Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa
File:                     066680ee-72ba-3422-bafb-9ddd0260ce85.roa (raw, json)
Hash identifier:          tofmZjD9GMlwQzZ3EekndipaT1wXuelbvH6ABWpmv3k=
Subject key identifier:   67:FF:A8:4C:72:B1:6D:03:87:37:9E:EF:97:C4:F5:D9:AA:CC:48:6C
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584E842A40A78ABAB08FD8EFBB00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        172.85.101.0/24 maxlen: 24
                          172.85.103.0/24 maxlen: 24
                          172.85.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:40:a7:8a:ba:b0:8f:d8:ef:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=4fb03d02-7780-41aa-8a55-6cbcf9779c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:9a:ad:72:55:70:f0:35:82:a5:98:52:3b:
                    5a:75:fd:37:dd:b2:e4:a8:7b:06:18:e9:a7:b6:1f:
                    c4:85:5c:99:80:14:ac:97:24:68:65:0e:8e:3d:1e:
                    de:e5:ef:d8:dc:b5:32:3d:da:f3:b2:a5:06:fe:a6:
                    8c:bc:cf:42:12:93:7f:f8:38:e6:40:df:1c:80:06:
                    31:80:f4:56:c7:4e:1c:78:d6:2b:fc:fb:73:69:ec:
                    fe:0d:6b:2a:35:3b:d8:47:c8:e9:f7:61:d9:21:24:
                    09:27:67:9c:00:a5:b9:a8:be:db:8f:8a:b4:aa:6e:
                    a6:04:32:89:c1:1f:2d:75:58:a4:af:60:88:e9:6e:
                    3e:25:59:eb:a1:b6:dc:8e:46:74:2a:ae:2a:e1:1d:
                    0e:96:e0:4d:75:9e:09:88:f9:1a:03:58:2f:26:6f:
                    80:c2:1a:d7:5a:3c:58:64:1d:16:53:0c:eb:72:da:
                    35:29:48:00:f8:f5:8f:f9:86:ee:e5:7f:37:40:b8:
                    e2:ff:b1:a2:64:b4:26:ca:7d:01:7e:b6:35:4a:d8:
                    a6:06:fb:3b:ac:bd:fc:c8:11:c7:a8:bd:6b:bb:62:
                    45:a5:25:28:70:6a:07:46:68:35:4d:bc:9b:0e:0e:
                    36:fb:2b:84:20:1a:aa:44:9a:ae:fe:02:80:c0:02:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:A8:4C:72:B1:6D:03:87:37:9E:EF:97:C4:F5:D9:AA:CC:48:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.101.0/24
                  172.85.103.0/24
                  172.85.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:47:ac:09:fe:15:16:74:00:72:3b:bb:97:78:6a:8e:18:b2:
         71:6e:0c:89:be:6f:55:0a:2c:cc:2e:04:e2:b8:73:12:1e:d1:
         5c:a0:94:c5:ca:22:61:de:66:d1:0a:14:70:28:d3:b7:71:1e:
         5c:d7:a5:3a:0d:d0:e5:90:7e:64:2d:81:50:b1:b5:ed:72:c1:
         7d:81:98:6b:02:2b:ed:bc:a2:a0:37:15:67:a5:6b:d6:1a:d9:
         58:b8:6d:dc:09:96:3b:b5:f3:c1:8b:8f:53:e5:49:1a:50:42:
         70:75:72:ad:0a:74:4b:76:4e:01:b4:39:d9:38:4b:55:b1:e7:
         b6:b0:e4:24:a9:34:b2:1e:52:99:20:d6:05:d7:d0:5b:9f:00:
         f1:df:57:02:a1:4a:34:b7:1f:d3:f3:6b:24:ad:11:96:05:79:
         3b:43:91:fc:ce:e2:56:cd:d4:d5:5c:ed:ab:19:62:46:42:60:
         58:47:fb:c7:53:57:78:c7:24:33:2a:2f:30:60:d9:47:1a:37:
         e0:de:b7:2f:8d:cf:8c:00:e4:00:48:f7:65:48:73:fd:a7:e5:
         2a:a2:6d:f4:2a:b7:0a:fb:c6:79:35:a0:d1:aa:1c:4c:82:86:
         e5:26:14:65:d5:70:07:1c:fa:7e:dc:fc:5c:10:e1:e1:ff:36:
         e8:44:3e:a4
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6EKkCnirqwj9jvuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
NGZiMDNkMDItNzc4MC00MWFhLThhNTUtNmNiY2Y5Nzc5YzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4iarXJVcPA1gqWYUjtadf033bLkqHsGGOmn
th/EhVyZgBSslyRoZQ6OPR7e5e/Y3LUyPdrzsqUG/qaMvM9CEpN/+DjmQN8cgAYx
gPRWx04ceNYr/Ptzaez+DWsqNTvYR8jp92HZISQJJ2ecAKW5qL7bj4q0qm6mBDKJ
wR8tdVikr2CI6W4+JVnrobbcjkZ0Kq4q4R0OluBNdZ4JiPkaA1gvJm+AwhrXWjxY
ZB0WUwzrcto1KUgA+PWP+Ybu5X83QLji/7GiZLQmyn0BfrY1StimBvs7rL38yBHH
qL1ru2JFpSUocGoHRmg1TbybDg42+yuEIBqqRJqu/gKAwAJy/wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGf/qExysW0Dhzee75fE9dmqzEhsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMDY2NjgwZWUtNzJiYS0z
NDIyLWJhZmItOWRkZDAyNjBjZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArFVlAwQA
rFVnAwQArFVqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAMJHrAn+FRZ0AHI7u5d4ao4YsnFuDIm+b1UKLMwu
BOK4cxIe0VyglMXKImHeZtEKFHAo07dxHlzXpToN0OWQfmQtgVCxte1ywX2BmGsC
K+28oqA3FWela9Ya2Vi4bdwJlju188GLj1PlSRpQQnB1cq0KdEt2TgG0Odk4S1Wx
57aw5CSpNLIeUpkg1gXX0FufAPHfVwKhSjS3H9PzayStEZYFeTtDkfzO4lbN1NVc
7asZYkZCYFhH+8dTV3jHJDMqLzBg2UcaN+Dety+Nz4wA5ABI92VIc/2n5SqibfQq
twr7xnk1oNGqHEyChuUmFGXVcAcc+n7c/FwQ4eH/NuhEPqQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:49 2026 by rpki-client