Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/558b0f65-297e-35a7-adb5-3f8d0c064781.roa
File:                     558b0f65-297e-35a7-adb5-3f8d0c064781.roa (raw, json)
Hash identifier:          tLmVzdA47gawOOxXjZd+KJSsrleOwjA1Rp+QUQsKvQQ=
Subject key identifier:   E3:50:69:56:AB:D2:5C:03:A2:1B:A8:6C:7F:1F:33:43:A0:1F:6A:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E1DD577D78C2CE7ED93B2B720
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/558b0f65-297e-35a7-adb5-3f8d0c064781.roa
Signing time:             Tue 09 Jun 2026 17:17:04 +0000
ROA not before:           Tue 09 Jun 2026 17:17:04 +0000
ROA not after:            Mon 07 Sep 2026 17:17:04 +0000
asID:                     47007
IP address blocks:        67.203.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:d5:77:d7:8c:2c:e7:ed:93:b2:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  9 17:17:04 2026 GMT
            Not After : Sep  7 17:17:04 2026 GMT
        Subject: CN=af4c7653-43e7-40bc-a0c2-b9512f022624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0c:d3:5a:72:b3:32:e6:28:33:44:29:01:13:
                    33:f4:69:44:ad:08:b2:50:f6:a7:a5:9d:d5:86:cc:
                    8b:97:80:21:61:67:0e:96:89:d9:35:c2:b4:f3:8d:
                    1c:10:67:4d:79:7d:bb:51:ba:46:43:2a:9a:60:b2:
                    fd:36:4f:5e:24:db:6c:6c:d3:0f:f7:f8:96:6d:21:
                    7a:d8:9c:ef:ca:14:50:c7:d0:f4:c1:d5:87:d2:87:
                    e0:ac:2c:61:60:c0:d0:0b:42:92:3e:ee:92:dc:e6:
                    2d:87:a4:e5:52:33:68:a4:c4:2b:a1:64:bf:1e:e4:
                    bb:44:bc:d2:d9:5a:e8:13:e8:59:87:4f:24:09:ef:
                    dc:86:ec:cc:54:71:5d:07:75:52:6c:ab:15:c5:47:
                    64:36:48:dc:e5:5b:de:63:d7:9d:35:d4:bd:03:12:
                    8c:12:2b:8d:44:16:cd:b7:db:9f:e8:40:21:a7:7f:
                    22:4d:cb:cd:69:e9:ee:37:d1:32:80:b5:31:ab:d0:
                    96:d9:c7:0e:58:29:de:6a:47:79:f2:b5:9f:0a:a6:
                    67:65:df:09:ba:4b:d1:a5:e6:65:60:99:07:a1:79:
                    ce:97:f9:a9:cd:6f:a0:12:a8:d6:86:f5:66:a7:8b:
                    60:6b:72:d5:c3:2c:e0:27:b1:8c:8a:c7:7d:c4:7b:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:69:56:AB:D2:5C:03:A2:1B:A8:6C:7F:1F:33:43:A0:1F:6A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/558b0f65-297e-35a7-adb5-3f8d0c064781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:27:08:08:82:28:8d:44:05:c5:44:cc:b5:a3:83:db:3b:b4:
         cb:fc:5b:aa:9a:52:ba:06:e1:4f:2c:9b:4c:49:16:9c:fb:e4:
         b0:0a:67:7a:68:bf:25:c4:95:9d:f3:c6:56:30:a6:c6:95:21:
         ab:03:e0:16:8f:b5:74:ba:bc:1b:4e:4a:e3:b0:87:45:ae:f3:
         dc:c0:5b:6d:87:84:cd:82:18:d5:6f:26:ce:09:fd:e9:4a:dd:
         c2:06:6e:3e:e2:a7:32:e6:68:28:1e:8a:18:1e:0e:0e:46:65:
         4f:98:8e:e6:ad:ee:77:46:2d:18:b0:70:48:d4:b5:89:6d:6d:
         cc:d6:0c:97:42:82:c3:29:ef:31:73:4e:27:c1:24:b2:9e:59:
         fc:94:f2:96:28:c6:3b:fa:59:b5:ab:46:0a:4a:37:02:ad:7c:
         00:13:c7:1b:16:02:5a:5d:07:10:c5:e7:7f:5c:40:8a:9c:53:
         38:0f:6a:97:b4:09:43:da:e0:50:b0:55:44:17:a1:b8:08:6c:
         c0:db:1d:01:56:bd:7a:02:08:b9:b1:91:68:b6:be:76:a7:4d:
         54:74:34:c0:d3:96:b0:33:a2:aa:73:28:fc:fb:f4:4d:b1:99:
         08:4e:53:4e:cc:55:d1:35:ac:8a:ab:3c:f3:45:2f:86:f5:86:
         22:8e:3e:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4d1XfXjCzn7ZOytyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDYwOTE3MTcwNFoXDTI2MDkwNzE3MTcwNFowLzEtMCsGA1UEAxMk
YWY0Yzc2NTMtNDNlNy00MGJjLWEwYzItYjk1MTJmMDIyNjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wzTWnKzMuYoM0QpARMz9GlErQiyUPanpZ3V
hsyLl4AhYWcOlonZNcK0840cEGdNeX27UbpGQyqaYLL9Nk9eJNtsbNMP9/iWbSF6
2JzvyhRQx9D0wdWH0ofgrCxhYMDQC0KSPu6S3OYth6TlUjNopMQroWS/HuS7RLzS
2VroE+hZh08kCe/chuzMVHFdB3VSbKsVxUdkNkjc5VveY9edNdS9AxKMEiuNRBbN
t9uf6EAhp38iTcvNaenuN9EygLUxq9CW2ccOWCneakd58rWfCqZnZd8JukvRpeZl
YJkHoXnOl/mpzW+gEqjWhvVmp4tga3LVwyzgJ7GMisd9xHu+MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONQaVar0lwDohuobH8fM0OgH2oCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTU4YjBmNjUtMjk3ZS0z
NWE3LWFkYjUtM2Y4ZDBjMDY0NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8sOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgnCAiCKI1EBcVEzLWjg9s7tMv8W6qaUroG4U8sm0xJFpz75LAKZ3po
vyXElZ3zxlYwpsaVIasD4BaPtXS6vBtOSuOwh0Wu89zAW22HhM2CGNVvJs4J/elK
3cIGbj7ipzLmaCgeihgeDg5GZU+Yjuat7ndGLRiwcEjUtYltbczWDJdCgsMp7zFz
TifBJLKeWfyU8pYoxjv6WbWrRgpKNwKtfAATxxsWAlpdBxDF539cQIqcUzgPape0
CUPa4FCwVUQXobgIbMDbHQFWvXoCCLmxkWi2vnanTVR0NMDTlrAzoqpzKPz79E2x
mQhOU07MVdE1rIqrPPNFL4b1hiKOPks=
-----END CERTIFICATE-----
Generated at Wed Jun 10 13:52:43 2026 by rpki-client