Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa
File:                     42b52b8c-914a-371b-99cf-3843b9917007.roa (raw, json)
Hash identifier:          G/G1GGgJ9b/VRS/IcD5JFzE/Qk8X+17egFu7yvYvPz8=
Subject key identifier:   FE:67:CC:3A:8C:61:07:13:3A:1A:2A:D7:36:79:DD:2A:94:CF:3E:15
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584E6C6F686BE1434F4358324D80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     13768
IP address blocks:        64.34.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:68:6b:e1:43:4f:43:58:32:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=2d6f9ee9-5daf-42c6-9029-4fe3ff75c2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:f0:fe:be:d5:f3:95:a4:b2:7b:b4:c5:f5:
                    0a:82:25:91:ab:26:5e:66:3e:a8:58:21:8d:af:db:
                    fa:47:2f:d2:a8:0e:e3:33:d7:88:c2:c0:48:35:69:
                    eb:f3:52:35:2f:fd:df:06:21:f0:3a:e4:c7:5e:3a:
                    e1:6c:ce:c1:ef:c5:eb:ab:6b:fb:51:77:54:9e:32:
                    a2:0f:8d:34:cc:f2:72:1c:fd:90:eb:13:e1:b7:a8:
                    d6:80:a3:ad:a1:48:76:c1:9f:ea:36:79:ea:2a:5a:
                    7d:cf:91:57:01:01:a8:84:91:c2:97:90:ff:d4:9d:
                    b0:5a:ee:a5:f5:84:7e:e2:6e:2a:d8:8a:0c:43:b2:
                    f5:14:49:72:9f:20:58:4c:44:c6:b0:24:28:c8:eb:
                    fc:f1:f5:6c:02:93:df:44:3a:1b:07:54:cc:88:ed:
                    2e:c2:1d:1a:46:7f:52:18:3b:57:42:19:f1:2f:ca:
                    a6:22:51:52:cd:30:bb:67:d1:ff:b3:90:af:a9:0a:
                    b4:df:02:25:71:9b:1e:a7:1c:5e:04:90:2a:0e:12:
                    9b:09:26:35:de:a2:59:f6:4e:0b:98:74:24:12:27:
                    4c:4f:17:29:76:4f:ca:66:59:da:c0:75:9c:c3:f7:
                    14:33:19:49:79:35:b8:ea:22:97:eb:4d:c6:90:ee:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:67:CC:3A:8C:61:07:13:3A:1A:2A:D7:36:79:DD:2A:94:CF:3E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/42b52b8c-914a-371b-99cf-3843b9917007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:80:e9:7c:ff:dc:a8:f2:bb:12:7d:34:9c:da:48:09:04:be:
         ab:53:ff:06:9d:f1:cb:19:97:62:6b:74:2a:20:d1:20:76:ff:
         82:86:7e:01:00:92:ea:86:3d:bb:c0:f9:2f:92:6a:97:f8:cc:
         2e:cd:70:2a:fb:bb:ab:2a:24:c8:ce:68:65:bb:72:00:9c:cb:
         dd:29:fe:98:85:41:4f:ab:10:c2:ca:7d:68:db:e2:28:6c:4b:
         70:e5:ac:eb:89:b8:a1:cb:d4:eb:32:b5:36:d1:e0:d6:ae:8e:
         fa:dc:01:2e:3c:ff:ea:38:f8:cc:23:12:df:e6:29:21:98:ae:
         16:bb:2a:08:9e:76:da:3e:ac:fa:9c:0e:81:8b:c6:ab:bc:0c:
         a7:44:c6:6d:12:11:18:da:57:3c:f5:8b:ec:3e:a1:da:97:88:
         8d:7b:13:60:05:5e:a9:7f:e5:52:ac:e2:15:ff:43:48:b0:d7:
         14:08:3f:80:a4:99:a4:06:ff:9a:bb:50:fd:37:45:2e:0e:49:
         27:03:9b:c7:c3:fb:c9:8e:a1:9d:98:ee:d9:36:0b:c2:cd:9b:
         f6:c5:0d:b5:cb:01:c7:b1:bd:e8:3e:cb:52:28:01:6e:02:f7:
         43:18:ac:ce:4d:4e:76:2d:e2:72:4c:d1:13:22:f3:0c:86:81:
         a8:da:3f:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2hr4UNPQ1gyTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
MmQ2ZjllZTktNWRhZi00MmM2LTkwMjktNGZlM2ZmNzVjMmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Lw/r7V85Wksnu0xfUKgiWRqyZeZj6oWCGN
r9v6Ry/SqA7jM9eIwsBINWnr81I1L/3fBiHwOuTHXjrhbM7B78Xrq2v7UXdUnjKi
D400zPJyHP2Q6xPht6jWgKOtoUh2wZ/qNnnqKlp9z5FXAQGohJHCl5D/1J2wWu6l
9YR+4m4q2IoMQ7L1FElynyBYTETGsCQoyOv88fVsApPfRDobB1TMiO0uwh0aRn9S
GDtXQhnxL8qmIlFSzTC7Z9H/s5CvqQq03wIlcZsepxxeBJAqDhKbCSY13qJZ9k4L
mHQkEidMTxcpdk/KZlnawHWcw/cUMxlJeTW46iKX603GkO4TDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5nzDqMYQcTOhoq1zZ53SqUzz4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDJiNTJiOGMtOTE0YS0z
NzFiLTk5Y2YtMzg0M2I5OTE3MDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSA6Xz/3KjyuxJ9NJzaSAkEvqtT/wad8csZl2JrdCog0SB2/4KGfgEA
kuqGPbvA+S+Sapf4zC7NcCr7u6sqJMjOaGW7cgCcy90p/piFQU+rEMLKfWjb4ihs
S3DlrOuJuKHL1OsytTbR4NaujvrcAS48/+o4+MwjEt/mKSGYrha7Kgiedto+rPqc
DoGLxqu8DKdExm0SERjaVzz1i+w+odqXiI17E2AFXql/5VKs4hX/Q0iw1xQIP4Ck
maQG/5q7UP03RS4OSScDm8fD+8mOoZ2Y7tk2C8LNm/bFDbXLAcexveg+y1IoAW4C
90MYrM5NTnYt4nJM0RMi8wyGgajaP0A=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:08:35 2026 by rpki-client