Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa
File:                     0bf8b83b-53a3-3a18-9359-38a07be7967b.roa (raw, json)
Hash identifier:          ziUzPgUWFsQvIQe11uJD//bBPrpoVaOYUrZz+EILm4Q=
Subject key identifier:   7C:15:AF:07:C4:4E:56:B1:B0:F9:93:77:5B:C9:DF:09:1F:60:2E:64
Certificate issuer:       /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
Certificate serial:       010D0C9F4328584E7D2F7C1597E335771A51F880
Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     394708
IP address blocks:        199.38.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:15:97:e3:35:77:1a:51:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=9b43df39-3682-4b6e-86e6-f3cf86575dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:d2:38:c3:5d:e8:a1:e6:99:cc:c4:6c:2d:
                    ef:66:3e:c6:b2:04:05:2d:34:c1:36:3c:f7:34:ea:
                    d1:15:74:9d:15:f5:17:12:e3:cf:70:fc:47:fc:c7:
                    72:1d:7b:11:53:d4:cf:78:f3:0f:77:8f:1f:d1:38:
                    17:74:1f:ab:3a:22:4b:d2:9b:09:04:b2:48:11:45:
                    bd:59:33:19:78:f2:bb:fb:28:d3:c0:d8:ab:24:d0:
                    ab:b6:d1:fc:80:8d:21:e2:cd:2f:f8:3f:cf:70:fc:
                    d8:62:e2:54:69:31:47:69:cd:3b:3d:a5:94:b3:2e:
                    e5:c8:07:d6:47:a8:f0:1d:ff:a7:86:29:a5:d8:99:
                    e9:6a:35:36:ff:4f:fc:c3:bd:71:e9:26:9d:ac:63:
                    93:1b:62:d7:cc:8e:f3:21:62:b9:64:0d:11:4f:42:
                    6e:3e:7a:c8:9a:52:b1:a2:a3:93:0b:f9:43:37:b3:
                    32:62:ce:3a:e4:b1:dc:f9:a1:de:f3:94:19:e3:5d:
                    ca:7c:46:15:18:2c:c7:3a:ca:85:6a:27:9d:d2:e9:
                    13:ff:0b:39:97:3f:ac:d1:9f:96:a8:3c:88:14:c1:
                    3b:8c:b4:d6:ef:e1:a0:c3:e4:b0:ec:c8:db:80:0b:
                    60:7e:e6:ed:60:b3:f9:b3:7d:85:89:c2:24:a9:9a:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:AF:07:C4:4E:56:B1:B0:F9:93:77:5B:C9:DF:09:1F:60:2E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl

            X509v3 Authority Key Identifier:
                keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:06:7e:2c:c2:40:5c:ef:2d:dd:ad:f3:c9:9f:77:46:0a:c1:
         cd:c4:34:5f:56:e6:6d:ab:89:77:26:4a:dd:b4:34:33:14:f7:
         7b:c4:37:76:dc:f2:ad:d5:35:67:f1:90:b9:a4:b3:29:a6:d2:
         0d:cf:fb:2e:63:4f:f9:8b:e3:ff:24:a5:81:4d:fd:0e:d5:9d:
         4e:b5:58:cb:be:d9:78:00:b2:fc:90:54:31:b2:35:c9:af:8a:
         b9:a9:1b:20:10:1d:82:44:6f:bf:4f:13:55:09:5e:83:9c:51:
         56:68:f3:2e:5f:18:de:1d:49:81:f2:96:cd:ec:62:81:58:12:
         bc:1f:96:97:85:b3:ad:41:c5:b4:3c:2d:ee:e8:64:9f:30:c3:
         8d:e9:ff:59:3e:ab:68:96:e8:81:03:92:86:66:8a:09:53:46:
         e4:bc:46:04:cf:5d:52:03:22:24:fb:d6:84:7a:af:ac:18:4c:
         ae:2d:b4:7c:bc:ba:53:ee:64:09:70:4d:a1:80:1a:de:ee:46:
         08:ff:6c:e3:6a:bf:a5:3e:cc:fb:4b:df:77:12:bd:56:8b:3f:
         b8:79:fc:3e:db:1b:03:4f:0b:45:e5:81:ed:28:e9:19:f8:72:
         00:51:f8:52:47:e2:31:44:8f:8e:c8:88:a8:ff:1e:60:95:68:
         b3:66:5c:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59L3wVl+M1dxpR+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl
ZGRkMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
OWI0M2RmMzktMzY4Mi00YjZlLTg2ZTYtZjNjZjg2NTc1ZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdjSOMNd6KHmmczEbC3vZj7GsgQFLTTBNjz3
NOrRFXSdFfUXEuPPcPxH/MdyHXsRU9TPePMPd48f0TgXdB+rOiJL0psJBLJIEUW9
WTMZePK7+yjTwNirJNCrttH8gI0h4s0v+D/PcPzYYuJUaTFHac07PaWUsy7lyAfW
R6jwHf+nhiml2JnpajU2/0/8w71x6SadrGOTG2LXzI7zIWK5ZA0RT0JuPnrImlKx
oqOTC/lDN7MyYs465LHc+aHe85QZ413KfEYVGCzHOsqFaied0ukT/ws5lz+s0Z+W
qDyIFME7jLTW7+Ggw+Sw7MjbgAtgfubtYLP5s32FicIkqZrw8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwVrwfETlaxsPmTd1vJ3wkfYC5kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx
ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMGJmOGI4M2ItNTNhMy0z
YTE4LTkzNTktMzhhMDdiZTc5NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0
N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3
ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1
YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgGfizCQFzvLd2t88mfd0YKwc3ENF9W5m2riXcmSt20NDMU93vEN3bc
8q3VNWfxkLmksymm0g3P+y5jT/mL4/8kpYFN/Q7VnU61WMu+2XgAsvyQVDGyNcmv
irmpGyAQHYJEb79PE1UJXoOcUVZo8y5fGN4dSYHyls3sYoFYErwflpeFs61BxbQ8
Le7oZJ8ww43p/1k+q2iW6IEDkoZmiglTRuS8RgTPXVIDIiT71oR6r6wYTK4ttHy8
ulPuZAlwTaGAGt7uRgj/bONqv6U+zPtL33cSvVaLP7h5/D7bGwNPC0Xlge0o6Rn4
cgBR+FJH4jFEj47IiKj/HmCVaLNmXM4=
-----END CERTIFICATE-----
Generated at Wed Jul 15 03:04:57 2026 by rpki-client