Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa
File:                     1f15278b-547e-3c4b-a81e-77386c4d0852.roa (raw, json)
Hash identifier:          W3628r3XcRtYcstF8+b1odd7bqX9385YlSFDINdpxG8=
Subject key identifier:   38:A3:4D:06:9D:7C:05:E5:63:C7:15:A2:FD:92:3A:51:52:1A:30:A0
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F4328584E376464D3A0F8AE26F8208100
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     40355
IP address blocks:        199.244.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:64:d3:a0:f8:ae:26:f8:20:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=6f01e60b-9ab1-4f35-99ff-d92189ae7b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:79:36:3a:09:b4:03:e4:34:53:4c:ca:75:
                    37:b3:ec:fd:cf:23:c0:da:22:d1:e1:fb:b8:3a:6e:
                    8c:d0:d7:e6:b5:a2:ba:dd:69:fe:bc:df:d1:15:ad:
                    b4:0d:18:c5:7f:49:bc:76:b3:81:4c:d0:fa:52:bd:
                    5e:64:2c:17:1a:d2:1b:88:f9:2d:ba:be:19:a7:29:
                    9f:f4:cb:51:83:1a:28:9e:f7:14:da:3f:5f:ba:bc:
                    89:49:78:f2:b3:b8:48:2d:ec:3a:2b:52:a9:ed:91:
                    79:f6:4e:95:41:08:d1:af:08:b5:a7:99:33:46:d5:
                    3e:66:f8:26:88:6a:67:51:a3:aa:92:59:c1:00:ef:
                    d6:d6:c4:58:13:d4:3c:28:20:59:db:6d:9a:be:3b:
                    29:1a:90:22:35:01:08:4b:bd:95:dc:86:62:41:dd:
                    75:dc:90:8b:9c:da:cb:05:dd:41:24:18:90:b7:16:
                    7d:16:f1:8a:81:0e:e6:a4:5e:e1:a4:b3:81:55:95:
                    56:e5:7e:c5:96:0c:51:da:c5:fb:58:5b:de:56:fd:
                    3b:cf:cb:f4:c8:12:a9:1f:ae:08:2f:4f:d4:01:e0:
                    7b:08:74:c0:53:83:6a:c4:d7:e5:c3:88:db:a8:ad:
                    f2:a5:8c:54:bd:f8:cf:f9:b1:4d:69:0d:12:53:48:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:4D:06:9D:7C:05:E5:63:C7:15:A2:FD:92:3A:51:52:1A:30:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:fb:78:1c:ae:4a:4d:3e:9b:d0:7a:3d:67:54:f5:b0:36:
         b8:ce:81:a1:a8:d7:bb:e3:aa:d6:3f:c2:9f:73:0b:97:ee:b6:
         01:cb:bc:00:bf:8d:f5:af:15:88:4a:36:bc:ad:8c:f1:04:59:
         a0:00:4f:f0:c9:bf:10:86:fd:2b:dd:d3:7c:95:29:8c:7d:59:
         e1:9d:cf:72:a6:1c:14:d5:f6:93:ee:ae:dd:29:63:be:39:32:
         8e:95:d5:e1:fe:98:d3:00:18:13:f1:b9:d2:2e:eb:79:a6:f6:
         ea:92:1b:c1:0d:a2:d4:7e:dc:28:ab:06:4a:31:cf:f1:c8:4e:
         60:c8:a9:8e:ec:f1:24:e3:43:a5:d6:0f:0d:49:76:d1:bf:72:
         93:0d:dd:94:bb:78:00:58:d9:66:02:dd:ad:98:3c:8c:f5:d2:
         ce:a8:fd:a3:b0:dd:b3:12:aa:d8:4c:ee:4f:b7:50:69:ed:15:
         b4:8a:45:50:bb:1d:58:14:92:3b:d6:72:45:77:66:6d:2e:c2:
         bb:21:ce:5c:57:d4:c5:79:cd:62:5c:06:5d:18:3c:e6:e3:e7:
         fc:bc:3a:46:16:b0:30:58:88:f9:19:c3:75:e1:de:50:98:0c:
         33:5f:d1:ea:a6:4d:c1:b2:9d:bc:6c:61:a5:5d:d8:25:33:30:
         e1:85:4a:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGTToPiuJvgggQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY4NjJmMjctMzYzZi00MmNlLWFiN2UtMzE3MzliMzY2
MGEwMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
NmYwMWU2MGItOWFiMS00ZjM1LTk5ZmYtZDkyMTg5YWU3YjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsl5NjoJtAPkNFNMynU3s+z9zyPA2iLR4fu4
Om6M0NfmtaK63Wn+vN/RFa20DRjFf0m8drOBTND6Ur1eZCwXGtIbiPktur4Zpymf
9MtRgxoonvcU2j9furyJSXjys7hILew6K1Kp7ZF59k6VQQjRrwi1p5kzRtU+Zvgm
iGpnUaOqklnBAO/W1sRYE9Q8KCBZ222avjspGpAiNQEIS72V3IZiQd113JCLnNrL
Bd1BJBiQtxZ9FvGKgQ7mpF7hpLOBVZVW5X7FlgxR2sX7WFveVv07z8v0yBKpH64I
L0/UAeB7CHTAU4NqxNflw4jbqK3ypYxUvfjP+bFNaQ0SU0iS8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDijTQadfAXlY8cVov2SOlFSGjCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2
MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTczOWIzNjYwYTAvMWYxNTI3OGItNTQ3ZS0z
YzRiLWE4MWUtNzczODZjNGQwODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmY4NjJmMjctMzYzZi00MmNlLWFi
N2UtMzE3MzliMzY2MGEwL2JmODYyZjI3LTM2M2YtNDJjZS1hYjdlLTMxNzM5YjM2
NjBhMC5jcmwwHwYDVR0jBBgwFoAU/Mn+2ixOINbiezYnXAE0YqRk2m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTcz
OWIzNjYwYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/RYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJn/+3gcrkpNPpvQej1nVPWwNrjOgaGo17vjqtY/wp9zC5futgHLvAC/
jfWvFYhKNrytjPEEWaAAT/DJvxCG/Svd03yVKYx9WeGdz3KmHBTV9pPurt0pY745
Mo6V1eH+mNMAGBPxudIu63mm9uqSG8ENotR+3CirBkoxz/HITmDIqY7s8STjQ6XW
Dw1JdtG/cpMN3ZS7eABY2WYC3a2YPIz10s6o/aOw3bMSqthM7k+3UGntFbSKRVC7
HVgUkjvWckV3Zm0uwrshzlxX1MV5zWJcBl0YPObj5/y8OkYWsDBYiPkZw3Xh3lCY
DDNf0eqmTcGynbxsYaVd2CUzMOGFSv4=
-----END CERTIFICATE-----
Generated at Fri Jun 26 21:57:24 2026 by rpki-client