Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/4657ead0-19eb-359a-9df3-f9be4eae219f.roa
File:                     4657ead0-19eb-359a-9df3-f9be4eae219f.roa (raw, json)
Hash identifier:          +75avYDW6eUMl+UrCzIshRLGVO1q0bT4xdwrKRo/YI4=
Subject key identifier:   5F:07:71:D3:31:F8:6C:36:A1:69:42:77:C7:93:AA:06:88:A1:90:8A
Certificate issuer:       /CN=ea5d1298-f200-45a5-813f-953521bac25c
Certificate serial:       010D0C9F4328584EDEDD23B422E31A60AF204660
Authority key identifier: 58:29:45:2E:32:32:A2:70:B1:2D:34:35:0E:28:98:B3:48:6E:70:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/4657ead0-19eb-359a-9df3-f9be4eae219f.roa
Signing time:             Mon 17 Aug 2026 20:43:32 +0000
ROA not before:           Mon 17 Aug 2026 20:43:32 +0000
ROA not after:            Sun 15 Nov 2026 21:43:32 +0000
asID:                     7153
IP address blocks:        205.172.240.0/23 maxlen: 23
                          205.172.240.0/24 maxlen: 24
                          205.172.241.0/24 maxlen: 24
                          205.172.242.0/24 maxlen: 24
                          205.172.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/ea5d1298-f200-45a5-813f-953521bac25c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/ea5d1298-f200-45a5-813f-953521bac25c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:de:dd:23:b4:22:e3:1a:60:af:20:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5d1298-f200-45a5-813f-953521bac25c
        Validity
            Not Before: Aug 17 20:43:32 2026 GMT
            Not After : Nov 15 21:43:32 2026 GMT
        Subject: CN=a6420ba9-b617-4c78-b40a-3722bacd275f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:5f:85:5b:5c:50:d3:03:ea:81:17:a6:2d:
                    d6:c6:56:1b:96:26:2a:6e:8f:e7:76:6c:50:b7:4e:
                    45:56:3b:fa:ab:a1:bc:34:48:2f:07:62:e8:e4:87:
                    36:e6:83:cb:b3:49:f9:7a:48:02:d1:d2:41:8e:50:
                    38:02:37:77:96:e3:50:e8:46:c1:58:46:9c:30:54:
                    50:53:60:24:72:63:10:b3:18:41:86:fb:53:79:16:
                    55:b1:f3:d8:33:ac:cd:05:b5:4b:6f:dd:fd:34:e1:
                    f5:d3:5f:bf:82:15:94:ab:2b:d2:e4:1d:06:50:6f:
                    2e:ce:9b:8e:cb:19:50:b0:b0:dd:54:32:b6:24:0e:
                    ae:82:27:1a:c2:c1:26:f8:ca:13:3b:b3:be:8b:7a:
                    a5:9a:91:0f:6c:4a:7a:62:aa:5b:9e:0e:1e:ce:23:
                    c6:aa:45:c5:89:34:f2:55:f4:4f:e5:2c:01:1c:b4:
                    35:8f:db:d7:22:89:75:93:5a:a8:bb:8c:88:36:4d:
                    57:b1:64:bb:6a:27:aa:1e:e3:a2:2c:10:0b:aa:f0:
                    2c:a4:17:13:76:3f:7e:2c:af:a3:58:55:be:37:c1:
                    bf:4d:f9:14:f4:7d:6a:4c:26:f8:be:ca:7f:fa:9c:
                    24:18:6e:8f:54:02:35:72:a2:cb:e9:52:c3:ed:d8:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:71:D3:31:F8:6C:36:A1:69:42:77:C7:93:AA:06:88:A1:90:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/4657ead0-19eb-359a-9df3-f9be4eae219f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c/ea5d1298-f200-45a5-813f-953521bac25c.crl

            X509v3 Authority Key Identifier:
                keyid:58:29:45:2E:32:32:A2:70:B1:2D:34:35:0E:28:98:B3:48:6E:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ea5d1298-f200-45a5-813f-953521bac25c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.172.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:55:b1:ce:39:fe:ea:6e:c0:7e:73:7b:a2:c1:8d:28:8e:
         a4:6b:2a:d8:44:0c:80:f0:b0:b6:57:cf:84:5c:d8:69:25:ca:
         95:72:02:da:3d:aa:40:21:f6:9f:3f:09:db:22:b9:d4:d6:57:
         80:7b:1c:6a:29:16:43:a0:9b:37:d7:d4:0b:43:f1:36:4f:45:
         d5:52:32:8c:86:45:8a:37:cb:a0:f0:02:b0:e2:c3:8d:ef:4a:
         05:69:b9:1e:94:13:aa:66:4a:93:ea:a6:b0:a1:33:50:dc:68:
         e4:78:9c:a2:68:93:f3:72:2e:bd:2b:34:4c:b7:35:7f:c8:09:
         20:0a:60:5a:45:2f:49:f3:ac:4d:42:89:94:30:60:da:1d:df:
         22:97:ef:c8:92:18:00:11:64:f5:c8:09:93:e0:ce:a4:a5:db:
         be:4b:bf:a7:ad:0e:f0:8b:83:62:fe:7a:e0:55:16:a8:a3:84:
         53:08:cf:62:6c:3e:d5:11:89:91:6b:d2:be:b2:08:f5:4e:94:
         17:7e:36:ad:c2:8e:6f:50:6c:d5:31:a4:71:dc:92:6d:34:76:
         94:22:47:35:9b:fd:82:9b:8c:2a:78:b9:b3:f7:5b:86:a8:1f:
         11:7a:d1:3a:2d:ca:4e:b2:8a:bf:07:c9:e0:6f:ec:8c:5d:bb:
         4c:e6:3f:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7e3SO0IuMaYK8gRmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE1ZDEyOTgtZjIwMC00NWE1LTgxM2YtOTUzNTIxYmFj
MjVjMB4XDTI2MDgxNzIwNDMzMloXDTI2MTExNTIxNDMzMlowLzEtMCsGA1UEAxMk
YTY0MjBiYTktYjYxNy00Yzc4LWI0MGEtMzcyMmJhY2QyNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6ZfhVtcUNMD6oEXpi3WxlYbliYqbo/ndmxQ
t05FVjv6q6G8NEgvB2Lo5Ic25oPLs0n5ekgC0dJBjlA4Ajd3luNQ6EbBWEacMFRQ
U2AkcmMQsxhBhvtTeRZVsfPYM6zNBbVLb939NOH101+/ghWUqyvS5B0GUG8uzpuO
yxlQsLDdVDK2JA6ugicawsEm+MoTO7O+i3qlmpEPbEp6Yqpbng4eziPGqkXFiTTy
VfRP5SwBHLQ1j9vXIol1k1qou4yINk1XsWS7aieqHuOiLBALqvAspBcTdj9+LK+j
WFW+N8G/TfkU9H1qTCb4vsp/+pwkGG6PVAI1cqLL6VLD7dg66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8HcdMx+Gw2oWlCd8eTqgaIoZCKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYTVk
MTI5OC1mMjAwLTQ1YTUtODEzZi05NTM1MjFiYWMyNWMvNDY1N2VhZDAtMTllYi0z
NTlhLTlkZjMtZjliZTRlYWUyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZWE1ZDEyOTgtZjIwMC00NWE1LTgx
M2YtOTUzNTIxYmFjMjVjL2VhNWQxMjk4LWYyMDAtNDVhNS04MTNmLTk1MzUyMWJh
YzI1Yy5jcmwwHwYDVR0jBBgwFoAUWClFLjIyonCxLTQ1DiiYs0hucIgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYTVkMTI5OC1mMjAwLTQ1YTUtODEzZi05NTM1
MjFiYWMyNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzazwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm1VbHOOf7qbsB+c3uiwY0ojqRrKthEDIDwsLZXz4Rc2GklypVyAto9
qkAh9p8/CdsiudTWV4B7HGopFkOgmzfX1AtD8TZPRdVSMoyGRYo3y6DwArDiw43v
SgVpuR6UE6pmSpPqprChM1DcaOR4nKJok/NyLr0rNEy3NX/ICSAKYFpFL0nzrE1C
iZQwYNod3yKX78iSGAARZPXICZPgzqSl275Lv6etDvCLg2L+euBVFqijhFMIz2Js
PtURiZFr0r6yCPVOlBd+Nq3Cjm9QbNUxpHHckm00dpQiRzWb/YKbjCp4ubP3W4ao
HxF60Totyk6yir8HyeBv7Ixdu0zmP3E=
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:52 2026 by rpki-client