Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5499cc7f-6f8f-325d-9218-b559a1bb39ba.roa
File:                     5499cc7f-6f8f-325d-9218-b559a1bb39ba.roa (raw, json)
Hash identifier:          eHd4BthXRBmkFibq0JDVzq8dn1E4bm0ylVZ0e0GHZd8=
Subject key identifier:   5F:29:A1:56:6C:89:E2:70:12:74:67:27:4F:82:54:57:54:9D:81:4C
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D1947918EBAFC6B96CA0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5499cc7f-6f8f-325d-9218-b559a1bb39ba.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d1:94:79:18:eb:af:c6:b9:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ba95151b-2969-4d54-802e-40904bc8febc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:0b:ed:33:2f:0a:2f:c9:b4:c2:71:37:71:
                    45:49:1a:67:32:fd:53:a9:de:01:73:74:53:d8:ca:
                    47:6b:40:ae:2e:53:c7:7b:cd:cd:12:67:42:ad:ac:
                    a9:c4:2f:55:c2:ae:34:81:a6:97:d2:32:bb:99:ff:
                    30:66:2a:e8:75:19:6e:34:43:39:83:50:20:27:79:
                    04:7b:68:5f:fe:5c:9a:82:cc:52:9c:3c:ac:6b:d7:
                    b3:d5:a1:78:61:d1:32:0d:a3:5e:1a:8d:bd:87:f6:
                    18:03:42:45:ce:71:88:0c:74:69:bd:0b:81:bb:e9:
                    70:a7:14:9d:89:b7:bb:37:01:d3:ac:10:4c:dc:5b:
                    dc:5b:fa:94:a4:37:6a:1e:af:c6:8e:29:2b:81:d7:
                    a2:65:2e:2d:bd:94:81:3b:c2:a1:98:03:a1:fa:9f:
                    82:c1:92:7a:16:6b:f3:e6:58:b7:bb:45:4a:89:58:
                    34:2f:f3:a8:69:17:ac:6c:29:95:41:e5:4c:d9:13:
                    95:03:69:1a:db:a8:74:04:50:48:18:2d:65:7b:7a:
                    2a:24:90:8a:75:75:e6:96:fb:cf:33:0b:c2:14:c7:
                    51:77:20:b1:2a:36:b3:97:4e:5b:74:17:8e:4e:c4:
                    6d:5f:71:e6:72:3b:fa:0c:17:1e:01:80:2f:73:1d:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:29:A1:56:6C:89:E2:70:12:74:67:27:4F:82:54:57:54:9D:81:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/5499cc7f-6f8f-325d-9218-b559a1bb39ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:9f:43:dd:23:65:32:ed:00:99:39:f2:0b:35:a8:d5:32:
         cc:de:10:8c:9b:aa:ee:42:70:07:37:00:08:ba:6f:24:44:ce:
         ab:62:2c:c0:61:8d:0d:50:78:bd:3a:e7:53:76:ec:3b:4e:55:
         e1:f3:70:72:35:b2:e5:dd:9a:2d:f2:07:d8:14:71:26:b0:62:
         7f:f0:75:09:6b:5c:bc:a8:3f:2b:e1:5e:43:05:4e:e4:22:25:
         6d:e0:81:55:f2:23:31:5c:cc:5e:74:15:3f:e8:0b:15:c0:4d:
         a9:d0:88:65:8a:ef:0c:11:ae:fc:34:be:c8:22:ad:07:96:9e:
         c1:71:ca:77:0e:b8:05:67:83:e3:c9:bb:85:45:0c:b0:2c:4e:
         ea:17:33:41:bc:74:15:29:f7:c2:bc:9a:25:17:f6:06:af:e5:
         d9:d9:34:6c:6e:ca:16:4a:06:e7:35:53:5b:fe:2b:6b:87:82:
         da:73:09:c7:8f:40:23:1f:ba:5d:4b:e4:c7:1c:94:70:9c:fe:
         d8:9b:12:0c:01:84:85:dc:22:4e:c8:15:79:a5:9e:3d:29:c4:
         64:0b:11:93:0f:3a:2c:0d:29:15:92:74:0c:bd:82:c7:69:02:
         6f:36:32:6e:0d:c2:f0:bd:cc:7a:a7:25:33:30:96:81:c5:ff:
         6c:9a:ed:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNGUeRjrr8a5bKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
YmE5NTE1MWItMjk2OS00ZDU0LTgwMmUtNDA5MDRiYzhmZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwkL7TMvCi/JtMJxN3FFSRpnMv1Tqd4Bc3RT
2MpHa0CuLlPHe83NEmdCraypxC9Vwq40gaaX0jK7mf8wZirodRluNEM5g1AgJ3kE
e2hf/lyagsxSnDysa9ez1aF4YdEyDaNeGo29h/YYA0JFznGIDHRpvQuBu+lwpxSd
ibe7NwHTrBBM3FvcW/qUpDdqHq/GjikrgdeiZS4tvZSBO8KhmAOh+p+CwZJ6Fmvz
5li3u0VKiVg0L/OoaResbCmVQeVM2ROVA2ka26h0BFBIGC1le3oqJJCKdXXmlvvP
MwvCFMdRdyCxKjazl05bdBeOTsRtX3Hmcjv6DBceAYAvcx2j8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8poVZsieJwEnRnJ0+CVFdUnYFMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTQ5OWNjN2YtNmY4Zi0z
MjVkLTkyMTgtYjU1OWExYmIzOWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADG6n0PdI2Uy7QCZOfILNajVMszeEIybqu5CcAc3AAi6byREzqtiLMBh
jQ1QeL0651N27DtOVeHzcHI1suXdmi3yB9gUcSawYn/wdQlrXLyoPyvhXkMFTuQi
JW3ggVXyIzFczF50FT/oCxXATanQiGWK7wwRrvw0vsgirQeWnsFxyncOuAVng+PJ
u4VFDLAsTuoXM0G8dBUp98K8miUX9gav5dnZNGxuyhZKBuc1U1v+K2uHgtpzCceP
QCMful1L5McclHCc/tibEgwBhIXcIk7IFXmlnj0pxGQLEZMPOiwNKRWSdAy9gsdp
Am82Mm4NwvC9zHqnJTMwloHF/2ya7Xc=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:12 2026 by rpki-client