Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
File:                     5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa (raw, json)
Hash identifier:          YHXoMy6CHTF4yy2WZuR7GUGdVsj2XTiHxSwxy69Qos0=
Subject key identifier:   74:74:B5:49:76:40:8F:31:54:62:67:0A:32:45:25:D5:3B:BB:31:52
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA79012BA8E03B3DCA9DA7910
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        65.39.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:12:ba:8e:03:b3:dc:a9:da:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d7a5605-9f55-4672-8cb9-507753bdc4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:ca:3b:e0:e5:bc:a8:5f:2f:d2:cb:c3:11:
                    18:38:00:34:15:29:bb:e2:3c:0c:90:3c:3b:5f:1c:
                    91:e8:87:bc:e8:04:f1:84:ea:fe:c1:84:32:db:d6:
                    1d:03:51:ee:59:a1:7e:8c:b4:bc:95:6d:55:d5:31:
                    11:63:3b:20:8c:d9:59:49:d7:ba:19:2c:bd:75:8e:
                    82:18:cc:b0:17:fc:ac:9c:7a:32:cb:cf:15:61:89:
                    76:76:2c:81:72:b2:a7:b9:45:0c:f7:5c:4d:d6:34:
                    7e:81:5a:93:61:0c:2c:31:6a:9d:f5:7f:b3:9e:f3:
                    19:8d:9a:cd:03:cf:20:ed:5e:fa:75:c4:b9:3f:76:
                    30:07:79:af:ad:54:bf:96:63:49:37:5e:6e:cd:57:
                    43:8c:c0:80:84:f5:78:11:aa:50:9d:39:29:4f:d1:
                    76:80:7d:9b:7f:59:f4:5c:bc:78:62:8c:35:56:06:
                    0a:b8:5c:2f:cc:b4:14:a7:99:ed:e2:e3:56:e6:cc:
                    6f:54:9b:00:24:e9:bd:b9:95:af:61:0f:92:ed:ff:
                    f6:3d:ce:df:c9:49:09:41:57:34:ce:59:07:3c:d6:
                    8c:b6:dd:32:e0:8d:2e:07:4b:df:0c:3a:62:cb:16:
                    cd:ec:3e:b8:00:28:cd:3e:fa:78:85:bd:82:c4:33:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:B5:49:76:40:8F:31:54:62:67:0A:32:45:25:D5:3B:BB:31:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:78:f6:07:e4:f2:ad:80:f4:20:06:54:23:84:6f:6f:ab:
         9f:0b:94:b9:95:1f:ed:2e:5e:7d:62:48:38:ea:40:38:c7:41:
         42:ee:e4:a0:82:eb:b3:c6:37:a1:48:8a:95:41:fe:64:3e:07:
         3b:b3:be:9b:52:19:ae:ce:6d:9a:db:58:b5:2c:05:5e:45:70:
         31:7c:dc:e8:0a:ff:79:2d:33:65:96:6a:cf:b2:b1:70:11:99:
         96:a8:9b:7d:27:de:64:df:97:24:67:fb:7a:52:d6:2e:da:dc:
         9b:56:51:7b:06:7f:b1:c8:f5:17:ba:f6:83:cd:c1:c2:82:2e:
         df:80:46:58:c2:6b:7e:9e:fb:0f:05:db:7a:7b:ca:f0:2b:ed:
         cc:0f:a6:e1:f6:7e:7a:90:b8:d8:04:94:80:2e:5f:bc:a5:5a:
         42:7b:3e:aa:07:b3:a1:35:0b:c5:4d:52:c6:7e:d4:2b:f2:89:
         10:da:45:4d:d7:60:02:65:90:c4:6b:0d:1f:d8:c2:3d:52:6d:
         7f:f6:37:bc:d4:b2:0b:d5:07:d6:06:3c:fb:9b:fa:53:c8:45:
         bd:62:db:e8:22:b0:db:14:ec:2f:44:ae:b7:3e:cb:52:61:ac:
         09:53:94:c3:d8:6f:6d:ea:d5:61:fc:b7:ee:81:aa:a8:e1:58:
         c1:93:7b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkBK6jgOz3KnaeRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGQ3YTU2MDUtOWY1NS00NjcyLThjYjktNTA3NzUzYmRjNGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVzKO+DlvKhfL9LLwxEYOAA0FSm74jwMkDw7
XxyR6Ie86ATxhOr+wYQy29YdA1HuWaF+jLS8lW1V1TERYzsgjNlZSde6GSy9dY6C
GMywF/ysnHoyy88VYYl2diyBcrKnuUUM91xN1jR+gVqTYQwsMWqd9X+znvMZjZrN
A88g7V76dcS5P3YwB3mvrVS/lmNJN15uzVdDjMCAhPV4EapQnTkpT9F2gH2bf1n0
XLx4Yow1VgYKuFwvzLQUp5nt4uNW5sxvVJsAJOm9uZWvYQ+S7f/2Pc7fyUkJQVc0
zlkHPNaMtt0y4I0uB0vfDDpiyxbN7D64ACjNPvp4hb2CxDNvhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHR0tUl2QI8xVGJnCjJFJdU7uzFSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNWIxYmQ3ZGQtM2YwMC0z
YTNjLTkyMmMtZjdlZTEzMWU2MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiyePYH5PKtgPQgBlQjhG9vq58LlLmVH+0uXn1iSDjqQDjHQULu5KCC
67PGN6FIipVB/mQ+BzuzvptSGa7ObZrbWLUsBV5FcDF83OgK/3ktM2WWas+ysXAR
mZaom30n3mTflyRn+3pS1i7a3JtWUXsGf7HI9Re69oPNwcKCLt+ARljCa36e+w8F
23p7yvAr7cwPpuH2fnqQuNgElIAuX7ylWkJ7PqoHs6E1C8VNUsZ+1CvyiRDaRU3X
YAJlkMRrDR/Ywj1SbX/2N7zUsgvVB9YGPPub+lPIRb1i2+gisNsU7C9Errc+y1Jh
rAlTlMPYb23q1WH8t+6BqqjhWMGTe4Q=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:46 2026 by rpki-client