Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f77c7065-ca14-3e3e-945b-8127ee89d71f.roa
File:                     f77c7065-ca14-3e3e-945b-8127ee89d71f.roa (raw, json)
Hash identifier:          LT4qXW7o7YAmQRDtYIIuCI6Qw8+OF4hBQDUTtm1TReY=
Subject key identifier:   9D:AC:32:53:2E:0E:08:95:D1:3B:3B:0C:CC:A2:54:3A:6E:2F:2F:A1
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584EDB2C84413C3FB75E42938D80
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f77c7065-ca14-3e3e-945b-8127ee89d71f.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        209.196.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:84:41:3c:3f:b7:5e:42:93:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=5cec026e-ecc0-4484-a014-c34ac2f73614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:0a:a6:27:25:5b:c3:64:72:38:35:b0:0c:
                    aa:ba:0c:4d:7f:fd:2c:27:40:db:5a:1f:9d:a5:ba:
                    42:03:6b:16:2b:c5:ad:46:8c:b7:89:c7:12:d6:6f:
                    3e:13:19:05:c7:84:1d:46:73:38:a4:5b:18:c9:39:
                    7b:c0:d5:01:fe:09:1a:5d:4f:85:1d:74:45:a6:ff:
                    18:f7:4d:45:75:9c:82:53:39:9b:f4:04:7d:8d:69:
                    fb:6e:d6:d7:8d:51:01:cc:d4:8a:15:4b:a6:bc:0f:
                    5a:63:e0:91:70:53:a2:b6:ac:bb:df:af:33:07:a8:
                    9f:d1:89:f3:b1:8c:99:94:2b:b6:9a:97:cf:8d:96:
                    ff:ac:b5:fc:28:42:98:54:a5:86:26:ec:9f:17:f6:
                    87:59:67:26:0e:68:73:0d:15:e9:e7:a6:74:3f:e6:
                    24:8b:f3:4a:74:3e:98:1a:10:6b:c9:6f:87:7f:e2:
                    2b:e1:6e:bc:b5:62:db:d6:64:50:8f:94:20:7e:c8:
                    e6:7c:c7:f8:08:43:c0:3c:f8:f8:69:de:14:46:7f:
                    4c:61:cb:40:6a:a5:3a:b7:f3:b2:89:f0:8f:80:45:
                    b9:e4:0f:1b:41:35:c3:bc:a8:c1:13:78:c9:84:8a:
                    67:33:57:51:fa:f6:79:04:51:ec:f0:36:1c:37:42:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AC:32:53:2E:0E:08:95:D1:3B:3B:0C:CC:A2:54:3A:6E:2F:2F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f77c7065-ca14-3e3e-945b-8127ee89d71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:47:d5:8f:c2:41:2b:9f:25:44:89:e7:33:f2:31:5a:4b:
         f1:39:68:74:73:00:d4:97:c9:62:f3:c2:60:d4:b2:5b:57:19:
         ca:7c:35:b9:2a:46:ca:54:68:1b:0f:aa:7c:4f:cc:d9:ea:aa:
         2b:fe:5c:98:ac:00:b5:91:99:6b:a6:ff:d7:dc:4e:9b:f1:ab:
         4d:11:56:0f:65:ba:a5:83:37:5c:87:d9:e3:af:3d:a6:15:23:
         84:d3:48:f0:76:a9:f2:0f:26:8e:7b:9f:79:b3:a8:48:8d:55:
         d5:83:14:80:09:cf:e8:a0:ea:07:3d:8d:fd:e2:7a:cf:d6:fd:
         17:f6:b5:50:b9:e5:73:e5:f0:fe:f5:cf:b0:d7:87:bd:d3:f0:
         2f:ff:c9:46:81:78:ee:fa:64:83:a4:b2:42:ba:4f:6f:6e:b4:
         cf:31:cf:59:5c:99:1b:37:a5:5f:e0:01:6f:4e:50:c4:e5:94:
         bb:3e:10:b2:72:b1:72:94:23:8b:99:72:b2:f8:22:48:42:2a:
         1f:10:fa:92:c7:31:ae:ed:11:fd:df:c1:f3:4e:0d:1b:68:cd:
         5e:5d:2f:88:b5:ae:68:7a:ba:a2:f6:3c:93:73:9f:65:93:bf:
         93:02:f7:03:95:d1:57:52:1b:29:dc:84:a0:88:0a:1d:81:69:
         a3:92:64:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIRBPD+3XkKTjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU5ZWM1MTUtMWM2NC00ZWQyLTk2ZDQtNzI5ZmI1YTAx
MDdlMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NWNlYzAyNmUtZWNjMC00NDg0LWEwMTQtYzM0YWMyZjczNjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWcKpiclW8Nkcjg1sAyqugxNf/0sJ0DbWh+d
pbpCA2sWK8WtRoy3iccS1m8+ExkFx4QdRnM4pFsYyTl7wNUB/gkaXU+FHXRFpv8Y
901FdZyCUzmb9AR9jWn7btbXjVEBzNSKFUumvA9aY+CRcFOitqy7368zB6if0Ynz
sYyZlCu2mpfPjZb/rLX8KEKYVKWGJuyfF/aHWWcmDmhzDRXp56Z0P+Yki/NKdD6Y
GhBryW+Hf+Ir4W68tWLb1mRQj5QgfsjmfMf4CEPAPPj4ad4URn9MYctAaqU6t/Oy
ifCPgEW55A8bQTXDvKjBE3jJhIpnM1dR+vZ5BFHs8DYcN0JNvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2sMlMuDgiV0Ts7DMyiVDpuLy+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTll
YzUxNS0xYzY0LTRlZDItOTZkNC03MjlmYjVhMDEwN2UvZjc3YzcwNjUtY2ExNC0z
ZTNlLTk0NWItODEyN2VlODlkNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjU5ZWM1MTUtMWM2NC00ZWQyLTk2
ZDQtNzI5ZmI1YTAxMDdlLzI1OWVjNTE1LTFjNjQtNGVkMi05NmQ0LTcyOWZiNWEw
MTA3ZS5jcmwwHwYDVR0jBBgwFoAUH5MuyB1RLxgvGWjc1yRS2dRKADowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTllYzUxNS0xYzY0LTRlZDItOTZkNC03Mjlm
YjVhMDEwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cRJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZNR9WPwkErnyVEiecz8jFaS/E5aHRzANSXyWLzwmDUsltXGcp8Nbkq
RspUaBsPqnxPzNnqqiv+XJisALWRmWum/9fcTpvxq00RVg9luqWDN1yH2eOvPaYV
I4TTSPB2qfIPJo57n3mzqEiNVdWDFIAJz+ig6gc9jf3ies/W/Rf2tVC55XPl8P71
z7DXh73T8C//yUaBeO76ZIOkskK6T29utM8xz1lcmRs3pV/gAW9OUMTllLs+ELJy
sXKUI4uZcrL4IkhCKh8Q+pLHMa7tEf3fwfNODRtozV5dL4i1rmh6uqL2PJNzn2WT
v5MC9wOV0VdSGynchKCICh2BaaOSZA4=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:19 2026 by rpki-client