Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/637fceb1-bead-3aae-ae54-f2014168b01a.roa
File:                     637fceb1-bead-3aae-ae54-f2014168b01a.roa (raw, json)
Hash identifier:          bKCOQHMnaM4Rr2NdJqN5IGbm6I5IYQ5vGkuV+v5q5LY=
Subject key identifier:   83:AF:52:4C:EE:9B:95:07:15:05:BA:FA:6D:D1:06:24:D7:2C:F1:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584ED431D7CB9E8D965D381F8300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/637fceb1-bead-3aae-ae54-f2014168b01a.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     47007
IP address blocks:        67.227.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d7:cb:9e:8d:96:5d:38:1f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=2c30b446-f7a1-4146-b2f0-6f2709bd3e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:fd:ff:45:b6:34:93:0f:41:0f:2c:88:16:
                    d3:ff:36:f8:27:43:a9:c8:db:07:96:c7:40:72:4b:
                    50:e2:16:53:6a:96:79:17:74:e8:bf:b1:32:4c:57:
                    6a:a2:4c:f0:31:5c:c6:d2:e8:c2:cc:8b:0c:09:f1:
                    53:19:ed:d9:1e:49:ea:e7:8b:0e:12:7f:37:85:ed:
                    d7:47:ab:c3:7e:f4:9e:84:67:1b:55:10:b2:ae:d8:
                    27:47:56:da:c1:20:61:23:a5:e3:8f:10:b7:c2:af:
                    98:6b:57:4c:8b:ed:a0:39:11:71:74:73:44:c8:95:
                    f7:b4:9e:7c:5f:4c:ff:63:75:02:1a:be:81:95:6e:
                    e9:48:79:72:25:6a:cd:bc:d4:b2:3e:3b:33:87:e9:
                    7e:dc:72:c6:e5:3f:f3:a3:fc:94:3c:79:ec:20:6a:
                    d8:09:22:ba:af:39:95:dc:78:4e:d2:38:bd:fa:79:
                    3f:5c:15:08:5b:f3:72:95:56:44:10:cb:bb:ae:33:
                    ba:d2:72:6b:1f:7f:50:d1:22:34:82:17:02:20:71:
                    40:d3:3a:75:1e:c8:fd:c5:d8:ae:87:b8:c4:c3:05:
                    3d:22:50:69:4b:09:90:fe:6e:62:d1:ac:7f:dc:4e:
                    c1:d4:ba:a6:9f:cb:b6:55:9e:e4:61:68:7a:23:7e:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AF:52:4C:EE:9B:95:07:15:05:BA:FA:6D:D1:06:24:D7:2C:F1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/637fceb1-bead-3aae-ae54-f2014168b01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:2e:1e:f7:61:9c:b5:97:e3:85:b4:86:c7:90:dc:e5:6f:
         e1:ea:2d:d3:ff:4e:d3:e9:8c:0c:b7:f7:bd:76:c9:7d:78:00:
         a1:e5:01:ff:c5:bb:8a:d7:a5:72:28:e6:97:45:05:75:a6:a1:
         90:eb:e3:3b:00:a5:d1:ec:45:77:9e:a1:67:f3:53:dd:a9:21:
         52:6c:1d:db:0c:35:1b:93:d9:05:d1:aa:c7:dd:7e:09:7f:d5:
         47:89:79:60:42:24:3d:7c:2f:a2:72:46:71:e2:44:9e:df:37:
         fa:cf:7c:fc:5b:bb:de:fe:23:50:51:d8:7d:d3:d8:68:10:9c:
         15:af:e4:03:48:a1:2d:a4:ee:5f:2d:30:e0:70:35:aa:ae:85:
         3c:90:fd:9a:74:23:26:e7:da:44:c1:a1:a1:c9:4b:7d:14:a0:
         07:5f:f3:c1:a9:2f:19:6b:b9:e4:f1:88:56:27:4c:97:49:56:
         eb:3f:32:f0:b9:2c:a3:f1:68:66:8c:cc:27:91:26:39:89:cc:
         83:ec:9b:cb:57:03:d7:19:02:9e:1d:53:6d:33:fe:83:b7:47:
         1f:4a:31:6a:ae:dc:5a:32:f2:b5:fb:05:ab:9a:aa:d8:8c:c0:
         ec:fa:37:db:af:fe:19:4b:19:12:84:85:12:dd:2e:54:2e:a9:
         57:97:0c:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMdfLno2WXTgfgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MmMzMGI0NDYtZjdhMS00MTQ2LWIyZjAtNmYyNzA5YmQzZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi79/0W2NJMPQQ8siBbT/zb4J0OpyNsHlsdA
cktQ4hZTapZ5F3Tov7EyTFdqokzwMVzG0ujCzIsMCfFTGe3ZHknq54sOEn83he3X
R6vDfvSehGcbVRCyrtgnR1bawSBhI6XjjxC3wq+Ya1dMi+2gORFxdHNEyJX3tJ58
X0z/Y3UCGr6BlW7pSHlyJWrNvNSyPjszh+l+3HLG5T/zo/yUPHnsIGrYCSK6rzmV
3HhO0ji9+nk/XBUIW/NylVZEEMu7rjO60nJrH39Q0SI0ghcCIHFA0zp1Hsj9xdiu
h7jEwwU9IlBpSwmQ/m5i0ax/3E7B1Lqmn8u2VZ7kYWh6I35oGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOvUkzum5UHFQW6+m3RBiTXLPEIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjM3ZmNlYjEtYmVhZC0z
YWFlLWFlNTQtZjIwMTQxNjhiMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+N2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ/Lh73YZy1l+OFtIbHkNzlb+HqLdP/TtPpjAy39712yX14AKHlAf/F
u4rXpXIo5pdFBXWmoZDr4zsApdHsRXeeoWfzU92pIVJsHdsMNRuT2QXRqsfdfgl/
1UeJeWBCJD18L6JyRnHiRJ7fN/rPfPxbu97+I1BR2H3T2GgQnBWv5ANIoS2k7l8t
MOBwNaquhTyQ/Zp0Iybn2kTBoaHJS30UoAdf88GpLxlrueTxiFYnTJdJVus/MvC5
LKPxaGaMzCeRJjmJzIPsm8tXA9cZAp4dU20z/oO3Rx9KMWqu3Foy8rX7BauaqtiM
wOz6N9uv/hlLGRKEhRLdLlQuqVeXDHA=
-----END CERTIFICATE-----
Generated at Thu Sep 17 22:48:03 2026 by rpki-client