Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa
File:                     97434b93-2369-361d-87a9-8a907fb6aaf2.roa (raw, json)
Hash identifier:          EQ8l3CQjhlESGdgcXavzLCC8gii8OlyzKPAY0tvKBww=
Subject key identifier:   29:89:17:8E:F5:A8:CF:4B:E6:B5:29:90:41:2C:F3:1D:F7:28:CC:B0
Certificate issuer:       /CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
Certificate serial:       010D0C9F4328584EDC91DC27F4602CAA3BF340C0
Authority key identifier: 4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19766
IP address blocks:        66.51.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:dc:27:f4:60:2c:aa:3b:f3:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732f5ebd-63a7-4f6c-94c9-df796a848d66
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=6b01811a-f198-4d5e-9fb6-53f85c26f12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:11:8d:1f:cd:26:2a:d3:47:2c:23:59:98:
                    32:87:7f:12:36:e8:55:03:1d:20:a3:ab:c2:f0:e3:
                    96:f2:de:0b:c8:de:41:7d:9e:57:0e:6f:9c:af:fd:
                    31:20:2c:35:ed:7b:d4:d3:ad:02:01:ec:55:1e:04:
                    d7:f5:6b:93:a7:13:e9:d2:49:8a:62:de:b3:ee:70:
                    86:2d:f1:fc:a6:3a:bf:06:48:8a:9d:fd:eb:fe:55:
                    d9:23:88:b3:db:7b:14:e0:9f:76:e0:9d:78:c3:f8:
                    f3:6b:68:04:8b:86:ec:87:12:e1:95:de:0b:e3:4a:
                    f3:9f:8f:e2:91:09:5d:37:0c:90:a6:70:8f:f7:5e:
                    7e:d5:9b:2e:90:4c:5c:ad:e2:52:f8:8b:94:f0:e5:
                    3c:3d:04:11:c7:87:9d:36:15:c0:d3:e2:79:84:24:
                    82:2a:c6:30:cb:4d:3f:a3:0c:62:95:90:76:24:68:
                    78:4e:3c:dc:39:44:24:c5:7d:78:aa:52:e9:a1:52:
                    36:21:d5:f2:c6:09:65:ba:d1:5e:df:b5:30:e0:20:
                    89:f9:fb:bc:db:e0:17:41:fb:f7:cc:fc:d2:bc:cf:
                    8a:9a:ed:c0:c8:1a:f2:28:eb:cd:b8:18:ba:2a:50:
                    39:2a:3a:31:15:33:cc:e8:e4:d9:34:d6:86:c8:a4:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:89:17:8E:F5:A8:CF:4B:E6:B5:29:90:41:2C:F3:1D:F7:28:CC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/97434b93-2369-361d-87a9-8a907fb6aaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.crl

            X509v3 Authority Key Identifier:
                keyid:4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:7c:a0:a8:94:f6:58:4a:ed:6c:af:48:4e:47:d4:ba:d4:
         55:15:c2:dc:40:75:7b:25:4b:f1:7c:98:2c:d1:33:40:80:d1:
         0b:b7:06:a2:e1:61:e4:22:c3:44:6c:ee:0f:d5:8f:62:11:5f:
         7e:80:3f:d1:a3:71:d7:6b:39:ea:79:51:73:fd:8a:5c:e4:c8:
         f5:95:bc:05:e0:6f:fc:41:1e:34:cc:b2:4a:ee:02:31:32:03:
         3e:66:4b:6f:2e:50:bf:7f:ba:41:e8:ad:7b:71:1d:bc:98:29:
         cb:97:2a:e4:19:51:04:64:a6:7b:03:42:35:e8:cf:50:49:46:
         c0:97:7a:ea:70:b7:5e:7b:d5:fc:f7:43:fb:0d:86:ef:34:66:
         6c:19:27:ba:bc:c0:d1:bd:ba:c5:27:b3:5b:62:ec:fb:c5:b9:
         8d:7e:50:65:05:65:8a:59:cd:59:48:fd:17:ba:a9:97:17:78:
         37:0e:2b:c6:9c:b1:50:0b:52:3d:42:7f:3d:7e:6b:fc:b8:60:
         7d:fa:80:c6:35:25:e8:5a:18:18:05:10:61:25:88:83:3b:9d:
         9f:fc:df:42:90:4e:9c:f9:cc:7b:98:4b:cc:d9:fa:98:e8:dc:
         9d:4d:96:0a:04:d3:96:b2:2b:b7:c3:11:70:c1:b3:5a:b4:ea:
         46:78:e0:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckdwn9GAsqjvzQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyZjVlYmQtNjNhNy00ZjZjLTk0YzktZGY3OTZhODQ4
ZDY2MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NmIwMTgxMWEtZjE5OC00ZDVlLTlmYjYtNTNmODVjMjZmMTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DQRjR/NJirTRywjWZgyh38SNuhVAx0go6vC
8OOW8t4LyN5BfZ5XDm+cr/0xICw17XvU060CAexVHgTX9WuTpxPp0kmKYt6z7nCG
LfH8pjq/BkiKnf3r/lXZI4iz23sU4J924J14w/jza2gEi4bshxLhld4L40rzn4/i
kQldNwyQpnCP915+1ZsukExcreJS+IuU8OU8PQQRx4edNhXA0+J5hCSCKsYwy00/
owxilZB2JGh4TjzcOUQkxX14qlLpoVI2IdXyxgllutFe37Uw4CCJ+fu82+AXQfv3
zPzSvM+Kmu3AyBryKOvNuBi6KlA5KjoxFTPM6OTZNNaGyKRyEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmJF471qM9L5rUpkEEs8x33KMywMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83MzJm
NWViZC02M2E3LTRmNmMtOTRjOS1kZjc5NmE4NDhkNjYvOTc0MzRiOTMtMjM2OS0z
NjFkLTg3YTktOGE5MDdmYjZhYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzMyZjVlYmQtNjNhNy00ZjZjLTk0
YzktZGY3OTZhODQ4ZDY2LzczMmY1ZWJkLTYzYTctNGY2Yy05NGM5LWRmNzk2YTg0
OGQ2Ni5jcmwwHwYDVR0jBBgwFoAUTFRv0vqNswx9IJw63nBsmWpkEiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83MzJmNWViZC02M2E3LTRmNmMtOTRjOS1kZjc5
NmE4NDhkNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXrfKColPZYSu1sr0hOR9S61FUVwtxAdXslS/F8mCzRM0CA0Qu3BqLh
YeQiw0Rs7g/Vj2IRX36AP9GjcddrOep5UXP9ilzkyPWVvAXgb/xBHjTMskruAjEy
Az5mS28uUL9/ukHorXtxHbyYKcuXKuQZUQRkpnsDQjXoz1BJRsCXeupwt1571fz3
Q/sNhu80ZmwZJ7q8wNG9usUns1ti7PvFuY1+UGUFZYpZzVlI/Re6qZcXeDcOK8ac
sVALUj1Cfz1+a/y4YH36gMY1JehaGBgFEGEliIM7nZ/830KQTpz5zHuYS8zZ+pjo
3J1NlgoE05ayK7fDEXDBs1q06kZ44C0=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:51 2026 by rpki-client