Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5f013941-45d4-38cd-9855-52186deeee25.roa
File:                     5f013941-45d4-38cd-9855-52186deeee25.roa (raw, json)
Hash identifier:          hXcJYhuhJJRzysPfF+/9cGfDefhQt8FSqgZ+/w/HEfo=
Subject key identifier:   C5:97:EF:7E:55:CA:89:53:8F:4D:0E:ED:D4:73:5F:CF:70:9E:FE:7F
Certificate issuer:       /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
Certificate serial:       010D0C9F4328584E7D2F7C876F6CC341026DB900
Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5f013941-45d4-38cd-9855-52186deeee25.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     394708
IP address blocks:        198.45.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:87:6f:6c:c3:41:02:6d:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=fe6acee5-5df0-4ea2-baaa-6548e9fecd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:85:28:dd:9d:b1:9b:0f:76:1f:ec:f5:5c:
                    38:61:44:d8:38:c9:7e:ad:e8:8e:88:e6:bf:81:50:
                    44:aa:6b:22:a8:f6:cf:a3:37:a0:20:5f:bb:98:5b:
                    59:5a:df:df:65:1d:d5:c2:00:55:eb:80:a2:bb:3e:
                    0c:59:5b:de:6d:92:39:ce:23:6c:6d:b2:d9:81:56:
                    25:10:87:26:93:a1:8d:c0:a9:1c:ed:60:36:d4:b2:
                    fb:69:77:50:08:80:e8:65:55:4f:59:37:8b:89:0f:
                    3e:6a:72:a2:98:c4:d4:be:90:e3:1c:4f:4f:5a:ec:
                    03:a9:b8:a9:c9:17:c1:70:98:ed:a8:51:ce:c0:5d:
                    db:48:d3:c9:1e:4e:e8:95:ec:06:31:b1:7c:fd:81:
                    b2:63:9c:f4:65:69:bd:fa:29:94:2c:37:39:40:4f:
                    74:a8:e5:5d:33:d2:0d:9f:9f:4c:fe:a2:f6:09:cc:
                    f7:bf:ec:d5:0d:01:80:e4:f4:0e:0b:1b:08:47:84:
                    a0:eb:c1:fb:05:0e:1f:c3:80:15:70:e1:f6:69:e6:
                    d8:4d:39:de:83:b0:ea:1f:bd:61:a9:27:53:cd:5b:
                    73:75:9e:3d:73:92:26:1d:97:ce:64:61:00:e5:78:
                    69:6f:9c:ff:70:ce:fe:80:6e:c8:fe:9b:0f:1e:10:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:EF:7E:55:CA:89:53:8F:4D:0E:ED:D4:73:5F:CF:70:9E:FE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5f013941-45d4-38cd-9855-52186deeee25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl

            X509v3 Authority Key Identifier:
                keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:73:48:67:65:26:d8:47:ec:ad:f8:e1:0e:b9:0b:95:28:
         15:0b:9c:7a:84:df:03:4d:62:02:2c:0b:28:82:e7:32:ee:f0:
         e0:59:c1:44:b5:f7:17:b8:9e:11:4a:bf:35:cb:7e:63:04:02:
         cd:4b:ac:a8:c2:e3:90:9d:58:18:98:8f:3a:b3:06:38:d3:99:
         9e:17:ae:7c:35:da:fe:32:36:8e:87:5f:f1:e3:15:f0:a1:5e:
         4a:2b:4b:8e:a7:30:81:4f:0d:7f:59:bc:d7:89:4a:cb:c5:b6:
         6a:04:c7:dc:ac:75:99:86:12:1f:0e:cb:4b:84:60:98:4c:b6:
         b6:31:66:3c:37:51:df:88:c4:8d:6c:eb:f4:18:a6:58:4c:43:
         13:d6:e5:14:30:be:b7:82:5f:38:94:bc:be:51:90:57:36:f4:
         9d:bd:9d:cf:49:79:d3:38:ba:b2:38:6a:93:76:ab:f2:04:bf:
         95:71:33:99:a5:e2:e1:ed:8d:a3:3b:7b:58:56:93:10:34:45:
         bf:28:e2:4e:51:5e:5e:de:91:26:3d:6e:ee:45:88:9d:cb:74:
         7e:64:54:c5:e2:91:ee:6b:11:fa:77:a2:69:08:0c:da:df:ed:
         7f:36:a2:08:5c:cd:96:3c:50:ed:01:5a:8d:a5:04:c8:95:97:
         3a:65:16:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59L3yHb2zDQQJtuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl
ZGRkMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZmU2YWNlZTUtNWRmMC00ZWEyLWJhYWEtNjU0OGU5ZmVjZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sqFKN2dsZsPdh/s9Vw4YUTYOMl+reiOiOa/
gVBEqmsiqPbPozegIF+7mFtZWt/fZR3VwgBV64Ciuz4MWVvebZI5ziNsbbLZgVYl
EIcmk6GNwKkc7WA21LL7aXdQCIDoZVVPWTeLiQ8+anKimMTUvpDjHE9PWuwDqbip
yRfBcJjtqFHOwF3bSNPJHk7olewGMbF8/YGyY5z0ZWm9+imULDc5QE90qOVdM9IN
n59M/qL2Ccz3v+zVDQGA5PQOCxsIR4Sg68H7BQ4fw4AVcOH2aebYTTneg7DqH71h
qSdTzVtzdZ49c5ImHZfOZGEA5Xhpb5z/cM7+gG7I/psPHhBO8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWX735VyolTj00O7dRzX89wnv5/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx
ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvNWYwMTM5NDEtNDVkNC0z
OGNkLTk4NTUtNTIxODZkZWVlZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0
N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3
ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1
YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxi0MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTOc0hnZSbYR+yt+OEOuQuVKBULnHqE3wNNYgIsCyiC5zLu8OBZwUS1
9xe4nhFKvzXLfmMEAs1LrKjC45CdWBiYjzqzBjjTmZ4Xrnw12v4yNo6HX/HjFfCh
XkorS46nMIFPDX9ZvNeJSsvFtmoEx9ysdZmGEh8Oy0uEYJhMtrYxZjw3Ud+IxI1s
6/QYplhMQxPW5RQwvreCXziUvL5RkFc29J29nc9JedM4urI4apN2q/IEv5VxM5ml
4uHtjaM7e1hWkxA0Rb8o4k5RXl7ekSY9bu5FiJ3LdH5kVMXike5rEfp3omkIDNrf
7X82oghczZY8UO0BWo2lBMiVlzplFlU=
-----END CERTIFICATE-----
Generated at Wed Jul 15 03:03:54 2026 by rpki-client