Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
File:                     be4b8d90-b929-3e3a-a40f-7571bb524df0.roa (raw, json)
Hash identifier:          ZwnuViBTIB/8mWeo9Cjk2lF0P3cmO+uJzWavvUPKamY=
Subject key identifier:   EE:2C:56:7C:6E:4D:3D:D8:B5:43:0E:CD:7D:23:BE:AB:9C:E1:E1:54
Certificate issuer:       /CN=d3292f16-bd24-4446-a83f-489f05a2076a
Certificate serial:       010D0C9F4328584EE38CA8408EBF5F40728E6600
Authority key identifier: 2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     5758
IP address blocks:        64.29.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a8:40:8e:bf:5f:40:72:8e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3292f16-bd24-4446-a83f-489f05a2076a
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=162f6b4f-0f4b-4865-b440-4e4aeb189cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:8a:dd:d4:21:23:66:b5:5b:a7:5b:72:6b:
                    54:f0:c9:9b:e2:ef:dc:c0:7e:c7:73:11:e6:ed:c3:
                    a9:e7:e3:7e:f2:69:87:19:f6:1a:31:d3:3e:89:8c:
                    05:40:4e:65:29:91:07:16:e8:7d:c5:7c:af:d1:d3:
                    a4:d6:44:67:40:b8:3a:ff:f5:7a:d6:85:39:26:d1:
                    96:7e:08:c1:cf:80:49:0c:8d:9d:bf:d0:4f:d7:a0:
                    58:02:95:7c:a9:ed:4b:37:99:43:cb:76:8a:28:97:
                    f0:6f:1e:d6:4f:32:27:3c:4d:f7:13:86:b6:58:62:
                    a9:98:4e:61:91:32:4d:95:e7:ce:03:e3:78:c7:57:
                    48:00:e2:aa:40:47:57:a3:b4:d9:05:43:99:77:c6:
                    72:c9:b4:53:a9:19:e6:73:a5:e6:23:e9:44:18:f5:
                    00:ad:51:7c:b4:eb:a9:2d:9a:bc:21:c8:f8:f9:6f:
                    9e:eb:42:33:9c:6c:1d:a6:ae:99:54:72:2d:bc:f7:
                    09:8e:c0:dd:79:f2:db:c3:17:2c:1b:9e:3a:26:4b:
                    79:95:89:ab:fe:45:32:e6:7f:28:53:69:cc:fa:5f:
                    1f:c1:62:5f:24:97:19:7b:42:ab:40:41:15:13:fc:
                    99:29:89:e0:ab:7a:d1:06:f9:e4:ad:8c:05:df:6d:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2C:56:7C:6E:4D:3D:D8:B5:43:0E:CD:7D:23:BE:AB:9C:E1:E1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/be4b8d90-b929-3e3a-a40f-7571bb524df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a/d3292f16-bd24-4446-a83f-489f05a2076a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:5A:98:AE:15:DB:04:99:A6:1B:5C:07:14:7C:4E:51:BF:EC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3292f16-bd24-4446-a83f-489f05a2076a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:04:ca:66:e9:23:f1:8f:79:6e:f5:c0:92:d6:bc:d6:3f:95:
         f4:c9:5b:5a:71:70:9d:3d:0b:93:21:17:5c:32:e7:7c:8f:e5:
         18:63:32:4b:ff:ee:1b:42:f1:e9:e8:0f:12:1c:d9:57:8b:bd:
         4a:67:b6:e2:d3:a6:65:0d:a9:ea:fa:50:4e:78:60:53:86:53:
         a0:0e:96:96:7f:81:91:80:a6:a0:c2:be:ec:8c:08:33:e9:ce:
         e4:34:cc:6a:1a:c1:5d:db:d6:9a:05:f2:d9:f2:d4:b9:d9:85:
         28:30:8a:d8:f2:87:03:29:18:04:e2:69:ce:18:a6:bf:d4:fc:
         63:c7:6a:d9:c9:db:ad:3e:0e:6b:40:75:03:ca:5e:3d:7e:45:
         7a:82:ac:fb:fe:7f:a9:f7:09:85:94:5e:88:a1:de:29:91:e2:
         d4:06:07:0f:a3:1e:aa:f1:c2:85:14:01:e9:e4:22:7f:39:1c:
         69:50:b7:8a:16:17:c5:d7:38:6e:76:2e:ad:8b:f4:6d:ce:5e:
         bc:e3:cb:3c:3d:4c:59:02:38:e9:8e:58:57:86:f8:e5:58:ce:
         29:bf:f0:57:81:79:35:91:82:80:53:55:5d:9c:af:7b:e4:04:
         01:4f:33:83:48:07:01:dd:c2:4a:f4:cd:16:82:04:8a:d3:3c:
         d9:77:9a:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKhAjr9fQHKOZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMyOTJmMTYtYmQyNC00NDQ2LWE4M2YtNDg5ZjA1YTIw
NzZhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
MTYyZjZiNGYtMGY0Yi00ODY1LWI0NDAtNGU0YWViMTg5Y2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPiK3dQhI2a1W6dbcmtU8Mmb4u/cwH7HcxHm
7cOp5+N+8mmHGfYaMdM+iYwFQE5lKZEHFuh9xXyv0dOk1kRnQLg6//V61oU5JtGW
fgjBz4BJDI2dv9BP16BYApV8qe1LN5lDy3aKKJfwbx7WTzInPE33E4a2WGKpmE5h
kTJNlefOA+N4x1dIAOKqQEdXo7TZBUOZd8ZyybRTqRnmc6XmI+lEGPUArVF8tOup
LZq8Icj4+W+e60IznGwdpq6ZVHItvPcJjsDdefLbwxcsG546Jkt5lYmr/kUy5n8o
U2nM+l8fwWJfJJcZe0KrQEEVE/yZKYngq3rRBvnkrYwF323YNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4sVnxuTT3YtUMOzX0jvquc4eFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5
MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlmMDVhMjA3NmEvYmU0YjhkOTAtYjkyOS0z
ZTNhLWE0MGYtNzU3MWJiNTI0ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyOTJmMTYtYmQyNC00NDQ2LWE4
M2YtNDg5ZjA1YTIwNzZhL2QzMjkyZjE2LWJkMjQtNDQ0Ni1hODNmLTQ4OWYwNWEy
MDc2YS5jcmwwHwYDVR0jBBgwFoAULndamK4V2wSZphtcBxR8TlG/7MAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzI5MmYxNi1iZDI0LTQ0NDYtYTgzZi00ODlm
MDVhMjA3NmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQB1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIEymbpI/GPeW71wJLWvNY/lfTJW1pxcJ09C5MhF1wy53yP5RhjMkv/
7htC8enoDxIc2VeLvUpntuLTpmUNqer6UE54YFOGU6AOlpZ/gZGApqDCvuyMCDPp
zuQ0zGoawV3b1poF8tny1LnZhSgwitjyhwMpGATiac4Ypr/U/GPHatnJ260+DmtA
dQPKXj1+RXqCrPv+f6n3CYWUXoih3imR4tQGBw+jHqrxwoUUAenkIn85HGlQt4oW
F8XXOG52Lq2L9G3OXrzjyzw9TFkCOOmOWFeG+OVYzim/8FeBeTWRgoBTVV2cr3vk
BAFPM4NIBwHdwkr0zRaCBIrTPNl3mqY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:09 2026 by rpki-client