Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa
File:                     75321a74-4f0c-3885-90c2-7b2610a86a64.roa (raw, json)
Hash identifier:          ErZgUdrmYMcu2asnTcwknqpA1XL20kZfe8+N5M89PIQ=
Subject key identifier:   AF:F6:33:13:CA:74:E5:6C:75:62:23:37:85:9B:CC:41:BC:16:7B:59
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584DD3E2A22F74C8B5A81DA02F48
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa
Signing time:             Thu 14 May 2026 05:33:47 +0000
ROA not before:           Thu 14 May 2026 05:33:47 +0000
ROA not after:            Wed 12 Aug 2026 05:33:47 +0000
asID:                     62044
IP address blocks:        149.117.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:e2:a2:2f:74:c8:b5:a8:1d:a0:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: May 14 05:33:47 2026 GMT
            Not After : Aug 12 05:33:47 2026 GMT
        Subject: CN=1e50afb9-05db-49e1-9ec3-1ed9dd0122c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:2e:7a:da:f9:8b:60:79:4c:e3:d0:48:32:
                    75:d8:0f:98:06:48:14:cc:a0:bb:26:a5:5d:f0:16:
                    f8:d4:7c:ff:89:a3:c6:7f:23:09:ba:5a:d8:43:14:
                    aa:ee:a4:8e:bf:db:1f:62:cb:45:3e:07:40:38:73:
                    51:f9:6a:ec:7d:4a:f2:21:04:35:0c:ba:f4:56:58:
                    5e:5c:0f:71:75:82:61:96:05:20:47:f8:7b:5c:3d:
                    71:f7:75:ef:f6:7d:e6:38:d2:f1:5c:fb:aa:62:62:
                    e6:eb:ce:cc:f1:5a:fe:cb:ce:3a:9f:42:c9:07:38:
                    40:17:8a:67:04:b5:e5:1a:12:3f:01:3f:57:66:9a:
                    73:64:f2:d6:ad:a6:f0:5a:e6:47:bb:04:8d:4b:3b:
                    d4:09:7f:76:d0:c7:ee:7d:7e:47:6f:c1:f5:69:c1:
                    d0:10:56:a7:7e:a2:bd:8e:af:0a:f0:46:f6:c0:aa:
                    e4:66:5f:f1:ed:c8:50:0f:11:60:aa:3a:f0:28:96:
                    a4:6a:de:51:79:a3:fe:80:d1:70:8f:30:84:26:d4:
                    6b:de:64:19:e9:03:22:a0:2c:a9:44:f7:06:15:a8:
                    5d:e8:93:d0:51:7e:2f:2d:9d:dc:48:b9:c2:11:0c:
                    74:f8:fa:5d:5a:fe:b9:0e:55:85:00:c4:4a:a9:76:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:33:13:CA:74:E5:6C:75:62:23:37:85:9B:CC:41:BC:16:7B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:60:4d:83:b3:e0:bd:6f:e2:d5:0f:6a:f0:83:88:69:98:
         23:fb:b3:e0:1a:0c:2f:93:bf:5a:71:37:1d:77:bb:63:9d:cf:
         b7:9f:41:22:56:38:d4:65:07:e0:29:b6:1d:6a:49:a3:ca:eb:
         59:21:77:ad:37:6e:96:b2:15:d5:38:75:a9:a1:05:57:ad:90:
         28:bb:bb:9d:9d:6e:45:db:a7:9c:06:86:a4:c3:7a:2f:f4:77:
         2e:fe:3f:66:4a:27:7f:eb:29:32:40:47:94:ee:91:c1:f5:7c:
         aa:7e:e6:e8:08:0d:f7:6f:9b:3c:63:c5:97:be:76:de:21:b2:
         42:ea:1f:5d:50:78:75:12:f0:57:e2:a3:4a:cc:7d:69:5f:5c:
         70:c7:18:f1:3e:4d:55:6e:b8:cd:97:f9:ca:89:cc:a0:d4:dd:
         6d:e8:38:f3:2c:35:45:f2:c1:5b:5b:ba:fc:79:f1:5c:0d:fd:
         2f:46:64:13:6c:bc:4f:b6:56:21:70:e5:37:39:d1:8c:d9:9c:
         f3:47:7b:bc:ff:73:1a:8c:d3:7b:dc:c7:d2:20:77:0c:6f:9c:
         5b:fc:2c:3f:7c:50:46:7f:9d:b2:45:53:43:47:fd:c5:15:c3:
         ac:d7:eb:f7:ac:1f:21:68:66:f1:30:95:60:b2:e9:66:24:db:
         d1:97:8e:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3T4qIvdMi1qB2gL0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3
NTgzMB4XDTI2MDUxNDA1MzM0N1oXDTI2MDgxMjA1MzM0N1owLzEtMCsGA1UEAxMk
MWU1MGFmYjktMDVkYi00OWUxLTllYzMtMWVkOWRkMDEyMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgIuetr5i2B5TOPQSDJ12A+YBkgUzKC7JqVd
8Bb41Hz/iaPGfyMJulrYQxSq7qSOv9sfYstFPgdAOHNR+WrsfUryIQQ1DLr0Vlhe
XA9xdYJhlgUgR/h7XD1x93Xv9n3mONLxXPuqYmLm687M8Vr+y846n0LJBzhAF4pn
BLXlGhI/AT9XZppzZPLWrabwWuZHuwSNSzvUCX920MfufX5Hb8H1acHQEFanfqK9
jq8K8Eb2wKrkZl/x7chQDxFgqjrwKJakat5ReaP+gNFwjzCEJtRr3mQZ6QMioCyp
RPcGFahd6JPQUX4vLZ3cSLnCEQx0+PpdWv65DlWFAMRKqXa8awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/2MxPKdOVsdWIjN4WbzEG8FntZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk
NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvNzUzMjFhNzQtNGYwYy0z
ODg1LTkwYzItN2IyNjEwYTg2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx
ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0
NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2
MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXWnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwgYE2Ds+C9b+LVD2rwg4hpmCP7s+AaDC+Tv1pxNx13u2Odz7efQSJW
ONRlB+Apth1qSaPK61khd603bpayFdU4damhBVetkCi7u52dbkXbp5wGhqTDei/0
dy7+P2ZKJ3/rKTJAR5TukcH1fKp+5ugIDfdvmzxjxZe+dt4hskLqH11QeHUS8Ffi
o0rMfWlfXHDHGPE+TVVuuM2X+cqJzKDU3W3oOPMsNUXywVtbuvx58VwN/S9GZBNs
vE+2ViFw5Tc50YzZnPNHe7z/cxqM03vcx9IgdwxvnFv8LD98UEZ/nbJFU0NH/cUV
w6zX6/esHyFoZvEwlWCy6WYk29GXjvg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:08:19 2026 by rpki-client