Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/63700a44-ff78-3e34-a1b7-a198782cab1f.roa
File:                     63700a44-ff78-3e34-a1b7-a198782cab1f.roa (raw, json)
Hash identifier:          f8mii2nQCV1jMMEbZ1HY2FnUXtqfk6MSn6r+oSEjws8=
Subject key identifier:   F7:B8:94:EE:6F:D5:F4:E5:0D:BC:B7:F3:FB:2F:2E:5C:C4:9E:46:5E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64D902A51F9C5BCEBF1F40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/63700a44-ff78-3e34-a1b7-a198782cab1f.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        173.232.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d9:02:a5:1f:9c:5b:ce:bf:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=da4b8358-f9ea-4d6b-93e4-a2939b8b6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:ac:78:ad:f4:4f:53:76:d0:c0:36:c2:5e:
                    b7:b0:e7:8f:25:e0:32:a3:08:17:97:d5:ca:41:6d:
                    52:ec:a7:76:46:b4:d3:9c:1e:39:63:77:44:f7:2d:
                    64:35:88:29:84:46:f7:74:31:f5:8b:da:83:4f:36:
                    36:cb:97:85:c1:cd:07:00:9c:be:81:b5:a3:e3:ca:
                    4b:54:e5:6c:4f:e6:29:6a:21:47:83:16:5a:21:8e:
                    cb:e8:39:d6:b5:1c:4e:a0:59:d0:81:94:af:ae:4a:
                    48:b6:cd:d2:9e:6f:b6:e3:74:40:93:27:01:81:0b:
                    0d:b5:a0:b0:a0:c1:11:a2:fc:51:84:50:0f:5e:94:
                    03:7d:26:fb:5c:49:7c:75:21:50:de:2d:08:73:77:
                    89:f1:24:b4:72:be:78:21:57:02:92:5c:bd:33:3b:
                    7d:8d:18:57:d0:b0:ed:94:13:73:5a:07:73:3e:21:
                    42:92:e9:35:24:1f:e1:8f:68:65:7d:35:ed:28:c2:
                    1e:0c:5c:3f:56:0e:a8:d4:e8:7a:90:80:6c:0a:d4:
                    2e:51:75:9a:3f:f3:93:9a:f1:99:3b:66:b1:ce:33:
                    f7:e5:7f:e5:b7:6f:63:89:2b:b4:a8:24:fd:23:6a:
                    32:11:2c:dc:da:e8:3e:e2:07:54:57:71:b0:b5:84:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:94:EE:6F:D5:F4:E5:0D:BC:B7:F3:FB:2F:2E:5C:C4:9E:46:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/63700a44-ff78-3e34-a1b7-a198782cab1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:8e:aa:d2:25:74:e3:63:6c:7e:ce:c4:29:98:07:3f:3e:
         39:22:42:de:0c:8d:50:83:49:41:9c:b8:5b:d8:ab:9b:cc:db:
         81:8a:0f:d7:07:5d:f9:30:32:09:8d:68:74:e7:f7:52:3d:bd:
         d7:3c:51:0a:15:ea:23:3a:7e:e1:48:43:34:a8:6f:b9:9a:cc:
         a9:e4:32:eb:99:1e:14:7f:6e:b3:b9:c4:7e:fe:fa:8f:e1:56:
         6c:b3:6c:20:e2:df:59:11:a2:f2:91:0e:06:b6:26:99:d8:e7:
         3b:34:ad:5f:65:52:de:9d:38:0d:f0:89:f8:42:76:a7:55:eb:
         28:66:26:c4:06:e3:36:2f:b8:07:f8:fb:11:ce:4e:33:1c:2f:
         e6:59:89:88:d8:72:62:b6:9b:09:57:ac:df:fc:ad:11:7e:60:
         44:bb:91:37:16:30:a8:4e:3c:52:b4:98:93:20:df:e7:3d:21:
         a6:19:90:9d:51:d4:c7:bb:e4:98:4e:67:54:cc:5b:19:f1:78:
         5a:25:b4:f8:90:2e:9f:69:01:d1:85:00:81:56:59:ba:a7:b0:
         05:19:ab:70:68:1c:3e:a2:dd:cd:b7:d6:38:8b:29:40:37:70:
         95:89:d9:18:c4:80:8b:bd:27:0c:d8:06:a3:7d:06:ad:2d:8b:
         7c:3a:60:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNkCpR+cW86/H0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ZGE0YjgzNTgtZjllYS00ZDZiLTkzZTQtYTI5MzliOGI2ODY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJuseK30T1N20MA2wl63sOePJeAyowgXl9XK
QW1S7Kd2RrTTnB45Y3dE9y1kNYgphEb3dDH1i9qDTzY2y5eFwc0HAJy+gbWj48pL
VOVsT+YpaiFHgxZaIY7L6DnWtRxOoFnQgZSvrkpIts3Snm+243RAkycBgQsNtaCw
oMERovxRhFAPXpQDfSb7XEl8dSFQ3i0Ic3eJ8SS0cr54IVcCkly9Mzt9jRhX0LDt
lBNzWgdzPiFCkuk1JB/hj2hlfTXtKMIeDFw/Vg6o1Oh6kIBsCtQuUXWaP/OTmvGZ
O2axzjP35X/lt29jiSu0qCT9I2oyESzc2ug+4gdUV3GwtYTbnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe4lO5v1fTlDby38/svLlzEnkZeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjM3MDBhNDQtZmY3OC0z
ZTM0LWExYjctYTE5ODc4MmNhYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABajjqrSJXTjY2x+zsQpmAc/PjkiQt4MjVCDSUGcuFvYq5vM24GKD9cH
XfkwMgmNaHTn91I9vdc8UQoV6iM6fuFIQzSob7mazKnkMuuZHhR/brO5xH7++o/h
VmyzbCDi31kRovKRDga2JpnY5zs0rV9lUt6dOA3wifhCdqdV6yhmJsQG4zYvuAf4
+xHOTjMcL+ZZiYjYcmK2mwlXrN/8rRF+YES7kTcWMKhOPFK0mJMg3+c9IaYZkJ1R
1Me75JhOZ1TMWxnxeFoltPiQLp9pAdGFAIFWWbqnsAUZq3BoHD6i3c231jiLKUA3
cJWJ2RjEgIu9JwzYBqN9Bq0ti3w6YMY=
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:24:52 2026 by rpki-client