Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
File:                     f5e69843-5c54-3803-8848-2695037a74aa.roa (raw, json)
Hash identifier:          9iehv75GbOUnGSro6I4FVDgcljRwBUMVKci3gboIByk=
Subject key identifier:   88:B6:6D:99:73:04:1A:DA:BD:6B:A3:B8:56:C4:B4:A1:1F:7B:58:BE
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F4328584E5A49F35849449AF257D7E580
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     62958
IP address blocks:        168.100.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f3:58:49:44:9a:f2:57:d7:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=001404b4-8fc1-441d-adf4-a3dcee6f66e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ac:65:0b:f0:e4:94:0f:27:70:dd:b1:64:
                    32:85:08:75:1d:8e:95:6f:cf:8e:0a:87:fd:84:9b:
                    26:a5:c9:86:b0:b0:2c:c8:3b:05:d9:b5:22:17:ae:
                    a4:38:1d:ca:f5:e2:c4:ed:22:f6:0a:dd:1d:82:f5:
                    cb:79:1b:e7:ad:2a:b5:a3:1e:6b:23:c5:04:e3:7d:
                    31:7c:bd:8b:ca:0f:e7:5d:17:ae:d4:74:61:91:fa:
                    a4:f1:59:c3:f5:32:d3:c7:4f:65:3e:ba:72:9f:a7:
                    f0:7e:e9:0b:c1:e2:9b:08:9d:ff:75:f3:42:c0:6f:
                    94:d6:f7:b6:18:7e:bb:5e:49:21:10:35:db:f6:4d:
                    ab:1c:7d:e5:c4:9d:f4:0a:36:5a:cc:c1:62:d1:b8:
                    62:4a:de:a4:bc:2d:72:66:2d:da:e6:95:53:c4:93:
                    0c:0d:49:95:e4:9b:6b:c6:3a:05:4b:20:21:3d:c9:
                    de:92:bd:25:8c:63:9b:59:3d:70:5f:11:02:0b:06:
                    e8:d8:43:52:3b:b1:45:44:44:8b:fd:15:a6:8d:ea:
                    1d:7f:2d:07:4d:9d:4d:2d:bf:49:f1:b5:7d:0b:fd:
                    12:31:68:1e:e3:f8:67:a5:ff:4d:ad:02:39:53:42:
                    47:bd:2e:3d:dc:2a:d2:e9:19:b6:e7:e9:3b:c4:bd:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:6D:99:73:04:1A:DA:BD:6B:A3:B8:56:C4:B4:A1:1F:7B:58:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:aa:77:20:e9:74:37:8f:4c:0d:f5:bf:5f:9a:6f:62:f6:
         55:32:3e:a6:96:9a:26:03:15:1f:41:1e:54:8d:be:f2:7f:90:
         7e:a4:14:cd:54:90:22:7d:3c:60:7c:08:e3:9d:7c:7b:c0:f7:
         f4:1b:f4:c1:39:64:27:6e:ef:2e:71:2d:08:9b:8b:0a:71:71:
         cb:dd:d6:c3:f1:07:69:45:db:6d:aa:3a:b8:7d:96:d5:44:38:
         82:a9:4b:53:d1:a5:19:5f:f9:d0:e2:85:95:16:99:72:c3:4d:
         12:59:08:a9:b2:de:4f:7c:5e:85:08:72:d6:b2:27:c0:d2:73:
         46:d4:81:aa:a7:20:24:9a:8f:d4:39:39:bb:59:b9:67:f5:5c:
         1a:52:a7:06:50:88:48:9c:a2:b7:54:cf:9d:4b:1a:6c:cd:50:
         2f:75:8b:28:52:f6:dc:c9:e2:15:ad:57:18:29:8c:49:86:7c:
         cf:fe:1d:8c:4b:e0:ef:69:d7:d9:f6:37:ab:b2:d1:26:b9:2e:
         b5:b2:d3:2c:0b:8a:84:b3:8c:53:09:7f:76:1b:08:4a:e6:90:
         d3:43:2c:d3:15:05:81:8a:b9:7a:56:81:3f:1f:29:5c:c7:70:
         07:05:9b:89:6a:0f:95:d6:57:fc:30:3a:6f:44:8c:20:2f:44:
         76:33:f0:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfNYSUSa8lfX5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2NjYzYmUtMDk1Ny00NWNkLTg2ZDYtZTNkNjM1NGY2
YjliMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDAxNDA0YjQtOGZjMS00NDFkLWFkZjQtYTNkY2VlNmY2NmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtESsZQvw5JQPJ3DdsWQyhQh1HY6Vb8+OCof9
hJsmpcmGsLAsyDsF2bUiF66kOB3K9eLE7SL2Ct0dgvXLeRvnrSq1ox5rI8UE430x
fL2Lyg/nXReu1HRhkfqk8VnD9TLTx09lPrpyn6fwfukLweKbCJ3/dfNCwG+U1ve2
GH67XkkhEDXb9k2rHH3lxJ30CjZazMFi0bhiSt6kvC1yZi3a5pVTxJMMDUmV5Jtr
xjoFSyAhPcnekr0ljGObWT1wXxECCwbo2ENSO7FFRESL/RWmjeodfy0HTZ1NLb9J
8bV9C/0SMWge4/hnpf9NrQI5U0JHvS493CrS6Rm25+k7xL3qlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIi2bZlzBBravWujuFbEtKEfe1i+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2
NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2MzU0ZjZiOWIvZjVlNjk4NDMtNWM1NC0z
ODAzLTg4NDgtMjY5NTAzN2E3NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGY2NjYzYmUtMDk1Ny00NWNkLTg2
ZDYtZTNkNjM1NGY2YjliLzhmNjY2M2JlLTA5NTctNDVjZC04NmQ2LWUzZDYzNTRm
NmI5Yi5jcmwwHwYDVR0jBBgwFoAUlTXciMlOhWGTasimvQgR0KCufsYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2
MzU0ZjZiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKH9qncg6XQ3j0wN9b9fmm9i9lUyPqaWmiYDFR9BHlSNvvJ/kH6kFM1U
kCJ9PGB8COOdfHvA9/Qb9ME5ZCdu7y5xLQibiwpxccvd1sPxB2lF222qOrh9ltVE
OIKpS1PRpRlf+dDihZUWmXLDTRJZCKmy3k98XoUIctayJ8DSc0bUgaqnICSaj9Q5
ObtZuWf1XBpSpwZQiEicordUz51LGmzNUC91iyhS9tzJ4hWtVxgpjEmGfM/+HYxL
4O9p19n2N6uy0Sa5LrWy0ywLioSzjFMJf3YbCErmkNNDLNMVBYGKuXpWgT8fKVzH
cAcFm4lqD5XWV/wwOm9EjCAvRHYz8FM=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:31:06 2026 by rpki-client