Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa
File:                     1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa (raw, json)
Hash identifier:          yHYMJbGVfurE+XHyyA7y9Ub/8ON+zCj6KkEGjwJQQb8=
Subject key identifier:   57:06:DF:03:F0:09:BA:E5:CF:DB:C5:F1:0A:14:10:4B:0D:9D:99:37
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E3CF9C55EC0940A2606624040
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     55256
IP address blocks:        158.95.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c5:5e:c0:94:0a:26:06:62:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=8442779f-205f-40f1-b115-a4a28f1faa5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:52:cd:bb:66:c0:a3:90:25:78:18:90:88:
                    9d:09:ae:1b:16:b7:2f:11:2f:e4:46:0b:73:a5:55:
                    c5:47:21:45:65:18:f8:69:f0:fa:2b:a0:ac:7b:b3:
                    29:7d:d6:ad:74:2d:4a:cf:f5:44:df:4e:c5:7a:c7:
                    99:23:a4:a5:cb:03:b1:d7:1e:f9:49:c3:42:5e:31:
                    cc:4a:6f:17:1f:09:ff:c6:5e:09:f9:d9:a5:5d:7d:
                    82:0e:44:d9:85:38:50:18:c7:6a:3f:75:4c:45:dc:
                    8e:f2:9a:69:90:71:6d:98:77:15:17:55:2d:eb:18:
                    4a:1c:06:1e:61:bc:33:81:d8:4d:e6:98:f4:81:57:
                    13:79:b4:12:cc:c8:fe:de:ed:f1:89:36:10:0a:d4:
                    08:99:3f:14:fe:33:67:9d:86:eb:7a:af:c6:13:fc:
                    3c:30:68:17:61:6a:12:24:11:4b:f3:d3:74:84:0e:
                    d0:13:d7:a6:67:d8:ab:a4:c4:91:a8:4c:28:4a:ac:
                    1a:69:5b:31:fe:0c:14:f4:8b:43:0e:8a:58:03:ce:
                    13:9c:6d:b8:f5:95:fb:53:c0:3f:2f:de:c0:3e:1d:
                    56:d3:54:ad:e2:6a:e0:1b:d7:32:d1:d4:b1:41:2e:
                    ea:f9:8b:06:7d:51:60:e7:d0:4f:af:9a:da:4d:88:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:DF:03:F0:09:BA:E5:CF:DB:C5:F1:0A:14:10:4B:0D:9D:99:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:b8:b0:87:a7:8a:91:63:f9:ba:19:8c:7b:83:c4:30:e2:
         c7:a8:a0:83:a7:ac:ae:5d:5a:ca:5e:56:99:f7:45:1c:ae:f7:
         b2:16:d4:42:ec:d1:7c:53:25:86:03:6b:90:bc:4a:68:b1:db:
         ee:a1:0b:c0:f2:a0:f2:07:ef:b0:c8:22:a5:db:a4:89:31:b9:
         05:d2:69:60:54:1d:35:c1:e4:dd:cd:99:c1:e1:45:37:10:cb:
         37:91:fa:55:8d:6f:16:ac:1d:8e:26:e7:d7:97:c7:71:be:e1:
         10:a2:24:7f:f8:fa:56:70:25:27:18:19:5c:eb:86:e8:53:56:
         b6:2a:51:69:86:c5:dd:30:19:0c:2b:6a:bf:18:50:ff:2d:60:
         26:9a:0b:b2:89:b0:09:56:51:f0:09:97:d9:a0:00:bb:a1:62:
         f5:80:ff:07:85:9e:49:52:29:84:76:19:5f:30:4b:ea:59:fb:
         d0:82:a7:ae:ad:a3:50:51:85:2e:bd:90:00:ca:8f:06:30:e0:
         f8:b4:9c:0f:33:ed:70:15:f7:4b:8f:74:9b:af:f4:82:3c:0d:
         d9:e2:a5:b3:21:4c:a4:d0:1f:34:f3:10:4c:9b:9c:46:bc:ad:
         30:7b:fa:26:3b:82:3d:fa:b4:f1:66:86:db:56:f4:e3:f8:bb:
         e3:3a:ae:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+cVewJQKJgZiQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj
YWQ5MB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk
ODQ0Mjc3OWYtMjA1Zi00MGYxLWIxMTUtYTRhMjhmMWZhYTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJSzbtmwKOQJXgYkIidCa4bFrcvES/kRgtz
pVXFRyFFZRj4afD6K6Cse7MpfdatdC1Kz/VE307FeseZI6SlywOx1x75ScNCXjHM
Sm8XHwn/xl4J+dmlXX2CDkTZhThQGMdqP3VMRdyO8pppkHFtmHcVF1Ut6xhKHAYe
YbwzgdhN5pj0gVcTebQSzMj+3u3xiTYQCtQImT8U/jNnnYbreq/GE/w8MGgXYWoS
JBFL89N0hA7QE9emZ9irpMSRqEwoSqwaaVsx/gwU9ItDDopYA84TnG249ZX7U8A/
L97APh1W01St4mrgG9cy0dSxQS7q+YsGfVFg59BPr5raTYjLGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcG3wPwCbrlz9vF8QoUEEsNnZk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz
MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMWRmODAzMmYtOGNiYy0z
YmZhLTliMzYtMmM2MzE1OGE0ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz
ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy
Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3
MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+0uLCHp4qRY/m6GYx7g8Qw4seooIOnrK5dWspeVpn3RRyu97IW1ELs
0XxTJYYDa5C8Smix2+6hC8DyoPIH77DIIqXbpIkxuQXSaWBUHTXB5N3NmcHhRTcQ
yzeR+lWNbxasHY4m59eXx3G+4RCiJH/4+lZwJScYGVzrhuhTVrYqUWmGxd0wGQwr
ar8YUP8tYCaaC7KJsAlWUfAJl9mgALuhYvWA/weFnklSKYR2GV8wS+pZ+9CCp66t
o1BRhS69kADKjwYw4Pi0nA8z7XAV90uPdJuv9II8DdnipbMhTKTQHzTzEEybnEa8
rTB7+iY7gj36tPFmhttW9OP4u+M6ruI=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:48 2026 by rpki-client