Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/323e04e8-8233-3d61-b8f4-9512d208f1d2.roa
File:                     323e04e8-8233-3d61-b8f4-9512d208f1d2.roa (raw, json)
Hash identifier:          CHyjDSy5TyzJsTaR4fLvlLu/gnhAhjk7M88bXFWN+f4=
Subject key identifier:   73:7B:E7:B6:59:F4:28:D4:42:C4:23:D3:11:D0:27:A5:89:90:3C:2A
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584EB8472FACF9686F16402BD980
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/323e04e8-8233-3d61-b8f4-9512d208f1d2.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.186.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:2f:ac:f9:68:6f:16:40:2b:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=e47357f6-0393-40f6-9899-284f952f10e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:bf:b5:9b:e6:30:9f:3e:54:05:1a:27:54:
                    23:a7:68:4b:c9:75:0d:6d:58:ec:47:31:ae:9b:f4:
                    38:92:45:72:8b:ca:3a:c3:f7:79:2f:3d:cc:e1:78:
                    21:d4:d5:bb:1a:90:1c:a9:db:38:11:82:03:cb:f7:
                    fd:90:17:2d:0e:cf:38:23:30:59:a1:84:db:89:fe:
                    2f:33:24:7d:04:44:58:97:8d:01:5e:dc:18:e1:33:
                    f2:08:f7:63:53:7e:47:9c:07:ae:66:80:53:dc:55:
                    76:d0:16:0e:c3:64:e5:f9:56:f1:3c:27:e7:9e:6c:
                    ca:a9:ed:18:58:3a:f0:1e:f4:69:0f:ec:df:b1:ba:
                    e8:de:15:57:5a:dd:c6:8e:b3:bf:8d:28:0c:db:e6:
                    79:f8:e7:4f:6c:f5:21:d7:e2:db:6c:14:b8:58:24:
                    33:eb:5d:43:18:af:11:d7:df:79:2d:85:c1:94:84:
                    5c:9e:e1:b6:34:a4:90:f4:e5:27:1b:09:ac:ca:ad:
                    0c:08:18:ff:c4:a4:48:64:f4:58:11:3e:e2:44:5d:
                    06:03:ea:c5:cc:5a:e8:55:b5:30:89:39:96:b6:e8:
                    95:89:28:55:29:4f:74:6a:ab:e1:aa:87:87:0a:ee:
                    12:3f:78:da:5b:56:74:8d:29:31:e0:c2:cf:7b:55:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7B:E7:B6:59:F4:28:D4:42:C4:23:D3:11:D0:27:A5:89:90:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/323e04e8-8233-3d61-b8f4-9512d208f1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:77:b4:71:ad:27:4d:82:d8:7e:e7:7d:2c:5f:1c:80:0b:9a:
         75:39:d1:06:5f:e8:3b:d3:92:c0:e6:b1:bc:c2:40:d1:b6:26:
         d6:16:6a:aa:d4:e2:fc:d3:f0:7a:08:07:32:de:7c:72:1a:56:
         7b:b9:c1:c1:be:a6:60:50:00:d3:49:88:f6:21:4f:b9:cc:c2:
         97:5b:15:38:a8:f3:65:63:1c:15:4e:92:ac:07:79:24:5c:74:
         c4:2b:93:8e:c2:99:c2:76:da:1a:84:26:62:5c:29:f1:25:92:
         f6:26:69:56:28:00:da:57:13:f5:ef:68:65:67:06:f1:19:47:
         98:bc:64:9d:f5:7e:9f:63:2d:7b:a1:d0:62:96:63:5c:d4:8e:
         ae:c9:89:94:2c:89:68:d2:f7:49:f7:f7:e7:09:7b:f5:1d:8a:
         54:f6:f5:23:4e:ce:44:2f:ee:37:8c:dc:90:3b:b7:57:35:fe:
         f4:8d:47:87:17:c4:6f:39:ce:b5:00:07:b7:fc:23:1e:12:27:
         d4:7e:68:de:f4:15:e5:f0:6f:3e:b5:1c:50:55:da:61:bd:39:
         01:b4:62:74:32:bf:0c:a4:34:83:66:f0:a2:90:ec:4a:8d:d3:
         e3:3f:6f:4a:a3:3f:fb:1b:be:e3:c5:07:10:3d:49:fb:23:2e:
         9f:92:3e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Ry+s+WhvFkAr2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz
MmFmMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTQ3MzU3ZjYtMDM5My00MGY2LTk4OTktMjg0Zjk1MmYxMGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgm/tZvmMJ8+VAUaJ1Qjp2hLyXUNbVjsRzGu
m/Q4kkVyi8o6w/d5Lz3M4Xgh1NW7GpAcqds4EYIDy/f9kBctDs84IzBZoYTbif4v
MyR9BERYl40BXtwY4TPyCPdjU35HnAeuZoBT3FV20BYOw2Tl+VbxPCfnnmzKqe0Y
WDrwHvRpD+zfsbro3hVXWt3GjrO/jSgM2+Z5+OdPbPUh1+LbbBS4WCQz611DGK8R
1995LYXBlIRcnuG2NKSQ9OUnGwmsyq0MCBj/xKRIZPRYET7iRF0GA+rFzFroVbUw
iTmWtuiViShVKU90aqvhqoeHCu4SP3jaW1Z0jSkx4MLPe1Wz9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHN757ZZ9CjUQsQj0xHQJ6WJkDwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5
N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMzIzZTA0ZTgtODIzMy0z
ZDYxLWI4ZjQtOTUxMmQyMDhmMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy
NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk
MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2
NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLp2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACB3tHGtJ02C2H7nfSxfHIALmnU50QZf6DvTksDmsbzCQNG2JtYWaqrU
4vzT8HoIBzLefHIaVnu5wcG+pmBQANNJiPYhT7nMwpdbFTio82VjHBVOkqwHeSRc
dMQrk47CmcJ22hqEJmJcKfElkvYmaVYoANpXE/XvaGVnBvEZR5i8ZJ31fp9jLXuh
0GKWY1zUjq7JiZQsiWjS90n39+cJe/UdilT29SNOzkQv7jeM3JA7t1c1/vSNR4cX
xG85zrUAB7f8Ix4SJ9R+aN70FeXwbz61HFBV2mG9OQG0YnQyvwykNINm8KKQ7EqN
0+M/b0qjP/sbvuPFBxA9SfsjLp+SPhY=
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:51 2026 by rpki-client