Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
File:                     f05bddbd-66de-36a2-be24-ae30e4826c09.roa (raw, json)
Hash identifier:          iBIfJY9k+CK+DNAZcuuF94OrBVsyPVlVD8+coaw4sLQ=
Subject key identifier:   EC:41:24:67:31:E3:9E:39:25:44:F0:AD:6E:28:48:F3:0D:C6:44:A0
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584E6F3A4B5131A39DF789B0CC00
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     1742
IP address blocks:        192.5.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4b:51:31:a3:9d:f7:89:b0:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=60e109e2-93ff-4cf8-84ea-66cbb3ce0ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:aa:39:12:d2:b9:f6:6a:e3:1e:49:eb:a8:7e:
                    97:8e:29:9a:12:f3:7e:61:f6:4e:dc:4a:1f:e2:2b:
                    13:d7:5c:3f:67:ed:db:ec:5e:a2:31:ac:25:aa:5b:
                    fe:3b:b8:36:15:f3:81:c8:35:68:de:82:3f:db:66:
                    ef:9c:e1:ae:5e:2a:88:78:8a:cc:41:95:00:38:1c:
                    b3:b8:cb:8b:2a:4f:13:88:a4:f7:35:d2:10:5d:39:
                    e0:2d:93:ec:92:92:df:c6:b0:23:84:09:fc:d3:b8:
                    bd:38:8e:3e:46:9f:f2:dc:97:85:0b:81:2d:f2:f2:
                    57:a0:36:25:08:41:19:de:e5:22:e4:73:65:da:f3:
                    94:de:44:35:cf:be:ef:e1:c6:94:74:31:f0:87:67:
                    cf:fb:d8:8a:28:a8:4a:d0:cf:06:21:a1:29:0c:9d:
                    81:e9:e6:84:d9:f5:c7:0a:38:3e:e4:5b:ac:33:f5:
                    85:27:97:7c:fa:a3:db:9e:2d:7b:1b:a3:54:de:89:
                    d3:86:5a:7a:60:15:c2:90:d1:a4:64:37:2d:e9:7a:
                    06:46:89:c1:3a:3c:4f:7b:07:43:d2:a3:af:48:17:
                    57:72:91:ca:37:08:5a:96:c5:78:89:56:85:7e:82:
                    a0:a1:51:a3:56:d8:59:d1:1f:3d:d0:9f:7c:02:bc:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:41:24:67:31:E3:9E:39:25:44:F0:AD:6E:28:48:F3:0D:C6:44:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:9f:ce:ae:bb:40:d1:72:16:46:c8:81:40:0d:e0:b8:be:
         2f:dc:af:9e:20:d1:97:e3:31:ca:f6:60:ed:d3:9b:24:27:a6:
         db:d8:fa:db:d5:08:3a:d0:25:04:ff:08:c0:93:28:f1:83:a1:
         9c:03:1e:76:0d:8c:4a:38:72:5a:b5:0b:0e:5f:23:fa:e4:25:
         a7:8d:94:72:70:40:85:4b:30:94:92:6c:b9:7e:ff:f6:a2:64:
         65:c9:af:7c:4c:9a:df:b1:f2:92:0a:df:ca:f5:7a:84:7a:73:
         0b:d5:86:74:b8:29:43:65:63:a2:2e:d9:1f:93:f9:59:14:ac:
         be:c5:1b:f4:b8:55:e7:52:b3:d5:02:94:6c:20:ef:b8:23:86:
         f5:46:01:85:86:11:0c:d5:37:f2:15:4a:d5:10:b3:27:62:6f:
         0b:77:9f:f6:7b:01:f2:a0:b1:3c:c5:fb:60:e3:33:ec:03:94:
         3d:17:27:71:6d:f6:d0:9f:93:80:9c:75:2f:bb:99:7b:3e:4d:
         23:03:4e:c9:82:42:7a:5d:00:70:c6:31:dc:af:a2:b2:5a:86:
         ed:0a:38:24:ee:d1:36:66:ca:a2:c6:ea:20:f1:06:07:69:94:
         e5:29:79:48:83:e6:00:34:c1:34:5a:3f:76:59:db:26:0d:4e:
         47:7c:e1:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOktRMaOd94mwzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NjBlMTA5ZTItOTNmZi00Y2Y4LTg0ZWEtNjZjYmIzY2UwYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqo5EtK59mrjHknrqH6XjimaEvN+YfZO3Eof
4isT11w/Z+3b7F6iMawlqlv+O7g2FfOByDVo3oI/22bvnOGuXiqIeIrMQZUAOByz
uMuLKk8TiKT3NdIQXTngLZPskpLfxrAjhAn807i9OI4+Rp/y3JeFC4Et8vJXoDYl
CEEZ3uUi5HNl2vOU3kQ1z77v4caUdDHwh2fP+9iKKKhK0M8GIaEpDJ2B6eaE2fXH
Cjg+5FusM/WFJ5d8+qPbni17G6NU3onThlp6YBXCkNGkZDct6XoGRonBOjxPewdD
0qOvSBdXcpHKNwhalsV4iVaFfoKgoVGjVthZ0R890J98ArxD1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxBJGcx4545JUTwrW4oSPMNxkSgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZjA1YmRkYmQtNjZkZS0z
NmEyLWJlMjQtYWUzMGU0ODI2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbHn86uu0DRchZGyIFADeC4vi/cr54g0ZfjMcr2YO3TmyQnptvY+tvV
CDrQJQT/CMCTKPGDoZwDHnYNjEo4clq1Cw5fI/rkJaeNlHJwQIVLMJSSbLl+//ai
ZGXJr3xMmt+x8pIK38r1eoR6cwvVhnS4KUNlY6Iu2R+T+VkUrL7FG/S4VedSs9UC
lGwg77gjhvVGAYWGEQzVN/IVStUQsydibwt3n/Z7AfKgsTzF+2DjM+wDlD0XJ3Ft
9tCfk4CcdS+7mXs+TSMDTsmCQnpdAHDGMdyvorJahu0KOCTu0TZmyqLG6iDxBgdp
lOUpeUiD5gA0wTRaP3ZZ2yYNTkd84cQ=
-----END CERTIFICATE-----
Generated at Fri Jul 17 16:03:07 2026 by rpki-client