Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa
File:                     eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa (raw, json)
Hash identifier:          H3JAqqVfRx5iNrtD6RsWrjXgJQcwNKGxkHas7i/Ibic=
Subject key identifier:   02:16:1D:72:EF:8F:72:81:ED:63:E5:E5:36:43:06:47:CF:B0:0D:A8
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584F119CF9425A0ECE6029600380
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     25637
IP address blocks:        64.118.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f9:42:5a:0e:ce:60:29:60:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c3728236-c945-40b2-9257-2b32f5c0a5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:19:22:61:8e:62:3f:f7:ae:0c:3d:62:c1:
                    be:9c:2d:0e:3d:a6:05:6f:27:76:54:46:88:34:33:
                    5e:4f:8f:70:01:0e:1f:aa:5d:ed:a2:5f:ca:13:6c:
                    7a:b6:bd:a2:07:34:7f:5f:34:6f:51:d1:14:d3:f5:
                    6b:21:d7:75:ae:65:c6:cf:75:e7:fd:06:4b:a3:a6:
                    9e:d0:64:74:e0:69:69:37:bf:73:d2:03:41:27:65:
                    a5:b3:b8:34:b2:af:96:d5:2f:45:6f:49:91:3d:51:
                    0c:87:05:45:fb:a2:55:f1:08:6d:fb:d7:08:bd:3b:
                    bd:28:ea:a5:c1:5c:20:9b:a8:ef:4e:8a:81:b7:c4:
                    0d:48:a6:71:cd:0f:36:7b:aa:fe:ca:c1:c2:f9:88:
                    b4:cc:51:04:af:1d:74:b3:56:db:a3:1d:0f:76:33:
                    47:50:b8:af:1e:e1:bb:c2:d0:14:b6:a1:5d:71:69:
                    8a:11:a6:27:86:92:ac:68:b9:ea:95:71:8c:3d:41:
                    f3:e4:65:f1:58:25:0e:3e:30:61:4a:ae:05:bd:53:
                    27:6e:6b:19:17:be:41:ba:f7:fd:12:7d:35:f1:fa:
                    36:80:24:86:09:f1:1f:b2:81:2f:64:ec:ba:fe:1e:
                    6a:ad:3c:fa:d4:b3:7a:89:e8:bc:cf:64:f4:b7:b2:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:1D:72:EF:8F:72:81:ED:63:E5:E5:36:43:06:47:CF:B0:0D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:82:dc:71:f4:8b:2e:72:6a:6a:6a:fb:5d:e3:a6:fe:90:
         7d:9a:f2:be:4e:cf:5f:7f:8a:b6:f7:63:28:de:96:57:be:7e:
         2e:62:1d:8c:44:a8:90:e1:5e:ab:bb:79:b9:8a:37:55:fc:7f:
         93:39:2f:6b:c5:a5:65:7a:e2:3c:a7:40:1f:4a:58:3f:ca:b7:
         b9:7f:d3:45:03:7d:95:25:44:ae:5d:24:30:80:f8:c0:f4:33:
         18:44:6b:84:8a:19:6e:bd:17:9a:28:26:4f:a7:d0:5e:a3:c3:
         02:d9:fc:e7:83:4d:0d:b7:2b:ef:53:8e:b7:ea:d1:74:1f:ff:
         5a:fb:03:f6:67:1a:ff:7d:34:33:00:70:e1:e6:e2:31:e5:e0:
         4c:7a:a9:f6:d6:f7:2b:77:ba:a0:a6:07:a9:d1:73:e8:9f:27:
         cc:10:d5:e4:f3:7b:5f:3e:23:ab:b0:8c:2d:be:13:36:bb:34:
         92:82:38:cf:39:62:72:47:25:d7:1a:12:2d:57:e2:64:55:c6:
         4f:8e:6e:c3:3f:37:9e:16:e7:1a:4f:20:5d:ab:88:39:f0:ba:
         dd:b6:e0:ef:0a:6a:bf:6a:c9:6d:d5:98:55:d9:c0:a8:5d:9a:
         90:43:b6:34:da:8e:bd:f0:32:42:de:5b:25:0a:c4:ce:ad:af:
         20:55:91:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPlCWg7OYClgA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFmNDliNmYtYTE3MC00ODVlLThjMDctZDUxOGI5MDZj
NmFlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzM3MjgyMzYtYzk0NS00MGIyLTkyNTctMmIzMmY1YzBhNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl60ZImGOYj/3rgw9YsG+nC0OPaYFbyd2VEaI
NDNeT49wAQ4fql3tol/KE2x6tr2iBzR/XzRvUdEU0/VrIdd1rmXGz3Xn/QZLo6ae
0GR04GlpN79z0gNBJ2Wls7g0sq+W1S9Fb0mRPVEMhwVF+6JV8Qht+9cIvTu9KOql
wVwgm6jvToqBt8QNSKZxzQ82e6r+ysHC+Yi0zFEErx10s1bbox0PdjNHULivHuG7
wtAUtqFdcWmKEaYnhpKsaLnqlXGMPUHz5GXxWCUOPjBhSq4FvVMnbmsZF75Buvf9
En018fo2gCSGCfEfsoEvZOy6/h5qrTz61LN6iei8z2T0t7JMGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIWHXLvj3KB7WPl5TZDBkfPsA2oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0
OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4YjkwNmM2YWUvZWIxYmY2ZjgtOWI1Yi0z
ODIwLTkzMTEtZjkzNzdlMjFiZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmNDliNmYtYTE3MC00ODVlLThj
MDctZDUxOGI5MDZjNmFlL2ExZjQ5YjZmLWExNzAtNDg1ZS04YzA3LWQ1MThiOTA2
YzZhZS5jcmwwHwYDVR0jBBgwFoAUX9bbEgNtVA77X1VfwUr8INlUplQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4
YjkwNmM2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfDgtxx9Isucmpqavtd46b+kH2a8r5Oz19/irb3Yyjelle+fi5iHYxE
qJDhXqu7ebmKN1X8f5M5L2vFpWV64jynQB9KWD/Kt7l/00UDfZUlRK5dJDCA+MD0
MxhEa4SKGW69F5ooJk+n0F6jwwLZ/OeDTQ23K+9Tjrfq0XQf/1r7A/ZnGv99NDMA
cOHm4jHl4Ex6qfbW9yt3uqCmB6nRc+ifJ8wQ1eTze18+I6uwjC2+Eza7NJKCOM85
YnJHJdcaEi1X4mRVxk+ObsM/N54W5xpPIF2riDnwut224O8Kar9qyW3VmFXZwKhd
mpBDtjTajr3wMkLeWyUKxM6tryBVkXg=
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:04:34 2026 by rpki-client