7c:eb:68:07:63:
         1f:49:cd:e8:5e:b1:f4:58:cf:f1:5f:ce:a8:bb:38:35:cc:35:
         49:6c:89:78:31:92:e8:8c:f3:4f:c2:95:59:39:5c:b4:64:18:
         59:47:a6:c4:ac:6a:df:bb:56:af:85:29:36:b7:aa:30:f1:4b:
         51:82:a3:9d:ba:aa:0c:34:a9:cc:7f:1a:4f:f4:21:92:ae:4c:
         db:4a:ff:bc:ce:f0:68:03:cb:7b:08:29:b0:fd:4f:dc:80:65:
         be:37:60:be:c2:eb:76:51:5d:62:6e:f4:91:51:5d:96:ee:0a:
         f7:07:eb:df:c0:a5:19:f6:39:dd:c8:80:9b:2c:62:a8:75:57:
         37:e3:66:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkb/QmlvowFGEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
YTE5YWRhZTQtMjRlMC00YWJhLWE1MjUtN2JlZTRlNzNkNTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJYRvCcsbnTB3FT8Bx1GY4NcBXruXUIhQfoO
pm7fn9Kzhj3NIw0TdMPKU6bePDGqE7O/yqKAu6QvVJgNQFzsyZdyN1D48HC5tO0Z
AE2TlCV+DOqR4kDX13xn3BrESQRRQLd6W9ehI99UzuGBbqPtuBDrJbGdyV3P5z2q
xC93CLIA5YhtmKwlBe7cTeNWtwOkgpjvdVyYGtGGWU0h5I/Ql0e49HiEAyBcvtHl
xadu3Hwl9di+CZzLcBO9ufHWz14kGrEbaZiltqknXhH8fnTKSZ4dhr2ix+JMt2sC
AZVZAJcimF79ME6yEykWM0fyqdLk/bHC0ZnfovpT1YsaDv3DowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRkpI7cR+A1sc1oNQJi7ifg0keWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOGZjMzY3ZjAtYWViNS0z
OWE1LTljMjUtOGYxMTBhNDVjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQA9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsdOjPD+axxRhzVNmv/7ckQnEQEhBUtm3d16M1tWc2CrF6Dnm18OGsK
Qb6EmS6yY3PAjhUonMXE4d5yapgSucltzXYuShqUs573jdLCTT148LGghp25MS03
10uoSKOx9BElBj3QaQOjWu8Mos4SVTy2ID7C6/0JFYR862gHYx9JzehesfRYz/Ff
zqi7ODXMNUlsiXgxkuiM80/ClVk5XLRkGFlHpsSsat+7Vq+FKTa3qjDxS1GCo526
qgw0qcx/Gk/0IZKuTNtK/7zO8GgDy3sIKbD9T9yAZb43YL7C63ZRXWJu9JFRXZbu
CvcH69/ApRn2Od3IgJssYqh1VzfjZrc=
-----END CERTIFICATE-----
Generated at Thu Mar 19 02:00:02 2026 by rpki-client