Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
File:                     3675121f-0e8b-3664-8540-fd9dfccb894f.roa (raw, json)
Hash identifier:          a/daSgmWIBfDMTO6oXv3SqYVByOT42udY1F1itwXht8=
Subject key identifier:   C5:63:B2:76:B4:A8:6A:05:C4:73:DD:41:2A:A8:F6:51:7A:E6:50:7B
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D89CF4AA8B084D354A00E5080
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
Signing time:             Fri 17 Apr 2026 16:44:59 +0000
ROA not before:           Fri 17 Apr 2026 16:44:59 +0000
ROA not after:            Thu 16 Jul 2026 16:44:59 +0000
asID:                     12025
IP address blocks:        138.207.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:cf:4a:a8:b0:84:d3:54:a0:0e:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr 17 16:44:59 2026 GMT
            Not After : Jul 16 16:44:59 2026 GMT
        Subject: CN=c4cb4e62-652f-40eb-ab83-2e499421ed9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:1f:c6:28:a7:56:3c:d2:50:ae:f5:63:6e:
                    11:2d:b0:df:dc:4e:cf:e1:f3:cf:77:55:3d:c5:a5:
                    78:6a:ff:32:aa:51:f5:55:07:f8:fa:7e:91:3d:26:
                    51:52:d9:fb:91:27:04:a0:62:5e:fb:ca:42:c0:4b:
                    6f:80:e5:76:f0:49:f8:9a:3b:85:1e:d3:34:46:3c:
                    7b:a8:fc:bc:12:60:b7:a1:c4:ea:77:21:8f:8c:d3:
                    2b:ca:24:59:bc:7d:82:d4:69:f6:30:f3:c5:8b:c1:
                    3e:59:49:a6:dd:7c:d4:29:c4:e6:82:52:f1:01:af:
                    79:de:f1:e2:f4:38:76:c0:f5:40:60:ed:ed:19:f4:
                    48:34:40:10:ba:ad:18:9e:30:aa:51:e9:66:de:cc:
                    52:35:17:d5:a3:82:07:4d:8f:6d:cc:c3:94:25:c8:
                    d3:65:78:57:97:f3:3d:64:e1:87:7e:4b:43:61:44:
                    1d:de:52:19:32:bb:4c:59:73:b5:ef:9a:13:c4:a5:
                    01:69:28:b9:65:d7:2e:cb:b6:cd:62:35:18:7a:37:
                    58:d9:ee:90:e0:d8:c4:95:d1:4f:a5:64:a5:ed:ba:
                    3d:2f:c8:82:bd:dd:39:a3:9b:2a:52:3c:f5:ea:c8:
                    43:97:05:61:84:12:27:85:18:9b:d3:45:1b:70:4b:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:B2:76:B4:A8:6A:05:C4:73:DD:41:2A:A8:F6:51:7A:E6:50:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:79:aa:da:04:d9:bf:fb:c3:27:ba:9e:8d:d8:11:83:b0:
         63:e3:cf:69:a0:55:b9:2d:fd:06:f6:61:41:2b:f3:81:9d:3d:
         ba:5e:b9:bb:d6:bc:6f:c9:1c:a6:84:1a:5a:95:c4:99:da:49:
         1c:b2:09:e7:a1:88:3e:5b:e7:e1:37:64:a5:16:dd:38:67:9a:
         8c:46:ae:80:29:a8:9d:b1:3a:03:86:03:21:08:00:ea:c0:2f:
         81:74:66:21:d4:fa:14:94:f5:8f:5e:2f:27:39:5c:34:71:19:
         b2:0a:cc:f1:15:9a:c8:65:64:4b:d3:c3:2b:53:8c:30:fa:44:
         0e:4e:c6:f3:15:e9:16:1e:f4:0b:d2:31:41:39:ca:14:9c:05:
         75:f5:b4:55:a9:e0:35:e1:16:d2:70:fd:83:18:6e:e0:2e:eb:
         c9:69:bf:22:ed:8a:51:37:21:32:a2:6e:89:79:93:8c:9a:fb:
         6c:2e:19:39:9a:70:b7:0e:4d:54:69:59:82:9c:39:e0:5c:e4:
         12:d6:5a:05:3d:a5:79:49:e6:7f:84:92:b6:03:9b:49:aa:bc:
         5e:37:73:c7:dc:60:64:e6:fe:42:66:77:25:45:37:a4:36:bb:
         22:19:b8:6e:ff:54:87:95:b8:17:0f:7d:44:8c:97:b3:56:37:
         7e:e8:86:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Jz0qosITTVKAOUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDQxNzE2NDQ1OVoXDTI2MDcxNjE2NDQ1OVowLzEtMCsGA1UEAxMk
YzRjYjRlNjItNjUyZi00MGViLWFiODMtMmU0OTk0MjFlZDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxcfxiinVjzSUK71Y24RLbDf3E7P4fPPd1U9
xaV4av8yqlH1VQf4+n6RPSZRUtn7kScEoGJe+8pCwEtvgOV28En4mjuFHtM0Rjx7
qPy8EmC3ocTqdyGPjNMryiRZvH2C1Gn2MPPFi8E+WUmm3XzUKcTmglLxAa953vHi
9Dh2wPVAYO3tGfRINEAQuq0YnjCqUelm3sxSNRfVo4IHTY9tzMOUJcjTZXhXl/M9
ZOGHfktDYUQd3lIZMrtMWXO175oTxKUBaSi5Zdcuy7bNYjUYejdY2e6Q4NjEldFP
pWSl7bo9L8iCvd05o5sqUjz16shDlwVhhBInhRib00UbcEvMXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVjsna0qGoFxHPdQSqo9lF65lB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMzY3NTEyMWYtMGU4Yi0z
NjY0LTg1NDAtZmQ5ZGZjY2I4OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGis9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY8earaBNm/+8Mnup6N2BGDsGPjz2mgVbkt/Qb2YUEr84GdPbpeubvW
vG/JHKaEGlqVxJnaSRyyCeehiD5b5+E3ZKUW3ThnmoxGroApqJ2xOgOGAyEIAOrA
L4F0ZiHU+hSU9Y9eLyc5XDRxGbIKzPEVmshlZEvTwytTjDD6RA5OxvMV6RYe9AvS
MUE5yhScBXX1tFWp4DXhFtJw/YMYbuAu68lpvyLtilE3ITKibol5k4ya+2wuGTma
cLcOTVRpWYKcOeBc5BLWWgU9pXlJ5n+EkrYDm0mqvF43c8fcYGTm/kJmdyVFN6Q2
uyIZuG7/VIeVuBcPfUSMl7NWN37ohps=
-----END CERTIFICATE-----
Generated at Wed Apr 22 16:07:30 2026 by rpki-client