Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/333e313b-2b06-3506-9559-f17ae88ee096.roa
File:                     333e313b-2b06-3506-9559-f17ae88ee096.roa (raw, json)
Hash identifier:          aXeHNkmJnx3gTWiaX4JnWzgEDX+iDvEx8s81XKYXS5o=
Subject key identifier:   0E:DB:E3:04:1C:D3:0A:BD:11:89:56:C6:ED:62:12:EE:60:E0:BC:E7
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5BAF553263200E44562F9200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/333e313b-2b06-3506-9559-f17ae88ee096.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     6461
IP address blocks:        66.62.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:55:32:63:20:0e:44:56:2f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=a916cac9-88d0-4951-a6e1-6b09b25050ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:49:05:d6:0e:fd:89:f5:60:83:39:0e:95:
                    ac:81:5c:b5:b7:d5:b6:02:90:ea:5f:c8:d1:56:a7:
                    b6:c1:78:45:71:df:b3:6d:c3:42:6c:ed:e9:74:5e:
                    59:48:d1:2e:ad:55:90:1a:7f:3e:65:bc:e7:05:47:
                    ef:54:a5:88:9c:40:82:12:40:be:62:4e:81:18:ee:
                    8a:8a:ea:1e:06:48:da:ba:42:4a:40:3a:4c:a0:96:
                    a7:e3:f6:59:8e:85:43:2d:b3:53:a3:f9:1c:a4:fc:
                    d2:05:b3:6b:e0:3a:34:ec:c8:59:76:66:06:ec:14:
                    e1:b8:41:59:10:09:d6:41:8f:bb:6d:4a:f8:c8:bb:
                    8e:f7:aa:a1:13:89:d5:7c:0c:b4:4b:b5:e5:dd:62:
                    bd:8d:34:05:af:38:14:ab:ff:a6:83:39:a9:1c:cd:
                    a0:5e:3d:0e:2b:a8:64:dd:f4:7b:1b:cb:cf:f1:88:
                    5e:fc:92:2a:99:c6:3c:f3:2a:69:f7:bb:3a:79:4b:
                    14:db:41:f5:ac:97:ae:42:df:b7:d2:79:bf:a2:2b:
                    1f:91:5f:18:06:ca:61:ca:63:47:28:51:92:a8:e9:
                    3f:d0:b9:a8:65:e9:a6:13:bb:f4:21:43:00:19:36:
                    bd:a2:dc:0c:34:b6:01:60:ca:ab:62:3c:f9:65:62:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:E3:04:1C:D3:0A:BD:11:89:56:C6:ED:62:12:EE:60:E0:BC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/333e313b-2b06-3506-9559-f17ae88ee096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:c5:2d:cd:8c:09:0f:d8:30:f0:09:f4:64:55:d9:38:9c:
         a2:45:07:08:15:4e:2c:95:26:5c:5d:85:98:ff:85:46:47:e9:
         71:4b:46:6b:d5:74:22:f6:c3:6a:02:48:df:99:16:29:3f:eb:
         74:41:35:fe:3c:8f:21:fe:58:79:11:a9:cd:5e:cc:d6:69:b8:
         94:88:b5:da:b3:3d:ef:c3:40:1c:e7:39:c6:b1:6f:4c:8d:4c:
         0e:f8:43:35:25:95:cf:90:eb:47:75:ae:96:df:97:73:af:31:
         f2:d9:16:8a:64:08:b5:ac:28:3d:b5:37:9e:f0:6b:bf:d9:e0:
         81:f5:cd:65:2c:d8:2c:67:2f:98:90:16:31:ad:59:e1:33:9b:
         38:49:ae:b1:f7:9f:e3:95:ac:c2:63:6c:81:20:cf:8a:9a:e8:
         42:b7:77:cd:9d:a1:6c:60:67:84:9e:9e:ce:a7:fe:49:bb:bd:
         f1:91:9c:45:d1:99:5d:80:e8:49:fa:c2:23:fd:fc:4b:76:78:
         6d:05:8a:0d:ac:c9:87:04:9b:c0:7a:2d:64:a5:19:6e:77:48:
         6d:b5:79:48:e3:30:b2:7d:b6:06:66:9a:fc:50:41:48:e2:ba:
         b9:b8:36:2d:7c:05:9d:32:4f:db:6e:64:18:22:99:65:61:3b:
         5d:d9:c3:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br1UyYyAORFYvkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
YTkxNmNhYzktODhkMC00OTUxLWE2ZTEtNmIwOWIyNTA1MGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDFJBdYO/Yn1YIM5DpWsgVy1t9W2ApDqX8jR
Vqe2wXhFcd+zbcNCbO3pdF5ZSNEurVWQGn8+ZbznBUfvVKWInECCEkC+Yk6BGO6K
iuoeBkjaukJKQDpMoJan4/ZZjoVDLbNTo/kcpPzSBbNr4Do07MhZdmYG7BThuEFZ
EAnWQY+7bUr4yLuO96qhE4nVfAy0S7Xl3WK9jTQFrzgUq/+mgzmpHM2gXj0OK6hk
3fR7G8vP8Yhe/JIqmcY88ypp97s6eUsU20H1rJeuQt+30nm/oisfkV8YBsphymNH
KFGSqOk/0LmoZemmE7v0IUMAGTa9otwMNLYBYMqrYjz5ZWKDGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7b4wQc0wq9EYlWxu1iEu5g4LznMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMzMzZTMxM2ItMmIwNi0z
NTA2LTk1NTktZjE3YWU4OGVlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj7uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOcxS3NjAkP2DDwCfRkVdk4nKJFBwgVTiyVJlxdhZj/hUZH6XFLRmvV
dCL2w2oCSN+ZFik/63RBNf48jyH+WHkRqc1ezNZpuJSItdqzPe/DQBznOcaxb0yN
TA74QzUllc+Q60d1rpbfl3OvMfLZFopkCLWsKD21N57wa7/Z4IH1zWUs2CxnL5iQ
FjGtWeEzmzhJrrH3n+OVrMJjbIEgz4qa6EK3d82doWxgZ4Sens6n/km7vfGRnEXR
mV2A6En6wiP9/Et2eG0Fig2syYcEm8B6LWSlGW53SG21eUjjMLJ9tgZmmvxQQUji
urm4Ni18BZ0yT9tuZBgimWVhO13Zw+4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:19 2026 by rpki-client