Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa
File:                     1f540c2b-f534-33a0-842f-d53e1f00041d.roa (raw, json)
Hash identifier:          tuqOFgWbAbfqd0g9O1TH/TAD3WLIIuBfNfcWr63+vNM=
Subject key identifier:   42:1F:49:C4:6B:3F:C3:77:AC:55:B5:13:94:90:7B:8C:E2:BD:A3:6A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EB84760497607B74B660E1B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        72.192.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:60:49:76:07:b7:4b:66:0e:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=408fe87e-93f9-4ec5-b3cf-fb8f0580dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:9f:9e:ed:36:70:06:54:98:56:df:e3:a5:
                    bc:aa:9b:7c:c9:6a:ee:92:ca:44:b1:17:98:66:06:
                    6e:69:bb:7b:75:b0:f0:9f:1f:5c:0a:fc:66:2a:75:
                    cb:cc:10:76:b4:54:04:06:b6:3f:cc:69:bb:f5:e5:
                    12:cd:f0:f3:e6:c7:4f:d7:87:9e:a9:38:73:55:9f:
                    fd:b3:74:5d:39:ef:a2:e0:72:11:d1:6b:ce:2d:2b:
                    24:ac:b0:7d:89:f6:9e:b8:63:47:e1:8a:ba:ec:27:
                    7f:bc:88:47:fb:0e:bd:27:10:38:22:81:56:77:74:
                    95:cd:36:13:ef:e1:0d:0b:b8:d5:60:98:ef:df:3d:
                    95:d5:82:6c:40:70:7a:99:b6:7c:3e:ab:3c:02:b7:
                    51:ca:c8:5f:29:5c:5a:60:a1:38:19:bd:80:ec:41:
                    5d:09:5f:ae:2b:4f:e1:e9:be:75:a2:70:53:d1:61:
                    ef:e9:33:be:17:eb:e9:ed:af:e2:fb:3b:a2:46:2f:
                    9b:eb:b6:37:29:08:00:2e:a5:9a:c0:55:8a:c5:f2:
                    0b:6e:4c:56:80:c2:92:d5:2f:e6:8c:15:c3:cb:7f:
                    a5:9c:74:6e:6d:8e:8b:f7:06:59:9a:aa:bf:08:b7:
                    1a:7f:8c:2b:17:9a:3c:22:cd:60:24:2c:5a:f5:29:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:49:C4:6B:3F:C3:77:AC:55:B5:13:94:90:7B:8C:E2:BD:A3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f540c2b-f534-33a0-842f-d53e1f00041d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:38:f0:f8:ad:0e:2d:e9:fe:57:95:b8:47:ab:8c:44:ea:
         b5:7f:6c:6d:1a:3d:00:73:93:e7:71:96:92:92:7c:d9:5c:69:
         ee:ac:9c:97:43:95:54:c1:14:4a:54:ba:0f:91:32:3e:1c:5b:
         35:7a:6a:6e:f9:57:08:3e:ac:6a:14:24:c3:73:7f:b6:c8:8e:
         c5:89:78:27:ea:f6:65:c3:22:b1:40:d6:62:92:ca:64:97:b6:
         79:15:49:e9:43:b9:03:e8:3c:c2:0c:12:7c:25:4c:5d:dc:95:
         5f:bc:72:65:25:48:c9:04:9c:ba:01:6c:1c:ab:cd:99:1f:8d:
         df:9f:f5:58:8f:48:a5:48:2f:b7:90:c8:04:3f:56:bb:00:7e:
         8c:fc:a9:c2:8e:9e:27:71:22:ba:0a:c4:30:f2:bd:a4:aa:ac:
         b8:a7:a1:4f:ab:89:29:27:70:46:25:3b:64:9d:40:c3:b8:30:
         65:cb:a0:5c:68:e0:61:13:b9:c1:8a:ea:39:5a:4c:dc:8b:19:
         95:b4:30:ba:61:c4:aa:98:3a:31:62:9b:30:fd:04:23:e2:01:
         41:ab:17:a5:c0:95:25:b3:0a:3f:d1:0b:ad:93:25:8d:a6:9e:
         90:99:88:09:c2:dd:5b:54:0a:2f:5a:1f:fe:0b:c3:e5:de:0e:
         cb:78:86:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R2BJdge3S2YOG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
NDA4ZmU4N2UtOTNmOS00ZWM1LWIzY2YtZmI4ZjA1ODBkYWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYqfnu02cAZUmFbf46W8qpt8yWrukspEsReY
ZgZuabt7dbDwnx9cCvxmKnXLzBB2tFQEBrY/zGm79eUSzfDz5sdP14eeqThzVZ/9
s3RdOe+i4HIR0WvOLSskrLB9ifaeuGNH4Yq67Cd/vIhH+w69JxA4IoFWd3SVzTYT
7+ENC7jVYJjv3z2V1YJsQHB6mbZ8Pqs8ArdRyshfKVxaYKE4Gb2A7EFdCV+uK0/h
6b51onBT0WHv6TO+F+vp7a/i+zuiRi+b67Y3KQgALqWawFWKxfILbkxWgMKS1S/m
jBXDy3+lnHRubY6L9wZZmqq/CLcaf4wrF5o8Is1gJCxa9SnkIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIfScRrP8N3rFW1E5SQe4zivaNqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY1NDBjMmItZjUzNC0z
M2EwLTg0MmYtZDUzZTFmMDAwNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMA0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFlOPD4rQ4t6f5XlbhHq4xE6rV/bG0aPQBzk+dxlpKSfNlcae6snJdD
lVTBFEpUug+RMj4cWzV6am75Vwg+rGoUJMNzf7bIjsWJeCfq9mXDIrFA1mKSymSX
tnkVSelDuQPoPMIMEnwlTF3clV+8cmUlSMkEnLoBbByrzZkfjd+f9ViPSKVIL7eQ
yAQ/VrsAfoz8qcKOnidxIroKxDDyvaSqrLinoU+riSkncEYlO2SdQMO4MGXLoFxo
4GETucGK6jlaTNyLGZW0MLphxKqYOjFimzD9BCPiAUGrF6XAlSWzCj/RC62TJY2m
npCZiAnC3VtUCi9aH/4Lw+XeDst4hoE=
-----END CERTIFICATE-----
Generated at Tue Aug 4 04:12:13 2026 by rpki-client