Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa
File:                     07b9d485-da41-3b34-9f85-25926b41b1d9.roa (raw, json)
Hash identifier:          1WrQH0umnl+t+tqKTJBTIHNO81CgZH2o/5nzjsK8DLY=
Subject key identifier:   F4:EB:DA:86:B9:8C:19:F0:17:FD:20:6E:6C:DA:6E:8D:7D:70:0A:1E
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584EA2DFBEB9133DAA2471AFA300
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     16621
IP address blocks:        162.244.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:be:b9:13:3d:aa:24:71:af:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=43e46b2f-aabf-411b-b6d7-1538e5ee21a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:6d:f2:f0:e8:f2:17:9a:7d:4b:dc:62:f8:
                    d6:f6:2a:7d:9f:1e:a6:85:d4:ce:34:f9:55:12:b6:
                    14:f9:de:fa:77:43:54:7e:72:54:bc:26:1d:b4:af:
                    40:15:a2:f6:1a:07:ce:e3:19:c4:ed:67:84:a4:10:
                    6c:e6:b3:df:de:9b:ec:a8:83:8d:d0:1c:32:c0:68:
                    bc:5b:23:cc:04:3c:54:75:9c:3c:76:e7:6d:7b:83:
                    a5:e9:46:36:96:d2:53:3b:3b:60:86:ee:28:bd:3e:
                    fc:03:e2:6b:b8:1c:39:ca:24:86:d5:35:ee:d4:5a:
                    e6:d7:2e:f7:2f:59:dc:74:19:24:05:f0:59:f9:d8:
                    53:5b:bb:c8:b3:a2:e0:0c:2c:5d:5b:62:08:33:f1:
                    8b:70:29:38:32:49:c5:3c:23:c1:f5:97:dd:fe:26:
                    1f:ea:30:1d:12:ef:6a:22:f2:9f:c8:11:68:91:af:
                    25:dc:46:88:30:ac:b1:8e:30:dd:46:7a:31:b3:8d:
                    7a:e8:d1:25:30:1b:af:06:d1:3e:f1:a2:d0:90:1c:
                    bd:16:76:5e:fa:0b:6d:bd:51:37:60:3d:80:70:a7:
                    d4:24:c6:9c:5b:41:be:d9:a0:7b:ef:57:e8:ed:72:
                    72:bc:24:f8:8c:97:1f:06:cc:3b:e2:41:9f:b9:e8:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:DA:86:B9:8C:19:F0:17:FD:20:6E:6C:DA:6E:8D:7D:70:0A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/07b9d485-da41-3b34-9f85-25926b41b1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:fb:e2:e7:bd:ac:df:73:1d:ca:3f:e1:af:2e:2b:c8:8b:
         af:47:d0:1d:70:73:e3:47:91:c4:0b:76:d5:01:36:bd:db:ad:
         be:06:9b:cd:df:b2:f0:e5:d4:2c:14:c7:4f:9e:f4:77:fc:f7:
         b0:0c:76:ff:6b:f5:d5:b9:ca:14:0b:69:13:af:ee:ee:d9:af:
         db:79:fe:07:d0:3d:02:a6:c4:16:ba:22:12:1d:6b:8e:1f:a3:
         0f:7d:35:96:20:4c:13:79:4c:e8:4c:8f:ac:95:8f:7d:38:51:
         aa:b4:db:e7:4f:29:33:4a:e1:e7:09:4d:d8:13:e3:ac:85:43:
         8f:8e:8b:d0:dc:6d:a1:b4:42:dd:f6:27:07:70:3f:7a:13:29:
         71:6d:5e:5f:4e:48:41:c1:03:ac:11:e7:11:c8:9a:7e:61:fa:
         b8:ff:c6:d3:e4:61:30:25:e0:9d:cf:82:bf:87:cb:ed:98:ef:
         a0:db:d6:4e:07:1d:61:f1:f4:9e:a5:0c:dd:c5:1f:74:31:d4:
         ac:cf:e0:41:a3:9a:51:1b:a8:8f:6b:c6:68:0e:df:3d:d1:28:
         a0:38:9b:2d:6b:6f:38:28:6d:d9:1a:37:4c:39:b5:ec:15:20:
         2e:8e:50:e0:1b:9b:bc:79:98:22:78:04:33:29:21:f4:23:c0:
         16:01:5c:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i3765Ez2qJHGvowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmUxNjVmNmYtZmNmMy00YzA2LWI4ODQtMzZlNjA1MjFj
MjE2MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
NDNlNDZiMmYtYWFiZi00MTFiLWI2ZDctMTUzOGU1ZWUyMWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlt8vDo8heafUvcYvjW9ip9nx6mhdTONPlV
ErYU+d76d0NUfnJUvCYdtK9AFaL2GgfO4xnE7WeEpBBs5rPf3pvsqION0BwywGi8
WyPMBDxUdZw8dudte4Ol6UY2ltJTOztghu4ovT78A+JruBw5yiSG1TXu1Frm1y73
L1ncdBkkBfBZ+dhTW7vIs6LgDCxdW2IIM/GLcCk4MknFPCPB9Zfd/iYf6jAdEu9q
IvKfyBFoka8l3EaIMKyxjjDdRnoxs4166NElMBuvBtE+8aLQkBy9FnZe+gttvVE3
YD2AcKfUJMacW0G+2aB771fo7XJyvCT4jJcfBsw74kGfuegoLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTr2oa5jBnwF/0gbmzabo19cAoeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2
NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2MDUyMWMyMTYvMDdiOWQ0ODUtZGE0MS0z
YjM0LTlmODUtMjU5MjZiNDFiMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmUxNjVmNmYtZmNmMy00YzA2LWI4
ODQtMzZlNjA1MjFjMjE2L2ZlMTY1ZjZmLWZjZjMtNGMwNi1iODg0LTM2ZTYwNTIx
YzIxNi5jcmwwHwYDVR0jBBgwFoAUJcA6kzKP5erlOLBtS7jvwrD3PVYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZTE2NWY2Zi1mY2YzLTRjMDYtYjg4NC0zNmU2
MDUyMWMyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAt++Lnvazfcx3KP+GvLivIi69H0B1wc+NHkcQLdtUBNr3brb4Gm83f
svDl1CwUx0+e9Hf897AMdv9r9dW5yhQLaROv7u7Zr9t5/gfQPQKmxBa6IhIda44f
ow99NZYgTBN5TOhMj6yVj304Uaq02+dPKTNK4ecJTdgT46yFQ4+Oi9DcbaG0Qt32
JwdwP3oTKXFtXl9OSEHBA6wR5xHImn5h+rj/xtPkYTAl4J3Pgr+Hy+2Y76Db1k4H
HWHx9J6lDN3FH3Qx1KzP4EGjmlEbqI9rxmgO3z3RKKA4my1rbzgobdkaN0w5tewV
IC6OUOAbm7x5mCJ4BDMpIfQjwBYBXPQ=
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:09:09 2026 by rpki-client