Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f963bf3d-7c9b-3d98-83ee-ff0dc923d031.roa
File:                     f963bf3d-7c9b-3d98-83ee-ff0dc923d031.roa (raw, json)
Hash identifier:          w2AEDwIfNTothy0vMhfI2m7BBMd4V3SHUv2LZ0JQqvs=
Subject key identifier:   E5:B6:AD:9C:8A:64:86:C3:28:5E:86:B9:1A:95:6F:13:B1:A0:D9:8E
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584D8D9003146C3E06B3604B1EC0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f963bf3d-7c9b-3d98-83ee-ff0dc923d031.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     19901
IP address blocks:        67.147.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:90:03:14:6c:3e:06:b3:60:4b:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=caecf4ef-30d9-4c60-8520-03f07a711922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:e0:06:28:24:fe:60:f3:4c:51:17:ea:24:
                    6b:85:fb:f5:cf:5e:9b:94:d2:7f:96:34:74:15:5c:
                    4e:e0:09:86:69:e1:1a:37:76:76:63:c2:64:5e:91:
                    ff:ed:9e:42:c0:1c:d4:e3:21:02:a3:a8:32:cc:42:
                    af:bf:d1:e4:c0:c6:0d:49:13:e2:a5:94:d1:8b:b8:
                    33:6d:9d:85:e6:64:07:99:cd:30:d5:99:f6:49:ea:
                    0d:a0:48:ce:71:c3:bd:5a:10:51:09:85:71:c8:02:
                    e4:a9:a9:fb:8b:84:a3:5f:3f:83:e9:90:69:fa:a3:
                    a0:e5:c0:f3:17:24:a6:98:61:92:0a:d0:23:08:2d:
                    9a:78:89:86:08:a2:0f:94:f4:e4:0d:d8:23:ed:0c:
                    0a:3b:10:c2:b2:71:e4:73:b9:dc:09:a0:8c:97:66:
                    b9:f2:15:a6:12:15:b0:d8:8e:36:b4:6d:33:62:f7:
                    f4:db:83:a8:f0:74:6a:d1:69:af:9e:f2:b8:3c:c5:
                    c5:46:d2:b0:ba:1a:85:97:20:14:24:f7:07:33:b4:
                    16:7b:6d:be:88:ed:d2:7e:9c:b4:b4:b2:38:eb:61:
                    2c:4a:29:b8:d5:ea:a4:d2:79:80:90:2d:24:4a:12:
                    0e:60:90:62:cb:3e:dd:bb:3f:21:fa:e8:c7:d3:14:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B6:AD:9C:8A:64:86:C3:28:5E:86:B9:1A:95:6F:13:B1:A0:D9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f963bf3d-7c9b-3d98-83ee-ff0dc923d031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.147.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:bb:aa:46:69:6d:af:be:77:29:a8:d8:6f:0d:a3:b3:28:
         07:12:2f:d2:b2:cb:92:67:a4:65:18:ba:3f:07:78:40:78:d5:
         35:9a:a7:30:30:4e:0e:9e:89:90:35:09:7c:1b:7c:7c:53:67:
         cc:d2:a0:ea:de:bd:1f:03:f1:a9:03:da:67:32:20:77:88:7b:
         71:34:fd:9c:e5:8e:4f:bb:57:b6:e7:94:c7:92:79:8d:1f:3a:
         81:48:4d:29:29:a6:70:39:c7:3b:93:12:c7:9f:80:95:af:b7:
         86:43:41:65:23:75:32:a4:a5:cc:00:66:b9:3d:97:3e:29:8d:
         9d:1d:49:63:2d:e3:81:5d:49:01:63:7a:76:2b:ae:1c:ce:ca:
         f8:94:f9:cf:d2:32:24:9b:af:ef:7b:57:8e:70:b4:62:f8:40:
         08:df:50:d9:97:48:9d:ba:de:42:8f:00:f4:25:05:b8:55:fb:
         87:c6:bd:32:f4:8d:16:11:c5:67:3d:f4:2b:31:1a:48:12:38:
         92:2f:26:d5:d6:4e:99:86:11:c5:52:56:c4:d8:54:ce:8c:75:
         78:a3:2c:78:b6:cd:3e:43:fb:2b:89:e5:e3:6d:ac:37:25:e6:
         33:28:bf:28:ca:c3:45:48:ae:1d:18:0b:75:a9:71:69:05:4d:
         eb:f7:d6:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkAMUbD4Gs2BLHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
Y2FlY2Y0ZWYtMzBkOS00YzYwLTg1MjAtMDNmMDdhNzExOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj3gBigk/mDzTFEX6iRrhfv1z16blNJ/ljR0
FVxO4AmGaeEaN3Z2Y8JkXpH/7Z5CwBzU4yECo6gyzEKvv9HkwMYNSRPipZTRi7gz
bZ2F5mQHmc0w1Zn2SeoNoEjOccO9WhBRCYVxyALkqan7i4SjXz+D6ZBp+qOg5cDz
FySmmGGSCtAjCC2aeImGCKIPlPTkDdgj7QwKOxDCsnHkc7ncCaCMl2a58hWmEhWw
2I42tG0zYvf024Oo8HRq0WmvnvK4PMXFRtKwuhqFlyAUJPcHM7QWe22+iO3Sfpy0
tLI462EsSim41eqk0nmAkC0kShIOYJBiyz7duz8h+ujH0xSqcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOW2rZyKZIbDKF6GuRqVbxOxoNmOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvZjk2M2JmM2QtN2M5Yi0z
ZDk4LTgzZWUtZmYwZGM5MjNkMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ5PMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2Ju6pGaW2vvncpqNhvDaOzKAcSL9Kyy5JnpGUYuj8HeEB41TWapzAw
Tg6eiZA1CXwbfHxTZ8zSoOrevR8D8akD2mcyIHeIe3E0/Zzljk+7V7bnlMeSeY0f
OoFITSkppnA5xzuTEsefgJWvt4ZDQWUjdTKkpcwAZrk9lz4pjZ0dSWMt44FdSQFj
enYrrhzOyviU+c/SMiSbr+97V45wtGL4QAjfUNmXSJ263kKPAPQlBbhV+4fGvTL0
jRYRxWc99CsxGkgSOJIvJtXWTpmGEcVSVsTYVM6MdXijLHi2zT5D+yuJ5eNtrDcl
5jMovyjKw0VIrh0YC3WpcWkFTev31nU=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:52 2026 by rpki-client