Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
File:                     7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa (raw, json)
Hash identifier:          wtT6bAdeFdlK7o+4K2LmpwAQfdmqYrH/IgR6iAVnl8U=
Subject key identifier:   A0:CA:D9:67:02:33:58:AC:CE:31:F9:2D:BF:86:D4:18:79:10:20:D7
Certificate issuer:       /CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
Certificate serial:       010D0C9F4328584D9E501756FC074A81805DB030
Authority key identifier: F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        198.62.163.0/24 maxlen: 24
                          2620:79:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:17:56:fc:07:4a:81:80:5d:b0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=be533a20-e4d9-4974-8f91-9d2ebc3e57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:f1:eb:60:83:43:6f:19:c5:9f:cf:c7:31:
                    75:a3:01:30:0e:bd:c7:09:a5:c8:ba:11:40:19:46:
                    ff:5a:50:8c:dd:b8:7b:22:9b:c3:d4:b4:ec:16:4f:
                    c7:8a:c8:48:6b:2c:0a:89:45:8b:80:30:55:b1:b4:
                    65:85:58:58:1e:66:18:59:92:5a:f8:ee:c4:91:bb:
                    be:87:66:fb:f3:6b:39:7f:ae:bf:99:81:98:86:e9:
                    7b:e2:1d:cf:e9:68:6b:dc:b9:52:f6:24:3c:79:20:
                    a2:33:ca:d5:be:1f:31:45:ec:cc:9c:42:23:03:09:
                    33:ff:cf:16:37:d2:0a:0c:96:2e:32:15:1b:b8:60:
                    bc:19:16:09:e2:1e:98:e9:75:3b:4c:87:45:30:a3:
                    b7:1f:4c:5c:42:80:88:9b:60:67:15:a2:34:b8:7c:
                    3f:cf:f4:76:bb:90:2c:d4:4c:d3:63:65:7c:bf:04:
                    cb:29:8a:4c:0d:da:d3:2a:60:6b:23:99:80:b0:e7:
                    19:eb:7e:fa:1e:e8:74:50:95:4a:79:7d:40:fe:37:
                    84:8c:7a:d6:5a:62:23:55:e4:23:aa:f6:21:68:77:
                    8a:83:ec:d1:d9:bc:5b:48:3b:e7:8f:5e:5c:16:d3:
                    1e:47:b0:30:78:96:ad:bc:49:2d:64:c6:39:96:d4:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:D9:67:02:33:58:AC:CE:31:F9:2D:BF:86:D4:18:79:10:20:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/7995440f-443c-3d8e-9be1-fb8a6ddcafb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl

            X509v3 Authority Key Identifier:
                keyid:F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:28:75:03:72:44:3c:5b:09:3c:46:48:e2:0c:37:6d:7f:01:
         3a:c9:4a:31:e7:0a:77:c1:25:ce:ec:2a:c7:d9:c5:dd:31:b0:
         4b:ba:6e:96:65:4c:e0:f1:34:e1:39:10:16:50:1f:06:10:96:
         72:55:68:3f:09:39:01:1b:74:70:44:d3:97:35:fe:b0:07:b5:
         56:d6:6a:6b:3f:3f:60:9e:3f:b0:ac:39:77:a8:cb:9d:f0:c3:
         d6:6c:66:14:ae:0b:f8:8b:10:08:c3:4e:e7:83:df:5f:69:eb:
         9b:1d:a5:91:13:82:7b:bc:18:51:6d:a0:72:4a:31:8a:c9:1a:
         18:26:85:14:81:d2:4c:7d:30:cf:39:99:cb:14:6c:4e:13:66:
         85:38:0a:94:28:96:99:48:f1:3b:22:43:55:20:88:49:df:7b:
         cc:fd:36:b3:70:09:0d:93:72:e5:d2:ba:d2:6c:a8:0e:63:26:
         39:f6:65:3d:b6:ec:f1:62:ea:1c:23:a3:da:03:ff:aa:35:d4:
         05:76:09:e5:82:70:32:99:ed:dd:1c:ef:e1:37:a0:6d:eb:04:
         2d:e7:ce:90:0f:1e:3b:e7:89:0e:b0:38:98:eb:a1:60:ef:66:
         f2:51:17:c6:c5:62:59:83:7e:3a:89:d2:4c:24:13:b7:eb:5f:
         dc:bf:b5:58
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2eUBdW/AdKgYBdsDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljN2RlODQtYjMzYS00M2M3LWFjZDMtN2NkM2ZmY2Vj
Y2I4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YmU1MzNhMjAtZTRkOS00OTc0LThmOTEtOWQyZWJjM2U1N2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjx62CDQ28ZxZ/PxzF1owEwDr3HCaXIuhFA
GUb/WlCM3bh7IpvD1LTsFk/HishIaywKiUWLgDBVsbRlhVhYHmYYWZJa+O7Ekbu+
h2b782s5f66/mYGYhul74h3P6Whr3LlS9iQ8eSCiM8rVvh8xRezMnEIjAwkz/88W
N9IKDJYuMhUbuGC8GRYJ4h6Y6XU7TIdFMKO3H0xcQoCIm2BnFaI0uHw/z/R2u5As
1EzTY2V8vwTLKYpMDdrTKmBrI5mAsOcZ6376Huh0UJVKeX1A/jeEjHrWWmIjVeQj
qvYhaHeKg+zR2bxbSDvnj15cFtMeR7AweJatvEktZMY5ltQ4rwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKDK2WcCM1iszjH5Lb+G1Bh5ECDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xOWM3
ZGU4NC1iMzNhLTQzYzctYWNkMy03Y2QzZmZjZWNjYjgvNzk5NTQ0MGYtNDQzYy0z
ZDhlLTliZTEtZmI4YTZkZGNhZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTljN2RlODQtYjMzYS00M2M3LWFj
ZDMtN2NkM2ZmY2VjY2I4LzE5YzdkZTg0LWIzM2EtNDNjNy1hY2QzLTdjZDNmZmNl
Y2NiOC5jcmwwHwYDVR0jBBgwFoAU+HjIPUyJQRsOTMfEf2923j9+DC4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xOWM3ZGU4NC1iMzNhLTQzYzctYWNkMy03Y2Qz
ZmZjZWNjYjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxj6jMA8E
AgACMAkDBwAmIAB5wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYih1A3JEPFsJPEZI4gw3bX8BOslKMecK
d8Elzuwqx9nF3TGwS7pulmVM4PE04TkQFlAfBhCWclVoPwk5ARt0cETTlzX+sAe1
VtZqaz8/YJ4/sKw5d6jLnfDD1mxmFK4L+IsQCMNO54PfX2nrmx2lkROCe7wYUW2g
ckoxiskaGCaFFIHSTH0wzzmZyxRsThNmhTgKlCiWmUjxOyJDVSCISd97zP02s3AJ
DZNy5dK60myoDmMmOfZlPbbs8WLqHCOj2gP/qjXUBXYJ5YJwMpnt3Rzv4TegbesE
LefOkA8eO+eJDrA4mOuhYO9m8lEXxsViWYN+OonSTCQTt+tf3L+1WA==
-----END CERTIFICATE-----
Generated at Sun May 3 14:50:42 2026 by rpki-client