Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
File:                     40dfe575-7376-3072-83e5-39cbefff6fa0.roa (raw, json)
Hash identifier:          od9cg+rI0jqRq4NSWquyGcmXrFxm0wzIIsVYDpy/DJY=
Subject key identifier:   17:17:82:03:B9:8A:79:6E:29:C2:74:B6:2E:9E:67:65:1A:DD:29:BD
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584E66DA1EC2AF8857034B889480
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     7018
IP address blocks:        64.112.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1e:c2:af:88:57:03:4b:88:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=42dec263-12d6-4525-8e34-87d6fa765139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:22:1d:59:09:83:5e:59:4b:24:0f:32:46:
                    6e:71:d8:89:ef:81:3f:21:72:26:9a:ec:d0:ab:63:
                    69:04:a1:c0:4e:0c:fc:67:38:c1:67:a5:ec:6c:71:
                    97:ba:98:a4:8a:59:a6:18:92:98:96:6b:1d:7d:cb:
                    13:60:c0:f7:8b:56:1c:7e:97:19:e9:a9:48:15:b5:
                    c1:cd:18:a9:42:7d:67:b7:74:8d:3e:b2:b7:e6:c1:
                    2e:1a:78:a7:46:c4:b5:c8:ef:43:05:17:c3:18:88:
                    13:ed:98:76:c9:55:b0:fb:59:72:e7:6b:2a:3d:38:
                    42:9b:96:48:f8:f1:5e:00:cf:6c:4b:ec:3a:d1:f0:
                    39:cb:eb:af:be:eb:3e:39:fd:11:85:fa:f1:3b:98:
                    b9:bf:a0:ef:5f:85:08:b4:7e:fa:75:48:d9:e9:c4:
                    99:13:00:f4:7f:06:04:71:ac:3d:e6:fc:d6:b0:db:
                    e6:45:52:0d:1b:12:43:13:22:a3:c0:4a:16:22:fb:
                    2c:9a:aa:27:c2:db:04:cd:e6:0d:2f:cd:1b:1b:f0:
                    8f:84:d9:c6:b7:a2:ef:40:d7:0c:fb:21:ed:c9:55:
                    a9:db:01:7a:ed:dd:a7:af:3c:18:59:d2:35:cd:be:
                    cb:7e:d7:0f:09:8d:86:75:54:bc:d6:4e:95:2d:69:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:82:03:B9:8A:79:6E:29:C2:74:B6:2E:9E:67:65:1A:DD:29:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:1f:d9:92:22:70:98:78:f2:9b:18:fb:21:ad:29:c1:00:24:
         fb:a0:d1:4c:ad:52:e1:c8:02:fc:4d:70:81:30:cb:65:18:08:
         18:27:35:a7:39:15:cf:72:f4:80:43:e3:c0:d2:56:e9:73:4b:
         ec:bd:08:40:32:e1:70:4b:e1:98:66:53:a5:c6:8a:dc:ac:8e:
         93:cb:08:7c:dd:56:8f:8d:c2:05:ab:bb:b3:32:c5:69:ab:b5:
         48:ff:64:d2:3d:2d:4d:79:c3:93:63:1a:d3:3b:c5:d4:71:4c:
         fd:98:2c:32:2d:73:19:02:81:1d:4b:ae:13:69:de:c6:2c:6c:
         b7:10:9f:a1:d2:98:c3:57:c8:1f:99:fd:7c:74:b0:5d:98:d4:
         19:a7:47:0b:0c:c2:51:5c:b7:51:1b:17:ce:a1:df:17:a8:15:
         36:c4:9e:3c:aa:46:00:6f:18:32:cf:70:95:11:e8:15:cb:77:
         38:0f:26:cf:3f:19:33:aa:0b:8f:63:16:68:6f:f4:dd:61:df:
         38:4b:15:87:78:1f:06:48:eb:0c:bc:35:a8:f9:6a:53:bf:e3:
         98:5c:4f:49:29:3c:36:02:e1:ca:37:9f:2e:61:b1:1a:fd:7e:
         65:1e:cb:6c:c0:99:fa:82:8c:fe:09:75:cc:ef:0b:44:7e:e6:
         61:40:39:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2h7Cr4hXA0uIlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI4ODNhYTctYmQ0Zi00NzAzLWIwNDQtNTk1NTIwNThm
MjY2MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NDJkZWMyNjMtMTJkNi00NTI1LThlMzQtODdkNmZhNzY1MTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfwiHVkJg15ZSyQPMkZucdiJ74E/IXImmuzQ
q2NpBKHATgz8ZzjBZ6XsbHGXupikilmmGJKYlmsdfcsTYMD3i1YcfpcZ6alIFbXB
zRipQn1nt3SNPrK35sEuGninRsS1yO9DBRfDGIgT7Zh2yVWw+1ly52sqPThCm5ZI
+PFeAM9sS+w60fA5y+uvvus+Of0RhfrxO5i5v6DvX4UItH76dUjZ6cSZEwD0fwYE
caw95vzWsNvmRVINGxJDEyKjwEoWIvssmqonwtsEzeYNL80bG/CPhNnGt6LvQNcM
+yHtyVWp2wF67d2nrzwYWdI1zb7LftcPCY2GdVS81k6VLWnHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcXggO5inluKcJ0ti6eZ2Ua3Sm9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4
M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1MjA1OGYyNjYvNDBkZmU1NzUtNzM3Ni0z
MDcyLTgzZTUtMzljYmVmZmY2ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGI4ODNhYTctYmQ0Zi00NzAzLWIw
NDQtNTk1NTIwNThmMjY2LzBiODgzYWE3LWJkNGYtNDcwMy1iMDQ0LTU5NTUyMDU4
ZjI2Ni5jcmwwHwYDVR0jBBgwFoAUg6nTSQHrGEmvKFm8LP4te7SjH40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjg4M2FhNy1iZDRmLTQ3MDMtYjA0NC01OTU1
MjA1OGYyNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALIf2ZIicJh48psY+yGtKcEAJPug0UytUuHIAvxNcIEwy2UYCBgnNac5
Fc9y9IBD48DSVulzS+y9CEAy4XBL4ZhmU6XGitysjpPLCHzdVo+NwgWru7MyxWmr
tUj/ZNI9LU15w5NjGtM7xdRxTP2YLDItcxkCgR1LrhNp3sYsbLcQn6HSmMNXyB+Z
/Xx0sF2Y1BmnRwsMwlFct1EbF86h3xeoFTbEnjyqRgBvGDLPcJUR6BXLdzgPJs8/
GTOqC49jFmhv9N1h3zhLFYd4HwZI6wy8Naj5alO/45hcT0kpPDYC4co3ny5hsRr9
fmUey2zAmfqCjP4JdczvC0R+5mFAObo=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:19:42 2026 by rpki-client