Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/9764fed3-1418-3c60-9638-6bc79821cf82.roa
File:                     9764fed3-1418-3c60-9638-6bc79821cf82.roa (raw, json)
Hash identifier:          GkbpApy/QOYiLGZpUX2LFkUlVDZnbfx/Rhcd9tkLEOM=
Subject key identifier:   E7:5F:34:3E:92:1A:DF:3A:CE:B4:36:D2:69:C0:FB:4E:5F:8D:C6:EF
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584CAE5E98A2627FAF05ACEAD900
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/9764fed3-1418-3c60-9638-6bc79821cf82.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     21723
IP address blocks:        64.85.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:98:a2:62:7f:af:05:ac:ea:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=92f87641-df6d-420d-a23d-d4ec0632d39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:fb:29:42:ae:42:da:40:ca:de:81:f0:f7:
                    1d:1e:05:96:da:3e:b9:18:9a:27:d7:8f:41:c5:0d:
                    5f:12:3b:ca:e5:1b:68:b5:33:30:83:55:0e:93:be:
                    45:ea:67:eb:0b:87:d8:f7:2c:c9:83:41:68:1f:ec:
                    2b:ac:fd:e8:24:94:5f:b9:ae:21:dc:70:d8:a5:06:
                    47:c5:d2:f2:52:65:ce:b7:87:ea:2b:f0:3c:95:aa:
                    85:8d:c6:f5:91:ea:1e:cb:82:4a:13:8a:00:de:98:
                    30:cf:b0:64:9c:7a:03:fb:f6:b1:0a:9a:f7:f0:6b:
                    0f:94:da:a5:0a:7e:81:01:c2:2f:de:a4:49:48:ae:
                    a3:91:37:93:fa:18:6b:85:12:67:1b:c4:87:81:dd:
                    2c:d7:c0:37:88:bf:10:15:6d:d7:87:97:d2:46:a5:
                    83:b2:49:de:f0:48:ff:14:5a:bd:a6:3c:0d:1a:50:
                    ea:bf:2c:2f:ef:67:41:bf:32:32:80:60:b0:7b:bc:
                    fd:5f:2f:75:c9:25:f6:1f:69:ba:56:5e:01:85:f5:
                    33:65:5d:37:d1:c6:ee:35:60:19:38:4b:90:1a:59:
                    0a:a9:f2:d2:7a:0d:e9:76:15:6e:55:a7:4a:82:fb:
                    a1:14:19:d8:e1:ce:3f:25:c4:d4:7e:fc:d7:3c:5f:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:34:3E:92:1A:DF:3A:CE:B4:36:D2:69:C0:FB:4E:5F:8D:C6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/9764fed3-1418-3c60-9638-6bc79821cf82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:07:29:9c:c7:9c:60:90:4a:40:8e:0b:c6:62:c7:ec:8c:76:
         94:2b:33:2e:86:77:f6:35:d6:28:85:f6:b0:8f:47:09:30:36:
         b3:7c:dc:f1:da:3c:41:c6:fc:9b:cb:ed:5b:3b:78:b8:a3:b4:
         0d:97:76:02:32:92:b7:b8:dd:d9:d2:2f:3f:13:08:24:52:52:
         10:98:9b:18:f5:bf:14:b8:ec:f2:c7:50:6a:8a:79:bf:ca:50:
         ed:8a:e4:2c:b7:60:0a:ce:81:b6:01:bf:e8:57:31:9f:75:55:
         b9:62:3b:86:d1:8d:06:95:06:9f:47:41:f9:75:f6:e5:eb:6c:
         d6:7f:c8:33:4a:a3:9f:30:58:13:d4:a9:9f:b5:48:66:5a:68:
         d8:97:0b:ce:90:29:7a:45:8a:60:9b:31:14:2f:8b:84:60:ce:
         b0:aa:0d:c5:d5:fe:d2:c7:c2:50:4a:40:61:e7:9a:77:38:bf:
         7c:4c:42:50:a9:12:35:91:b8:6a:df:99:84:25:1c:1e:a5:6a:
         f5:7c:1a:6a:f6:1d:f6:58:7b:00:1c:f8:f4:5f:e8:b4:f2:4b:
         95:73:ef:75:d2:b0:ab:bf:c8:68:a9:11:b8:33:d5:c3:4d:11:
         a2:d6:8b:ae:54:29:68:76:41:52:5a:26:b1:46:0c:3e:83:73:
         3a:e6:2e:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXpiiYn+vBazq2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc1MzE2MGQtMzBlMS00OGIxLWFmZGItMzk0Mzg5Y2Jj
YzgxMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OTJmODc2NDEtZGY2ZC00MjBkLWEyM2QtZDRlYzA2MzJkMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGP7KUKuQtpAyt6B8PcdHgWW2j65GJon149B
xQ1fEjvK5RtotTMwg1UOk75F6mfrC4fY9yzJg0FoH+wrrP3oJJRfua4h3HDYpQZH
xdLyUmXOt4fqK/A8laqFjcb1keoey4JKE4oA3pgwz7BknHoD+/axCpr38GsPlNql
Cn6BAcIv3qRJSK6jkTeT+hhrhRJnG8SHgd0s18A3iL8QFW3Xh5fSRqWDskne8Ej/
FFq9pjwNGlDqvywv72dBvzIygGCwe7z9Xy91ySX2H2m6Vl4BhfUzZV030cbuNWAZ
OEuQGlkKqfLSeg3pdhVuVadKgvuhFBnY4c4/JcTUfvzXPF9kpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdfND6SGt86zrQ20mnA+05fjcbvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NzUz
MTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQzODljYmNjODEvOTc2NGZlZDMtMTQxOC0z
YzYwLTk2MzgtNmJjNzk4MjFjZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODc1MzE2MGQtMzBlMS00OGIxLWFm
ZGItMzk0Mzg5Y2JjYzgxLzg3NTMxNjBkLTMwZTEtNDhiMS1hZmRiLTM5NDM4OWNi
Y2M4MS5jcmwwHwYDVR0jBBgwFoAU+fG+E/up+OSRSc1mDf1lT075VU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NzUzMTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQz
ODljYmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgHKZzHnGCQSkCOC8Zix+yMdpQrMy6Gd/Y11iiF9rCPRwkwNrN83PHa
PEHG/JvL7Vs7eLijtA2XdgIykre43dnSLz8TCCRSUhCYmxj1vxS47PLHUGqKeb/K
UO2K5Cy3YArOgbYBv+hXMZ91VbliO4bRjQaVBp9HQfl19uXrbNZ/yDNKo58wWBPU
qZ+1SGZaaNiXC86QKXpFimCbMRQvi4RgzrCqDcXV/tLHwlBKQGHnmnc4v3xMQlCp
EjWRuGrfmYQlHB6lavV8Gmr2HfZYewAc+PRf6LTyS5Vz73XSsKu/yGipEbgz1cNN
EaLWi65UKWh2QVJaJrFGDD6DczrmLgs=
-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:32 2026 by rpki-client