Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa
File:                     fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa (raw, json)
Hash identifier:          utrsTpytJwTV0UQ+OiQFWuSrg/eyvKzYr2pSBkEzkwI=
Subject key identifier:   EB:B9:86:3C:2D:24:81:82:CA:E4:46:6F:D1:92:4B:33:A0:03:EC:23
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA787F22859E991ABBE3B0100
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395075
IP address blocks:        216.137.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f2:28:59:e9:91:ab:be:3b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd8ef338-30af-4114-82f6-8ec299515686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:be:85:e7:34:27:c8:64:a1:c2:7e:ea:32:
                    04:f8:b8:6a:70:8e:e8:d7:ac:1d:a4:d5:31:9a:5c:
                    52:94:f3:c9:aa:5f:1c:85:49:f4:00:05:dc:1b:62:
                    8b:05:45:00:9c:dd:e6:26:dc:91:5b:ef:c5:f4:fe:
                    25:3a:86:67:89:29:40:63:f0:56:3d:15:38:4a:77:
                    e3:27:a8:9a:99:39:d1:5c:6f:6f:dc:96:6e:68:5c:
                    5f:f9:38:de:15:d3:dc:0e:2a:64:11:0e:3e:b6:fc:
                    0d:0c:5d:0d:ce:3a:a8:b7:5e:be:95:04:b5:49:9a:
                    38:f6:3b:e2:0c:e7:8b:c9:a1:25:f4:69:64:b3:d7:
                    e9:9d:b8:ad:c4:7c:fc:2e:3c:94:44:58:93:cc:91:
                    63:29:29:19:8e:c7:e7:18:36:d4:44:ee:b7:40:68:
                    bf:51:8f:02:75:3f:43:66:b7:64:21:74:80:05:6e:
                    f1:1a:e8:38:14:18:11:a0:5d:20:26:b8:5c:78:4e:
                    a7:f9:cd:f3:2e:47:8a:19:d1:e9:21:bc:b7:e6:54:
                    0d:15:4b:58:3f:22:88:0b:4e:16:49:83:49:06:3a:
                    9c:01:68:69:68:ed:2b:59:5a:ba:63:18:7a:6e:2a:
                    73:d7:5c:9d:97:c5:5c:a4:c6:0e:2b:a8:0c:80:91:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:86:3C:2D:24:81:82:CA:E4:46:6F:D1:92:4B:33:A0:03:EC:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:9a:d5:7c:8a:d2:f6:c2:75:e9:f2:d2:e2:b0:20:ed:ca:
         f0:15:d0:38:eb:c0:23:06:e7:f3:64:2e:ed:d5:60:c4:e9:70:
         94:d3:79:a5:5e:02:dd:5b:56:0c:5b:fa:ff:8c:32:50:be:d9:
         42:6c:bd:17:b6:ea:3e:e5:14:b0:8c:32:7c:16:27:ac:d9:06:
         59:15:30:58:9c:e6:98:0a:80:20:e0:49:cf:3b:71:37:9b:68:
         db:f6:dd:d7:12:db:1b:63:37:d0:c7:cb:57:98:42:c3:93:2a:
         a0:36:18:76:b5:fb:9d:2d:ed:f1:69:18:a0:ee:bb:ca:47:11:
         7e:10:3b:1b:42:85:fa:0f:e9:aa:1c:64:95:ac:76:52:e3:cb:
         e5:15:bb:3a:18:62:fe:ad:f6:de:0d:be:cd:24:87:64:3a:09:
         d2:e7:c6:c5:c6:44:0d:f0:eb:4b:ee:12:fe:98:f3:ab:d9:b8:
         b6:7d:db:94:c4:0f:70:5b:ea:54:59:24:36:a6:8b:59:93:17:
         90:40:c2:1f:21:cb:1c:11:f7:87:97:d9:1b:a2:84:d1:3d:a0:
         e1:ab:d2:87:07:d6:0a:9f:cb:18:fe:d6:d0:f3:15:29:9d:87:
         03:0c:73:f4:a5:6e:12:60:e0:d2:d1:41:19:8c:ec:15:92:a3:
         de:51:5f:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/IoWemRq747AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2Q4ZWYzMzgtMzBhZi00MTE0LTgyZjYtOGVjMjk5NTE1Njg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFC+hec0J8hkocJ+6jIE+LhqcI7o16wdpNUx
mlxSlPPJql8chUn0AAXcG2KLBUUAnN3mJtyRW+/F9P4lOoZniSlAY/BWPRU4Snfj
J6iamTnRXG9v3JZuaFxf+TjeFdPcDipkEQ4+tvwNDF0Nzjqot16+lQS1SZo49jvi
DOeLyaEl9Glks9fpnbitxHz8LjyURFiTzJFjKSkZjsfnGDbURO63QGi/UY8CdT9D
ZrdkIXSABW7xGug4FBgRoF0gJrhceE6n+c3zLkeKGdHpIby35lQNFUtYPyKIC04W
SYNJBjqcAWhpaO0rWVq6Yxh6bipz11ydl8VcpMYOK6gMgJEhzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOu5hjwtJIGCyuRGb9GSSzOgA+wjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmIwZjMzYTgtNzg2Mi0z
ZjRjLWE2YmMtNDkwYjlkMzlhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ImmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtDmtV8itL2wnXp8tLisCDtyvAV0DjrwCMG5/NkLu3VYMTpcJTTeaVe
At1bVgxb+v+MMlC+2UJsvRe26j7lFLCMMnwWJ6zZBlkVMFic5pgKgCDgSc87cTeb
aNv23dcS2xtjN9DHy1eYQsOTKqA2GHa1+50t7fFpGKDuu8pHEX4QOxtChfoP6aoc
ZJWsdlLjy+UVuzoYYv6t9t4Nvs0kh2Q6CdLnxsXGRA3w60vuEv6Y86vZuLZ925TE
D3Bb6lRZJDami1mTF5BAwh8hyxwR94eX2RuihNE9oOGr0ocH1gqfyxj+1tDzFSmd
hwMMc/SlbhJg4NLRQRmM7BWSo95RX6U=
-----END CERTIFICATE-----
Generated at Sat Aug 8 22:38:27 2026 by rpki-client