Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/8499cd78-8df9-3e49-8ccf-ff59955d420f.roa
File:                     8499cd78-8df9-3e49-8ccf-ff59955d420f.roa (raw, json)
Hash identifier:          1+j6WqNnzEuu4xeMEPCnmH1MoQ0SYDk4ed6fwlE67bw=
Subject key identifier:   CA:41:F5:F2:29:91:B8:01:8B:43:6E:F7:90:63:5F:20:82:63:BA:3F
Certificate issuer:       /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf
Certificate serial:       010D0C9F4328584E54D1677945F8F726BCB84040
Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/8499cd78-8df9-3e49-8ccf-ff59955d420f.roa
Signing time:             Mon 29 Jun 2026 09:58:20 +0000
ROA not before:           Mon 29 Jun 2026 09:58:20 +0000
ROA not after:            Sun 27 Sep 2026 09:58:20 +0000
asID:                     14618
IP address blocks:        208.72.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:d1:67:79:45:f8:f7:26:bc:b8:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf
        Validity
            Not Before: Jun 29 09:58:20 2026 GMT
            Not After : Sep 27 09:58:20 2026 GMT
        Subject: CN=1293ef65-1505-4d45-8781-95c8a3824e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:82:c3:30:4a:e4:41:88:57:0c:93:b4:d6:
                    c4:a9:65:31:a7:49:73:90:3e:d8:98:9f:5c:b4:ec:
                    a0:4a:21:38:ea:54:93:59:00:1f:41:32:5c:8c:b4:
                    5c:19:30:96:dd:0d:8d:f1:2f:cf:41:06:7a:25:20:
                    09:b0:6d:a7:3c:81:6f:2f:ae:47:0f:82:fd:5d:0e:
                    a9:a4:ef:a3:bd:ec:e0:95:89:d3:eb:ed:61:35:63:
                    9f:03:de:6d:62:f8:df:3c:4d:39:79:3c:15:e4:8a:
                    cc:57:22:ab:ad:3b:3d:37:d9:13:39:6b:c4:d2:ff:
                    c3:a4:93:44:3f:a9:ef:09:e1:20:6f:98:b2:d9:34:
                    f8:70:18:6b:53:89:a0:a2:cd:87:48:6d:c5:2d:7b:
                    ee:c1:a3:41:a0:f9:00:c5:f1:d7:65:0c:20:ee:d0:
                    da:5c:ab:14:32:5a:88:3c:8a:b9:40:ba:ba:b5:17:
                    5c:5c:8d:94:14:35:fc:0a:a8:34:75:c1:16:cc:4e:
                    5c:91:53:31:6b:81:12:33:5d:bc:8a:f3:cc:4f:79:
                    4a:4e:1a:8d:84:8e:b6:99:d3:15:8c:de:b2:96:a2:
                    13:2c:e1:6f:7e:ed:c4:49:dd:30:06:1b:57:2c:ae:
                    7d:4b:b7:89:c3:b3:5c:d8:ee:e4:56:bc:21:08:db:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:F5:F2:29:91:B8:01:8B:43:6E:F7:90:63:5F:20:82:63:BA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/8499cd78-8df9-3e49-8ccf-ff59955d420f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl

            X509v3 Authority Key Identifier:
                keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:76:44:63:0a:0b:ec:dc:3d:1a:5b:10:0e:e0:a1:d3:2f:d4:
         b2:87:27:5f:b4:1e:58:a6:1e:72:95:af:18:04:37:f3:42:33:
         25:63:ee:68:c6:28:d5:e3:b7:6e:b7:b1:44:68:02:2a:44:3e:
         07:6c:c3:28:fa:de:f6:16:06:5e:86:2c:d5:c8:15:85:c4:cc:
         dd:48:aa:a0:53:1e:13:a3:41:5a:fd:17:46:2a:0e:b0:b0:79:
         8f:34:99:89:03:b6:51:79:bd:39:c7:5a:85:27:75:60:77:1e:
         ea:da:32:26:8b:12:eb:36:a3:7d:56:84:95:37:56:94:13:f0:
         10:fa:47:c1:3e:63:75:02:20:6e:8c:70:cc:66:64:40:96:45:
         08:4b:c9:50:66:71:c8:d9:e1:7f:5c:2b:e1:72:63:29:cc:0c:
         aa:2c:88:47:15:ae:92:4a:9f:27:b6:0b:2e:bb:6b:7b:cb:ec:
         48:e1:c7:3e:a8:1d:6f:e8:99:1d:7b:da:60:16:b2:50:fb:4e:
         68:c2:95:db:49:2f:bd:a0:db:47:af:45:2c:0b:14:df:e0:a8:
         02:e6:5b:45:07:06:b9:a5:b2:d3:99:96:5d:3f:8f:98:23:81:
         00:ac:fd:44:bf:80:e4:9b:93:99:6b:ea:dd:36:29:a2:a4:ab:
         f6:5b:a2:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5U0Wd5Rfj3Jry4QEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz
MGNmMB4XDTI2MDYyOTA5NTgyMFoXDTI2MDkyNzA5NTgyMFowLzEtMCsGA1UEAxMk
MTI5M2VmNjUtMTUwNS00ZDQ1LTg3ODEtOTVjOGEzODI0ZTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG2CwzBK5EGIVwyTtNbEqWUxp0lzkD7YmJ9c
tOygSiE46lSTWQAfQTJcjLRcGTCW3Q2N8S/PQQZ6JSAJsG2nPIFvL65HD4L9XQ6p
pO+jvezglYnT6+1hNWOfA95tYvjfPE05eTwV5IrMVyKrrTs9N9kTOWvE0v/DpJNE
P6nvCeEgb5iy2TT4cBhrU4mgos2HSG3FLXvuwaNBoPkAxfHXZQwg7tDaXKsUMlqI
PIq5QLq6tRdcXI2UFDX8Cqg0dcEWzE5ckVMxa4ESM128ivPMT3lKThqNhI62mdMV
jN6ylqITLOFvfu3ESd0wBhtXLK59S7eJw7Nc2O7kVrwhCNsapwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpB9fIpkbgBi0Nu95BjXyCCY7o/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4
YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvODQ5OWNkNzgtOGRmOS0z
ZTQ5LThjY2YtZmY1OTk1NWQ0MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5
YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl
MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy
MDY1ZTMwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEd2RGMKC+zcPRpbEA7godMv1LKHJ1+0HlimHnKVrxgEN/NCMyVj7mjG
KNXjt263sURoAipEPgdswyj63vYWBl6GLNXIFYXEzN1IqqBTHhOjQVr9F0YqDrCw
eY80mYkDtlF5vTnHWoUndWB3HuraMiaLEus2o31WhJU3VpQT8BD6R8E+Y3UCIG6M
cMxmZECWRQhLyVBmccjZ4X9cK+FyYynMDKosiEcVrpJKnye2Cy67a3vL7Ejhxz6o
HW/omR172mAWslD7TmjCldtJL72g20evRSwLFN/gqALmW0UHBrmlstOZll0/j5gj
gQCs/US/gOSbk5lr6t02KaKkq/Zboqs=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:47 2026 by rpki-client