Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b75dc1-3147-3076-a77a-95e1598dfbee.roa
File:                     10b75dc1-3147-3076-a77a-95e1598dfbee.roa (raw, json)
Hash identifier:          mNWJCw01DtF3DVz8fE9o2mdm7mayx5T0W7pcRTjZlzc=
Subject key identifier:   8B:63:E7:75:C2:13:35:7A:54:CC:55:07:A5:41:C4:7D:EB:1A:F7:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600E8930DB03B5DBDDF44F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b75dc1-3147-3076-a77a-95e1598dfbee.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        174.162.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:e8:93:0d:b0:3b:5d:bd:df:44:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=c1cfd5b3-8eee-475a-8926-ddb5e4af7175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:0e:8b:49:03:d1:06:68:ba:7e:0e:f4:94:
                    73:e5:81:57:e6:27:b2:fd:3f:fb:7e:06:51:5a:50:
                    f7:10:47:13:35:f7:2a:3e:8a:55:99:ec:1d:f1:97:
                    02:59:78:fa:2c:03:00:4c:1a:45:3a:8b:59:0f:f5:
                    f1:78:0f:e3:92:9a:4d:15:98:da:f3:18:94:02:0d:
                    08:9b:2c:98:0b:a6:a8:53:b6:2d:5b:83:da:d4:94:
                    35:ef:84:e2:d5:ed:4e:ff:2c:8d:61:a7:48:b3:48:
                    6b:fe:76:47:d9:09:f7:e8:af:dd:dd:16:0b:c6:a5:
                    96:36:0d:a4:af:d5:ca:9d:fb:7c:ce:bd:3d:a1:bd:
                    e2:81:d1:23:3d:3d:e8:55:42:74:ba:6f:92:69:0e:
                    57:7a:2e:6d:bd:36:69:bb:3d:9c:2f:c0:30:1d:1d:
                    51:66:06:28:f2:4b:52:3e:49:a3:7a:c3:a0:c0:7f:
                    74:07:fd:7c:20:30:b3:e0:0b:b0:9e:75:6f:f6:d2:
                    e2:9d:e5:44:ab:87:13:3f:65:ad:ed:5b:23:96:d7:
                    cd:3f:ab:27:c4:e1:ed:7d:7e:bd:6d:2e:14:3d:2f:
                    04:1b:f2:c0:e5:fe:7e:fe:4c:30:39:19:e8:c1:09:
                    38:61:2c:9d:7d:4d:b8:55:92:49:c9:fe:d5:b8:e3:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:63:E7:75:C2:13:35:7A:54:CC:55:07:A5:41:C4:7D:EB:1A:F7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b75dc1-3147-3076-a77a-95e1598dfbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:34:26:6d:49:93:5a:c6:c6:1c:81:5e:26:e4:fc:c3:62:aa:
         0f:30:9a:17:30:ef:8a:6a:b7:20:44:20:2e:76:8c:a8:6a:05:
         53:15:76:f0:99:7d:40:fa:db:db:bb:10:c8:69:df:55:ab:62:
         8b:e3:c7:be:f4:a9:42:d7:ee:56:2e:2a:fc:06:52:f8:4e:75:
         d1:b7:02:41:7f:0e:b0:57:ed:d8:b1:28:0c:13:bb:39:59:13:
         a7:89:f4:2f:01:b8:68:df:5f:5c:53:4a:3c:93:fe:b1:5f:94:
         66:56:d2:90:48:78:d4:d1:68:74:7d:83:2f:d2:70:e0:a8:a2:
         94:a5:56:0f:5f:dd:20:da:f2:04:bc:4b:61:32:f5:fd:c2:af:
         e6:1f:12:6b:95:de:be:f8:19:43:97:aa:4f:03:ef:85:0f:37:
         23:7b:ce:8a:39:69:cf:d5:87:73:60:cc:05:af:d5:28:fc:00:
         60:77:72:f2:19:e2:64:c5:b4:9f:4d:e5:93:c9:ac:fe:a8:b0:
         7d:9f:7b:8d:ca:70:fe:f8:36:81:ae:55:22:72:e3:89:ef:55:
         1d:74:d2:39:03:a7:6b:73:65:eb:21:6d:01:09:bd:9c:fc:99:
         57:2e:5c:f5:12:b1:9d:62:17:7d:66:87:15:0e:ee:07:10:04:
         ed:96:5d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AOiTDbA7Xb3fRPgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
YzFjZmQ1YjMtOGVlZS00NzVhLTg5MjYtZGRiNWU0YWY3MTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHEOi0kD0QZoun4O9JRz5YFX5iey/T/7fgZR
WlD3EEcTNfcqPopVmewd8ZcCWXj6LAMATBpFOotZD/XxeA/jkppNFZja8xiUAg0I
myyYC6aoU7YtW4Pa1JQ174Ti1e1O/yyNYadIs0hr/nZH2Qn36K/d3RYLxqWWNg2k
r9XKnft8zr09ob3igdEjPT3oVUJ0um+SaQ5Xei5tvTZpuz2cL8AwHR1RZgYo8ktS
PkmjesOgwH90B/18IDCz4AuwnnVv9tLineVEq4cTP2Wt7VsjltfNP6snxOHtfX69
bS4UPS8EG/LA5f5+/kwwORnowQk4YSydfU24VZJJyf7VuOPYfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItj53XCEzV6VMxVB6VBxH3rGvcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBiNzVkYzEtMzE0Ny0z
MDc2LWE3N2EtOTVlMTU5OGRmYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADs0Jm1Jk1rGxhyBXibk/MNiqg8wmhcw74pqtyBEIC52jKhqBVMVdvCZ
fUD629u7EMhp31WrYovjx770qULX7lYuKvwGUvhOddG3AkF/DrBX7dixKAwTuzlZ
E6eJ9C8BuGjfX1xTSjyT/rFflGZW0pBIeNTRaHR9gy/ScOCoopSlVg9f3SDa8gS8
S2Ey9f3Cr+YfEmuV3r74GUOXqk8D74UPNyN7zoo5ac/Vh3NgzAWv1Sj8AGB3cvIZ
4mTFtJ9N5ZPJrP6osH2fe43KcP74NoGuVSJy44nvVR100jkDp2tzZeshbQEJvZz8
mVcuXPUSsZ1iF31mhxUO7gcQBO2WXXg=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:28:19 2026 by rpki-client