Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7c03faa0-9dbd-3b5d-b64c-c3fa2923d736.roa
File:                     7c03faa0-9dbd-3b5d-b64c-c3fa2923d736.roa (raw, json)
Hash identifier:          pd6vUowFC26thkNd6Z0GaH5s63rgvyhJwpcbLyBEYPk=
Subject key identifier:   2D:D3:EE:EE:3D:C9:B2:24:E6:48:3A:9A:A1:6A:5F:AE:F5:8C:29:C2
Certificate issuer:       /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18
Certificate serial:       010D0C9F4328584F1B451FC98AF27F124DF77CC0
Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7c03faa0-9dbd-3b5d-b64c-c3fa2923d736.roa
Signing time:             Tue 08 Sep 2026 12:01:33 +0000
ROA not before:           Tue 08 Sep 2026 12:01:33 +0000
ROA not after:            Mon 07 Dec 2026 13:01:33 +0000
asID:                     53292
IP address blocks:        208.64.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:45:1f:c9:8a:f2:7f:12:4d:f7:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18
        Validity
            Not Before: Sep  8 12:01:33 2026 GMT
            Not After : Dec  7 13:01:33 2026 GMT
        Subject: CN=1ad8fe44-da07-40b0-af86-c27600f15ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4d:13:ed:65:ba:6a:d7:41:41:d4:2b:10:d9:
                    8b:83:44:bc:84:30:4d:f2:49:6d:e8:64:9a:ca:7d:
                    ac:3a:d0:f4:b9:6a:dd:94:65:4f:4e:2c:65:ba:44:
                    4a:a9:9d:32:58:e2:9e:1a:01:23:2c:94:e6:5b:64:
                    88:09:f8:1b:6c:db:2f:f6:45:e2:8e:0f:a1:e0:74:
                    c3:46:52:79:b2:0b:40:0b:a7:3f:14:2d:88:59:61:
                    c7:8e:ab:36:c7:5b:49:cf:42:aa:b6:28:97:84:71:
                    3a:8e:73:ae:f0:3b:a7:de:ee:5c:6e:55:58:17:87:
                    fc:81:72:56:d6:32:84:21:84:66:e0:0b:73:b4:b6:
                    22:7b:64:86:be:c5:da:b8:b5:04:00:6b:9b:ab:a0:
                    05:4a:0b:2e:0c:ee:eb:4c:36:bc:41:2f:49:d7:23:
                    d2:4a:22:6f:63:88:cf:bc:d5:9d:fd:92:8d:9d:5d:
                    de:1b:19:da:ff:a2:3d:ec:a6:64:a5:eb:52:e2:61:
                    65:ff:dd:26:77:cb:5d:29:6b:f3:4f:d6:83:bf:f1:
                    35:c1:c4:31:a3:89:af:73:a1:3a:c0:39:f4:05:12:
                    ba:7e:e3:76:f3:41:46:ea:d2:cb:b8:87:ca:88:61:
                    6c:47:68:c6:15:81:be:a1:78:0f:08:a4:1b:fd:94:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:EE:EE:3D:C9:B2:24:E6:48:3A:9A:A1:6A:5F:AE:F5:8C:29:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7c03faa0-9dbd-3b5d-b64c-c3fa2923d736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl

            X509v3 Authority Key Identifier:
                keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:15:0d:b4:69:60:2c:5c:db:09:33:ba:32:60:bc:59:07:
         93:de:1f:a2:00:85:0a:7b:cc:e6:c1:0b:ba:dd:91:05:3b:2f:
         5b:d8:6b:55:58:25:d8:d9:0f:59:57:7c:d5:1d:53:aa:60:2f:
         6c:cf:8c:17:d1:7e:ad:69:12:3d:05:0e:89:55:26:73:e0:29:
         dc:04:96:6b:8b:69:da:78:de:61:a6:4d:9d:cd:14:0c:f2:ba:
         6a:59:79:fe:3b:2d:3f:3a:00:b5:bb:d7:95:21:99:82:7e:3b:
         7b:51:de:f9:29:dc:ac:7b:da:73:f9:64:c8:9b:a4:0b:87:95:
         bd:25:4a:91:bd:1d:53:7a:9e:cd:1f:bc:1c:ef:5d:0c:ea:be:
         53:e8:73:80:86:ac:fa:a9:9c:6c:a1:c5:bd:e6:26:55:18:12:
         e5:54:39:8b:95:b2:64:f8:19:b8:d6:79:3a:1a:ce:20:14:97:
         de:22:56:2f:fe:0e:ee:4a:66:16:33:9f:0a:9f:3f:ef:c7:d8:
         d0:ee:38:53:d8:6c:b8:85:78:e8:02:45:fc:b3:55:c3:2b:42:
         c5:fe:18:93:56:12:70:ce:28:5c:5e:6a:67:a3:24:fe:50:2f:
         d0:a6:96:c5:07:b0:d6:ae:c9:c7:d7:6c:86:d8:70:df:d5:23:
         7f:09:22:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR/JivJ/Ek33fMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0
YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk
MWFkOGZlNDQtZGEwNy00MGIwLWFmODYtYzI3NjAwZjE1ZmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj00T7WW6atdBQdQrENmLg0S8hDBN8klt6GSa
yn2sOtD0uWrdlGVPTixlukRKqZ0yWOKeGgEjLJTmW2SICfgbbNsv9kXijg+h4HTD
RlJ5sgtAC6c/FC2IWWHHjqs2x1tJz0KqtiiXhHE6jnOu8Dun3u5cblVYF4f8gXJW
1jKEIYRm4AtztLYie2SGvsXauLUEAGubq6AFSgsuDO7rTDa8QS9J1yPSSiJvY4jP
vNWd/ZKNnV3eGxna/6I97KZkpetS4mFl/90md8tdKWvzT9aDv/E1wcQxo4mvc6E6
wDn0BRK6fuN280FG6tLLuIfKiGFsR2jGFYG+oXgPCKQb/ZRYjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3T7u49ybIk5kg6mqFqX671jCnCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1
OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvN2MwM2ZhYTAtOWRiZC0z
YjVkLWI2NGMtYzNmYTI5MjNkNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk
ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2
NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj
ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EAkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH97FQ20aWAsXNsJM7oyYLxZB5PeH6IAhQp7zObBC7rdkQU7L1vYa1VY
JdjZD1lXfNUdU6pgL2zPjBfRfq1pEj0FDolVJnPgKdwElmuLadp43mGmTZ3NFAzy
umpZef47LT86ALW715UhmYJ+O3tR3vkp3Kx72nP5ZMibpAuHlb0lSpG9HVN6ns0f
vBzvXQzqvlPoc4CGrPqpnGyhxb3mJlUYEuVUOYuVsmT4GbjWeToaziAUl94iVi/+
Du5KZhYznwqfP+/H2NDuOFPYbLiFeOgCRfyzVcMrQsX+GJNWEnDOKFxeamejJP5Q
L9CmlsUHsNauycfXbIbYcN/VI38JIuI=
-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:04 2026 by rpki-client