Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
File:                     95820f3b-2efb-39bc-bdf4-69edf3a44951.roa (raw, json)
Hash identifier:          DvUYRIReyBP//wiIBA6xzrS5fwsDfSKfKNL90rbns+Q=
Subject key identifier:   C5:23:51:B0:BC:2B:FB:FD:FF:17:8B:AD:09:F9:97:6F:7A:4B:6E:B3
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F4328584EA7940946F996066C518846D8
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     210781
IP address blocks:        65.75.196.0/22 maxlen: 24
                          104.249.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:09:46:f9:96:06:6c:51:88:46:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8220e48d-b55d-42d9-9fe8-a36176de8430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:51:46:af:89:56:76:67:c0:ab:82:fe:da:
                    58:80:ba:58:ab:c3:e3:0d:8c:12:f9:dd:1b:1b:5d:
                    05:58:ee:12:87:0c:5d:2b:a3:1c:9d:1e:28:fd:ce:
                    7d:79:fe:27:69:f5:58:51:51:da:30:37:8d:ae:ae:
                    ec:1e:8b:c8:06:d1:11:08:3b:0d:29:9d:dd:51:2b:
                    f9:02:96:59:59:6b:5d:15:13:35:e3:a2:ca:8c:f9:
                    20:34:47:9b:8f:f1:7a:7d:e7:27:ca:de:80:2c:f9:
                    cd:66:84:6c:84:29:b8:97:48:4e:b2:cd:2b:a0:b8:
                    ed:76:f3:31:80:59:a9:6b:41:48:13:38:4b:90:a3:
                    47:90:79:8e:9e:fb:88:5d:30:b9:e9:f3:16:2f:8e:
                    43:2d:d7:da:4d:f7:61:24:1a:52:0f:4f:92:ca:71:
                    84:85:2c:7e:8e:3c:e8:1d:34:9b:98:74:30:5b:fb:
                    45:cd:20:a2:e3:ab:71:9c:51:df:c7:b6:84:6f:e8:
                    18:2d:e4:41:92:7e:83:e3:06:a1:e8:d5:a0:34:59:
                    47:ea:92:d9:6b:46:d9:4c:4a:c8:7c:33:d6:d7:5d:
                    fe:1c:17:b1:df:c5:ff:aa:cb:3f:57:9a:e8:69:79:
                    60:a4:70:fc:38:d0:6c:eb:f9:3c:3c:f2:0f:ea:8a:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:23:51:B0:BC:2B:FB:FD:FF:17:8B:AD:09:F9:97:6F:7A:4B:6E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.196.0/22
                  104.249.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:64:9c:95:57:bc:d9:58:af:77:74:db:e8:39:25:0a:25:
         a5:ea:e3:d1:f0:87:a3:69:5d:36:f0:54:b3:64:24:4a:71:22:
         2b:e4:cd:16:77:e9:e9:3a:a0:bc:28:d8:5c:27:ae:76:f1:fd:
         90:d2:d5:8e:ef:38:72:14:9e:ac:0d:22:13:46:77:6e:74:ad:
         cb:d3:64:1c:97:c2:7a:ce:f0:2d:32:db:0e:b5:b2:88:db:55:
         b2:53:e0:64:98:71:a8:38:c7:e4:b7:54:06:db:36:11:d5:7a:
         0d:0b:ed:06:3d:96:b8:8b:77:92:15:93:9f:8c:15:04:28:62:
         a3:93:ef:a2:64:bf:16:24:5a:ec:89:75:6a:9e:17:34:43:1a:
         c4:6f:53:6e:de:48:e9:0f:4f:e9:67:f7:ab:90:6e:b7:a1:d6:
         7f:b9:cc:43:71:cc:71:da:2a:1c:b7:2b:25:8e:88:c0:b5:97:
         f8:4b:d2:6c:23:12:7c:27:ec:5d:14:93:54:b7:6b:99:91:ec:
         f2:82:af:96:69:2c:77:44:6a:db:f6:25:8e:e5:7e:f2:49:7f:
         2d:fd:64:f1:5d:6a:5b:64:41:fb:bb:58:cf:66:11:42:ff:cd:
         a0:cb:0c:c3:6c:a4:5d:7a:38:d9:35:91:fb:5f:04:fe:5d:c3:
         2e:56:f8:be
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nlAlG+ZYGbFGIRtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4
MjFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODIyMGU0OGQtYjU1ZC00MmQ5LTlmZTgtYTM2MTc2ZGU4NDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhRRq+JVnZnwKuC/tpYgLpYq8PjDYwS+d0b
G10FWO4ShwxdK6McnR4o/c59ef4nafVYUVHaMDeNrq7sHovIBtERCDsNKZ3dUSv5
ApZZWWtdFRM146LKjPkgNEebj/F6fecnyt6ALPnNZoRshCm4l0hOss0roLjtdvMx
gFmpa0FIEzhLkKNHkHmOnvuIXTC56fMWL45DLdfaTfdhJBpSD0+SynGEhSx+jjzo
HTSbmHQwW/tFzSCi46txnFHfx7aEb+gYLeRBkn6D4wah6NWgNFlH6pLZa0bZTErI
fDPW113+HBex38X/qss/V5roaXlgpHD8ONBs6/k8PPIP6oqUmQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMUjUbC8K/v9/xeLrQn5l296S26zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm
ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvOTU4MjBmM2ItMmVmYi0z
OWJjLWJkZjQtNjllZGYzYTQ0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj
YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi
ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4
MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQUvEAwQC
aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGc/ZJyVV7zZWK93dNvoOSUKJaXq49Hwh6NpXTbwVLNkJEpx
IivkzRZ36ek6oLwo2Fwnrnbx/ZDS1Y7vOHIUnqwNIhNGd250rcvTZByXwnrO8C0y
2w61sojbVbJT4GSYcag4x+S3VAbbNhHVeg0L7QY9lriLd5IVk5+MFQQoYqOT76Jk
vxYkWuyJdWqeFzRDGsRvU27eSOkPT+ln96uQbreh1n+5zENxzHHaKhy3KyWOiMC1
l/hL0mwjEnwn7F0Uk1S3a5mR7PKCr5ZpLHdEatv2JY7lfvJJfy39ZPFdaltkQfu7
WM9mEUL/zaDLDMNspF16ONk1kftfBP5dwy5W+L4=
-----END CERTIFICATE-----
Generated at Tue Aug 11 09:13:41 2026 by rpki-client