Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
File:                     af07d9a3-0774-3d53-9e00-35661826a9bc.roa (raw, json)
Hash identifier:          VBNspmogTyvdFMiaPVoURJQ8pUhWBQqIEKYJD90Fg6g=
Subject key identifier:   90:3A:BA:15:5E:E0:CB:61:17:0D:B0:4B:7A:B6:F5:D8:63:21:75:DE
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584E1FA9A123F1FBE604653E8218
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     6505
IP address blocks:        66.96.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:23:f1:fb:e6:04:65:3e:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=b19c291c-a554-4674-9562-13c96fc68965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:98:7f:d2:0c:d1:32:f9:38:6e:aa:86:20:
                    b5:a9:cb:ed:ca:8d:93:32:56:54:2a:cd:86:f8:2a:
                    b6:54:62:5e:1a:ce:28:3c:d0:99:a6:57:2e:93:93:
                    b6:7e:7d:ba:bc:f5:ab:e5:9e:90:2e:14:68:8c:04:
                    87:94:26:a3:9b:75:bf:e4:84:a3:15:0a:9b:0e:bf:
                    62:3c:33:a9:e9:4f:f2:da:ce:de:31:c9:cf:59:90:
                    10:d7:e9:4a:e2:27:16:c8:8f:d3:69:7f:55:2e:79:
                    58:7a:fd:a7:9f:29:46:3b:fd:6f:9c:18:cc:12:2b:
                    de:89:d6:67:76:59:d6:9b:14:6a:bf:ae:4d:41:76:
                    cc:23:99:5b:0c:fe:ed:7a:40:7e:1e:b3:95:24:fa:
                    1c:f2:4e:46:3d:62:d1:54:30:5b:06:18:b8:d8:57:
                    33:82:0a:f7:a6:51:6a:7b:23:cd:83:d1:a8:25:56:
                    41:dc:ec:c4:af:38:1b:b0:27:3b:f9:5a:11:7a:2e:
                    7a:b7:88:45:6b:f7:2d:a7:d6:f7:93:c2:ff:01:b1:
                    8e:7d:b0:51:c6:ea:71:ed:c3:1f:32:8c:e8:a3:2b:
                    2b:8b:67:96:c3:00:78:c4:46:f9:c0:6c:e1:b9:05:
                    cf:73:6e:c4:58:ee:12:c8:47:28:11:b6:cc:9d:fa:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:BA:15:5E:E0:CB:61:17:0D:B0:4B:7A:B6:F5:D8:63:21:75:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:3d:4d:c9:90:c1:27:47:8e:dd:79:a8:7f:9f:49:65:ef:
         a3:57:fc:8a:2e:e0:34:e5:12:19:ed:f7:9b:9e:8f:e6:64:1b:
         02:2a:62:d1:12:78:ef:7d:d1:b7:58:cd:95:79:fe:7e:04:8b:
         64:df:ca:be:b5:5b:8d:99:a6:89:71:04:c4:e6:02:ce:c7:11:
         84:61:77:1f:4c:c4:fb:30:4f:2d:34:4b:86:03:08:66:02:e7:
         10:c6:5b:cc:ba:f7:2d:d7:54:9b:e9:e8:7b:2f:6a:0e:51:4f:
         22:fb:32:de:f3:a5:94:83:03:cf:3f:e1:3d:84:bf:d1:92:8c:
         59:2d:08:ac:ec:d7:dd:31:ee:2d:5c:d9:e1:04:78:92:e2:09:
         93:31:d7:57:fe:d9:f6:75:d3:29:de:49:ed:4a:69:2e:5e:62:
         79:ed:99:9c:7a:62:f6:cb:a6:9c:1f:ac:f6:7d:28:d7:99:48:
         5c:71:e4:88:de:bb:b8:61:79:4d:bd:7b:3f:dc:af:1b:1a:18:
         c0:44:7a:9f:d3:b5:cc:b9:76:6c:df:5f:b1:50:ae:d1:ac:94:
         76:f5:e0:41:e3:2c:86:e1:04:8c:bd:16:ef:63:5e:8c:f0:8d:
         64:c7:dd:05:29:3a:a3:d2:5a:6c:22:72:66:e2:4d:e0:d6:aa:
         36:e3:e1:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqaEj8fvmBGU+ghgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
YjE5YzI5MWMtYTU1NC00Njc0LTk1NjItMTNjOTZmYzY4OTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNqYf9IM0TL5OG6qhiC1qcvtyo2TMlZUKs2G
+Cq2VGJeGs4oPNCZplcuk5O2fn26vPWr5Z6QLhRojASHlCajm3W/5ISjFQqbDr9i
PDOp6U/y2s7eMcnPWZAQ1+lK4icWyI/TaX9VLnlYev2nnylGO/1vnBjMEiveidZn
dlnWmxRqv65NQXbMI5lbDP7tekB+HrOVJPoc8k5GPWLRVDBbBhi42Fczggr3plFq
eyPNg9GoJVZB3OzErzgbsCc7+VoRei56t4hFa/ctp9b3k8L/AbGOfbBRxupx7cMf
Mozooysri2eWwwB4xEb5wGzhuQXPc27EWO4SyEcoEbbMnfrvdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA6uhVe4MthFw2wS3q29dhjIXXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYWYwN2Q5YTMtMDc3NC0z
ZDUzLTllMDAtMzU2NjE4MjZhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQmAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYLPU3JkMEnR47deah/n0ll76NX/Iou4DTlEhnt95uej+ZkGwIqYtES
eO990bdYzZV5/n4Ei2Tfyr61W42ZpolxBMTmAs7HEYRhdx9MxPswTy00S4YDCGYC
5xDGW8y69y3XVJvp6Hsvag5RTyL7Mt7zpZSDA88/4T2Ev9GSjFktCKzs190x7i1c
2eEEeJLiCZMx11f+2fZ10yneSe1KaS5eYnntmZx6YvbLppwfrPZ9KNeZSFxx5Ije
u7hheU29ez/crxsaGMBEep/Ttcy5dmzfX7FQrtGslHb14EHjLIbhBIy9Fu9jXozw
jWTH3QUpOqPSWmwicmbiTeDWqjbj4R4=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:30:53 2026 by rpki-client