Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa
File:                     519e7b09-a5a1-3855-8709-07a3d744d492.roa (raw, json)
Hash identifier:          AoMKOxVHStorBJM9qo2UbGGAuRcy2vqnVMvA5HTWzvs=
Subject key identifier:   EB:92:CF:6D:FF:C3:E4:F6:D9:63:95:91:D8:9B:77:8B:66:56:C9:7F
Certificate issuer:       /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa
Certificate serial:       010D0C9F4328584DF3BE0CF6722F61B0CB8DD000
Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa
Signing time:             Mon 25 May 2026 15:25:56 +0000
ROA not before:           Mon 25 May 2026 15:25:56 +0000
ROA not after:            Sun 23 Aug 2026 15:25:56 +0000
asID:                     399955
IP address blocks:        96.45.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:be:0c:f6:72:2f:61:b0:cb:8d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa
        Validity
            Not Before: May 25 15:25:56 2026 GMT
            Not After : Aug 23 15:25:56 2026 GMT
        Subject: CN=3f165f9b-92ef-4d49-a847-328cbb932347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:df:74:52:f3:c3:c5:d5:10:14:cb:04:06:
                    27:75:6f:fc:77:fa:cd:31:1a:a3:c6:14:82:40:33:
                    6e:03:0a:71:32:62:4b:98:a8:3d:b0:f7:aa:1e:85:
                    44:80:db:29:d8:c7:32:7c:f7:56:f7:02:bf:40:ed:
                    e9:ec:be:80:88:50:b9:e7:a6:e0:cf:08:c1:9d:2e:
                    d7:25:e4:26:4d:8f:dd:7e:f1:4d:8e:6a:a9:c2:b3:
                    fc:ea:81:f2:5f:6c:5d:dc:0e:69:4e:7e:dc:94:e7:
                    6b:1a:30:60:6b:4f:cf:5f:a2:26:51:4d:8b:12:8c:
                    3e:24:51:22:f0:24:73:ed:02:b5:7a:3d:32:84:d4:
                    aa:22:44:ea:5a:10:cb:a9:53:9b:30:78:74:0a:72:
                    96:c0:c8:b7:b7:e7:43:3c:a8:74:c3:f2:f3:e5:81:
                    90:21:62:43:a5:55:9c:65:07:d3:b1:b3:51:1f:9d:
                    ed:31:41:90:48:91:a5:06:ea:21:20:70:9b:f5:1e:
                    d6:1a:ea:3f:e2:a6:36:a5:8e:b8:4a:a6:3c:4a:ad:
                    f3:ba:9b:a2:fe:55:b0:5b:a8:53:11:14:fd:98:0b:
                    0c:39:33:c6:64:8e:e2:fc:93:87:4d:8f:47:96:2b:
                    96:b0:da:c4:3c:77:8d:9e:ae:9a:1f:a4:9a:ce:b8:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:92:CF:6D:FF:C3:E4:F6:D9:63:95:91:D8:9B:77:8B:66:56:C9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl

            X509v3 Authority Key Identifier:
                keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:af:98:fc:23:f1:97:43:d3:63:24:d7:1f:ae:e0:93:94:85:
         65:62:7c:69:b8:e0:1d:97:90:49:f3:c3:a6:a9:5f:5e:49:5e:
         fb:9e:bc:40:8f:11:b3:fe:92:b6:c5:37:e7:29:de:49:1b:bf:
         d8:07:0b:91:d0:5e:df:56:ca:1e:3c:e7:4d:76:02:ff:2e:08:
         d6:8a:bf:9e:bf:b8:da:04:de:69:87:d3:54:4c:b2:42:eb:67:
         5a:0e:f4:93:a7:5c:29:d5:0f:e6:a7:d3:a4:a8:b5:6b:f8:35:
         ca:b2:ea:42:a1:b1:59:e9:7e:1c:e3:0e:bb:fb:99:6b:9c:9d:
         df:98:72:95:b0:30:d6:e6:aa:52:e6:0c:d4:c8:e3:07:e0:31:
         b2:72:90:20:a3:e5:cb:60:1c:73:49:42:c1:92:f1:30:f2:9d:
         8f:58:66:d2:87:24:44:ab:d5:60:4b:8e:67:20:9d:3e:2e:d8:
         43:68:57:6c:5e:4a:75:e0:b2:67:6c:92:e8:3c:fa:2e:4f:b0:
         54:43:27:cf:02:54:f0:da:cf:73:11:3c:4d:36:a9:b4:90:72:
         44:57:29:38:54:78:07:2d:8c:83:98:44:b9:23:f5:8a:5d:85:
         3b:2d:c6:2e:fb:27:6e:0b:4e:36:6a:87:89:f2:4a:b3:27:8c:
         9c:79:df:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zvgz2ci9hsMuN0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi
YmFhMB4XDTI2MDUyNTE1MjU1NloXDTI2MDgyMzE1MjU1NlowLzEtMCsGA1UEAxMk
M2YxNjVmOWItOTJlZi00ZDQ5LWE4NDctMzI4Y2JiOTMyMzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivjfdFLzw8XVEBTLBAYndW/8d/rNMRqjxhSC
QDNuAwpxMmJLmKg9sPeqHoVEgNsp2McyfPdW9wK/QO3p7L6AiFC556bgzwjBnS7X
JeQmTY/dfvFNjmqpwrP86oHyX2xd3A5pTn7clOdrGjBga0/PX6ImUU2LEow+JFEi
8CRz7QK1ej0yhNSqIkTqWhDLqVObMHh0CnKWwMi3t+dDPKh0w/Lz5YGQIWJDpVWc
ZQfTsbNRH53tMUGQSJGlBuohIHCb9R7WGuo/4qY2pY64SqY8Sq3zupui/lWwW6hT
ERT9mAsMOTPGZI7i/JOHTY9HliuWsNrEPHeNnq6aH6SazrgMnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuSz23/w+T22WOVkdibd4tmVsl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy
YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvNTE5ZTdiMDktYTVhMS0z
ODU1LTg3MDktMDdhM2Q3NDRkNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm
NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw
YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2
MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmvmPwj8ZdD02Mk1x+u4JOUhWVifGm44B2XkEnzw6apX15JXvuevECP
EbP+krbFN+cp3kkbv9gHC5HQXt9Wyh485012Av8uCNaKv56/uNoE3mmH01RMskLr
Z1oO9JOnXCnVD+an06SotWv4Ncqy6kKhsVnpfhzjDrv7mWucnd+YcpWwMNbmqlLm
DNTI4wfgMbJykCCj5ctgHHNJQsGS8TDynY9YZtKHJESr1WBLjmcgnT4u2ENoV2xe
SnXgsmdskug8+i5PsFRDJ88CVPDaz3MRPE02qbSQckRXKThUeActjIOYRLkj9Ypd
hTstxi77J24LTjZqh4nySrMnjJx53+8=
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:15:17 2026 by rpki-client