Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa
File:                     b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa (raw, json)
Hash identifier:          SBbvMqHiMeSHrKwUkM1BbOmmNONNTr1JdLUMHMc0ZYI=
Subject key identifier:   5C:DC:95:B2:D8:23:98:3F:F5:B6:A6:51:B3:90:4B:0C:CE:5D:6F:AF
Certificate issuer:       /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial:       010D0C9F4328584DD4C065F7A3D7615505958500
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        185.224.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:65:f7:a3:d7:61:55:05:95:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=d7d7bd5c-6c98-41a9-bd2d-d390b0d37256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:90:e7:7a:ce:4f:3b:23:05:ef:79:48:ee:
                    8f:e9:fd:e3:48:0a:94:70:2c:2b:a0:0c:91:df:08:
                    e7:2a:c1:f4:8f:d7:22:ca:b7:5d:d6:6d:2a:04:78:
                    41:f6:ac:d2:2a:fe:86:92:1d:35:2a:86:37:62:db:
                    84:50:ba:1c:e8:22:a8:c0:aa:8c:ce:6a:8f:d8:79:
                    91:24:ea:17:76:49:22:f2:77:8c:5b:8b:c9:fa:57:
                    b9:ee:f4:65:17:55:f9:e4:53:ad:36:8e:65:54:1c:
                    71:81:37:cb:d0:66:07:7a:d2:eb:dd:04:44:c1:2d:
                    03:0d:42:de:1b:25:c2:a4:07:22:8e:97:fb:3d:d8:
                    4e:1e:63:77:35:77:04:d6:d5:a5:6d:d0:1e:0e:f0:
                    57:92:5e:59:57:5c:62:07:c0:23:9f:c6:ca:1e:45:
                    a2:45:7d:c6:82:36:50:d1:90:4d:f0:46:a3:bd:3b:
                    50:95:60:1f:d3:a8:68:85:4b:c6:72:42:ea:98:19:
                    7d:a3:12:c1:de:95:c9:3b:63:cd:ae:84:d4:bd:40:
                    9d:5d:6c:58:ce:3a:c4:2f:f7:d7:c2:5d:1c:5c:65:
                    c6:11:88:6a:89:fd:75:7f:ec:46:e1:98:89:a1:0a:
                    c0:56:0b:e3:dd:2f:5a:39:c4:9f:04:b3:91:87:a0:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DC:95:B2:D8:23:98:3F:F5:B6:A6:51:B3:90:4B:0C:CE:5D:6F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl

            X509v3 Authority Key Identifier:
                keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:1a:f9:7f:82:f0:ec:26:02:e1:75:fe:21:50:de:61:f9:
         e8:67:e0:c9:8d:9f:16:69:25:df:63:d4:9d:c9:e0:dc:73:25:
         16:60:b7:1d:dc:5c:84:a3:8d:f7:9e:48:32:61:d5:3b:26:84:
         5a:fc:74:59:bc:7b:b1:99:9f:ad:1d:41:a9:ee:2f:e8:c4:20:
         4f:fc:bf:20:17:c3:90:2f:c9:3d:d6:d8:1c:ea:ca:98:35:ce:
         30:83:39:16:d6:55:0e:4e:23:00:42:a1:be:0c:aa:ea:10:ac:
         21:b3:25:d3:e5:86:6e:0a:bc:3b:7a:a7:da:6d:3a:b7:ad:a6:
         99:ea:e8:01:a6:f1:ee:70:d2:33:91:19:6a:36:7c:3a:76:46:
         e9:0a:21:fa:fb:f8:e2:cf:61:ef:38:28:d9:ba:13:b6:13:f8:
         87:9c:e2:e7:7d:b2:58:01:e7:29:be:4d:4b:9f:d9:94:85:cb:
         ce:f5:a5:c1:a1:1b:a4:4b:0d:75:c0:bf:84:94:b8:33:5e:38:
         e9:e2:c4:ca:4c:42:4e:b3:cd:7a:24:25:d8:c0:19:1f:83:3e:
         e3:3c:90:8a:87:be:64:25:d5:b0:12:cf:fe:5a:56:aa:b9:b8:
         d2:cc:4c:f4:d9:b9:11:c5:19:ec:9d:23:7d:db:74:8c:76:38:
         86:9d:d4:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGX3o9dhVQWVhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0
M2EzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
ZDdkN2JkNWMtNmM5OC00MWE5LWJkMmQtZDM5MGIwZDM3MjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWQ53rOTzsjBe95SO6P6f3jSAqUcCwroAyR
3wjnKsH0j9ciyrdd1m0qBHhB9qzSKv6Gkh01KoY3YtuEULoc6CKowKqMzmqP2HmR
JOoXdkki8neMW4vJ+le57vRlF1X55FOtNo5lVBxxgTfL0GYHetLr3QREwS0DDULe
GyXCpAcijpf7PdhOHmN3NXcE1tWlbdAeDvBXkl5ZV1xiB8Ajn8bKHkWiRX3GgjZQ
0ZBN8EajvTtQlWAf06hohUvGckLqmBl9oxLB3pXJO2PNroTUvUCdXWxYzjrEL/fX
wl0cXGXGEYhqif11f+xG4ZiJoQrAVgvj3S9aOcSfBLORh6DQpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzclbLYI5g/9bamUbOQSwzOXW+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4
ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvYjAwMmRhMWQtY2UxZC0z
Y2MzLTlhNjUtNTY2M2NhN2RiY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi
NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5
NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi
Yjg5OTQzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueBCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEH0Gvl/gvDsJgLhdf4hUN5h+ehn4MmNnxZpJd9j1J3J4NxzJRZgtx3c
XISjjfeeSDJh1TsmhFr8dFm8e7GZn60dQanuL+jEIE/8vyAXw5AvyT3W2Bzqypg1
zjCDORbWVQ5OIwBCob4MquoQrCGzJdPlhm4KvDt6p9ptOretppnq6AGm8e5w0jOR
GWo2fDp2RukKIfr7+OLPYe84KNm6E7YT+Iec4ud9slgB5ym+TUuf2ZSFy871pcGh
G6RLDXXAv4SUuDNeOOnixMpMQk6zzXokJdjAGR+DPuM8kIqHvmQl1bASz/5aVqq5
uNLMTPTZuRHFGeydI33bdIx2OIad1Kk=
-----END CERTIFICATE-----
Generated at Fri May 22 14:20:28 2026 by rpki-client