Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
File:                     9b933b8a-dbdd-3487-9952-d09b51c4e640.roa (raw, json)
Hash identifier:          u8GHxMiOv2Ldyv4C3atvOHmbGXM/IXliGQKjq889T80=
Subject key identifier:   E3:34:D7:93:90:BB:36:FE:CF:0F:F5:40:D9:CC:F8:46:D1:8D:84:69
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F4328584E54B496625F1BE766A7123860
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     20454
IP address blocks:        69.160.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:96:62:5f:1b:e7:66:a7:12:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=0247e1ae-122d-4630-92e7-307f9bceb1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:cb:28:d8:00:1d:00:34:ab:5b:99:39:a2:
                    5d:c2:da:2c:44:d4:6d:f4:45:12:b5:cb:5e:05:7d:
                    6a:e6:05:df:e8:11:0b:2b:c1:24:3f:44:c1:da:77:
                    66:5d:a2:e1:2d:ae:36:7e:2c:09:fb:dc:0c:ff:6a:
                    b7:ec:a5:4c:62:0a:3b:bf:81:3c:dd:80:86:00:6a:
                    58:0e:2f:8e:03:1f:1a:db:04:e7:62:fe:3e:ee:48:
                    6e:78:c7:b3:6d:a9:35:01:be:67:07:65:bb:62:29:
                    be:f5:2b:7d:f0:09:f4:57:d5:7e:15:88:c2:3b:99:
                    dc:00:d0:ef:15:ba:6d:4b:60:86:b7:98:b7:ef:e8:
                    55:f3:36:0e:47:72:09:00:81:e9:6e:6a:ff:77:f5:
                    c2:b3:ce:a2:d6:b5:cd:99:a0:53:33:f6:10:1c:e4:
                    8c:ac:c5:f0:57:cb:64:7c:de:fe:fc:9e:2c:a6:fd:
                    6a:7b:2d:f1:9a:57:b6:ce:43:03:4e:05:6c:40:10:
                    5d:61:f0:63:c0:0b:38:76:1e:f4:a4:e3:e7:dd:c0:
                    0e:51:2c:ef:25:5c:7b:2c:d9:06:21:c0:1e:5e:e5:
                    10:ee:02:a0:71:81:49:cc:61:61:33:b2:61:39:55:
                    d7:46:d4:92:77:61:bf:7a:61:0a:ae:46:97:59:d5:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:D7:93:90:BB:36:FE:CF:0F:F5:40:D9:CC:F8:46:D1:8D:84:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:2c:0a:2c:d8:8b:55:13:71:ec:3e:00:8a:c9:a0:86:49:
         68:ff:82:f2:ed:ad:bd:ff:89:cc:c0:b9:87:78:cb:cc:d1:d8:
         55:1d:e0:f1:f7:d8:66:1b:c5:6b:18:70:80:3f:0e:63:a3:8f:
         e9:22:80:7d:f2:ac:87:07:25:28:9d:42:46:41:48:e2:9d:3a:
         df:e7:2b:96:21:1d:72:eb:0c:5c:2f:4b:5f:32:07:e6:df:c6:
         55:a4:9d:1e:d1:a9:18:8a:24:a3:6e:86:8a:f3:c0:e7:89:7c:
         7b:e5:33:81:ce:33:0c:4f:e5:02:37:c6:97:d1:1c:27:f6:fa:
         fc:8d:6b:ad:0a:8f:90:41:83:a8:fc:fb:8e:85:80:0b:bd:68:
         cd:e2:7c:ef:3d:0a:7c:9d:f7:de:a4:bc:44:bd:a2:30:47:2f:
         9a:4d:d7:cd:ab:47:a1:b4:91:45:0b:bc:05:67:14:83:a7:29:
         3f:fa:b2:3c:f2:2e:e1:8f:43:02:8c:78:1e:2a:01:48:3a:92:
         40:93:ad:0a:a7:c9:c2:07:7b:04:c5:38:26:59:c4:ee:79:39:
         b5:74:f5:75:05:79:dc:88:84:97:30:15:50:00:6e:11:b8:7d:
         53:8a:9a:4c:92:4d:d1:c2:ee:b9:18:ee:2c:be:bf:e2:d5:82:
         7f:15:6e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJZiXxvnZqcSOGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3
ODI5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MDI0N2UxYWUtMTIyZC00NjMwLTkyZTctMzA3ZjliY2ViMWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAnLKNgAHQA0q1uZOaJdwtosRNRt9EUStcte
BX1q5gXf6BELK8EkP0TB2ndmXaLhLa42fiwJ+9wM/2q37KVMYgo7v4E83YCGAGpY
Di+OAx8a2wTnYv4+7khueMezbak1Ab5nB2W7Yim+9St98An0V9V+FYjCO5ncANDv
FbptS2CGt5i37+hV8zYOR3IJAIHpbmr/d/XCs86i1rXNmaBTM/YQHOSMrMXwV8tk
fN7+/J4spv1qey3xmle2zkMDTgVsQBBdYfBjwAs4dh70pOPn3cAOUSzvJVx7LNkG
IcAeXuUQ7gKgcYFJzGFhM7JhOVXXRtSSd2G/emEKrkaXWdXFmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOM015OQuzb+zw/1QNnM+EbRjYRpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3
Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvOWI5MzNiOGEtZGJkZC0z
NDg3LTk5NTItZDA5YjUxYzRlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll
YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm
NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1
N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRaAkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTnLAos2ItVE3HsPgCKyaCGSWj/gvLtrb3/iczAuYd4y8zR2FUd4PH3
2GYbxWsYcIA/DmOjj+kigH3yrIcHJSidQkZBSOKdOt/nK5YhHXLrDFwvS18yB+bf
xlWknR7RqRiKJKNuhorzwOeJfHvlM4HOMwxP5QI3xpfRHCf2+vyNa60Kj5BBg6j8
+46FgAu9aM3ifO89Cnyd996kvES9ojBHL5pN182rR6G0kUULvAVnFIOnKT/6sjzy
LuGPQwKMeB4qAUg6kkCTrQqnycIHewTFOCZZxO55ObV09XUFedyIhJcwFVAAbhG4
fVOKmkySTdHC7rkY7iy+v+LVgn8VbnA=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:51 2026 by rpki-client