Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
File:                     15f75e85-b2fd-3814-915a-0e36851d49a1.roa (raw, json)
Hash identifier:          uSHHz+eQo4jJHvxZ8Qtd/S9vlvq/zJu669btJ/7ukb8=
Subject key identifier:   E6:C4:01:25:9E:16:37:D6:2D:41:E9:29:49:83:18:42:CB:22:42:FA
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584E4AEF3CC57A3E1D8D5CB43B80
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     399812
IP address blocks:        64.29.136.0/24 maxlen: 24
                          2607:f3a0:a008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3c:c5:7a:3e:1d:8d:5c:b4:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=0e8f08ec-b87c-40b7-964d-96fc77f6422f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:ac:8e:46:4b:a7:db:6d:80:50:b9:0c:51:
                    9c:b1:a5:64:80:e0:ad:f0:b0:ee:e1:9b:b7:92:fe:
                    d4:4e:cf:6e:72:c0:af:42:4d:ef:1b:dc:25:3d:d0:
                    d8:08:0c:da:9f:91:6c:92:d4:44:a0:63:2b:c4:1e:
                    ce:75:4e:09:a8:ba:47:29:e8:f4:ca:52:23:7d:eb:
                    f3:f4:19:6f:a2:d6:de:ce:af:53:79:40:97:12:ac:
                    63:90:cb:6c:7c:3f:ba:be:3c:a9:9e:07:a6:ad:3f:
                    5e:2b:25:9b:66:61:eb:c1:88:44:df:ea:c3:b2:1b:
                    4a:05:db:e2:7b:ef:e8:31:94:82:9d:a7:9d:85:20:
                    3a:2b:50:a0:64:8b:24:f5:60:5a:f8:d4:11:3e:f8:
                    07:2f:1b:91:b7:4e:e7:5a:5d:d7:c2:a7:16:aa:78:
                    93:0f:d7:93:9e:de:19:d3:09:bc:fc:11:dd:2b:2d:
                    78:ee:06:92:5f:31:cb:ac:2d:15:72:e7:30:96:1d:
                    58:d5:fc:5d:80:67:a5:94:04:c4:71:6f:f7:cd:09:
                    58:98:e5:7a:d1:8f:ac:73:86:5d:bd:88:74:a7:1d:
                    6c:fb:7e:40:86:e7:39:ce:f2:b9:c4:e2:de:32:fc:
                    34:49:55:f9:66:d7:9b:fc:1a:76:be:99:25:3c:84:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C4:01:25:9E:16:37:D6:2D:41:E9:29:49:83:18:42:CB:22:42:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.136.0/24
                IPv6:
                  2607:f3a0:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:3a:8d:31:e3:6a:32:c7:84:64:16:ab:db:b4:16:2a:81:
         db:6e:5d:04:d6:47:5b:39:f4:72:5e:84:7d:e5:11:eb:5d:cd:
         90:e9:83:05:3d:ed:22:90:43:28:48:f2:2c:b7:88:71:db:2d:
         7e:eb:08:60:b9:8b:d4:17:54:5c:60:a9:8d:b0:2f:ec:a3:e3:
         b8:df:68:e9:5d:48:e7:38:40:ea:96:2b:ec:99:16:83:cc:77:
         6e:cc:00:28:f0:6d:7b:cb:2a:0b:2e:e6:db:0c:2a:94:60:9b:
         72:aa:2a:c4:a4:97:c6:08:21:5e:72:7c:76:7f:5b:4b:b3:ba:
         52:0f:b2:a1:8e:a9:f0:e7:c2:55:12:9a:42:e2:9f:d9:41:79:
         73:8a:40:4b:cb:bc:99:b6:65:fd:c5:ad:bc:12:5c:5f:b4:72:
         4a:62:5e:64:e8:76:d2:63:49:08:18:f8:a4:5a:60:df:14:d3:
         2e:d6:c0:3d:a5:7b:5b:97:bf:a0:7e:e0:0f:71:18:4e:d3:42:
         ed:1c:7e:e3:f9:0a:99:08:9d:41:c8:99:b5:a8:01:e9:88:e4:
         65:9b:3c:c7:84:ea:39:a6:c2:b4:a5:1a:9c:56:05:3c:23:46:
         43:70:6e:8e:02:b1:8a:22:4b:b2:c5:98:51:aa:13:68:ca:7a:
         01:31:96:aa
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5K7zzFej4djVy0O4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MGU4ZjA4ZWMtYjg3Yy00MGI3LTk2NGQtOTZmYzc3ZjY0MjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrOsjkZLp9ttgFC5DFGcsaVkgOCt8LDu4Zu3
kv7UTs9ucsCvQk3vG9wlPdDYCAzan5FsktREoGMrxB7OdU4JqLpHKej0ylIjfevz
9Blvotbezq9TeUCXEqxjkMtsfD+6vjypngemrT9eKyWbZmHrwYhE3+rDshtKBdvi
e+/oMZSCnaedhSA6K1CgZIsk9WBa+NQRPvgHLxuRt07nWl3XwqcWqniTD9eTnt4Z
0wm8/BHdKy147gaSXzHLrC0Vcucwlh1Y1fxdgGellATEcW/3zQlYmOV60Y+sc4Zd
vYh0px1s+35Ahuc5zvK5xOLeMvw0SVX5Zteb/Bp2vpklPITjDwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFObEASWeFjfWLUHpKUmDGELLIkL6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMTVmNzVlODUtYjJmZC0z
ODE0LTkxNWEtMGUzNjg1MWQ0OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2IMA8E
AgACMAkDBwAmB/OgoAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiys6jTHjajLHhGQWq9u0FiqB225dBNZH
Wzn0cl6EfeUR613NkOmDBT3tIpBDKEjyLLeIcdstfusIYLmL1BdUXGCpjbAv7KPj
uN9o6V1I5zhA6pYr7JkWg8x3bswAKPBte8sqCy7m2wwqlGCbcqoqxKSXxgghXnJ8
dn9bS7O6Ug+yoY6p8OfCVRKaQuKf2UF5c4pAS8u8mbZl/cWtvBJcX7RySmJeZOh2
0mNJCBj4pFpg3xTTLtbAPaV7W5e/oH7gD3EYTtNC7Rx+4/kKmQidQciZtagB6Yjk
ZZs8x4TqOabCtKUanFYFPCNGQ3BujgKxiiJLssWYUaoTaMp6ATGWqg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:47 2026 by rpki-client