Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
File:                     23d95a46-a535-30ef-8cc4-386ad17abeb9.roa (raw, json)
Hash identifier:          XM15vRv80qHOU05QVL6TlBIf4o3YZVdRbzVzqZ/lMj4=
Subject key identifier:   7B:DA:98:C7:17:6A:86:D2:5E:DA:DC:67:05:94:4D:1D:F6:B5:51:DC
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584E66DA3B9CC56B35C9ADFF6586
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     21782
IP address blocks:        199.45.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3b:9c:c5:6b:35:c9:ad:ff:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=be70ef9e-079a-4df8-b602-5b8e83b93019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:f3:07:f8:45:b0:b9:05:01:c1:98:60:96:
                    ac:9a:37:93:4c:20:99:87:b1:bf:8d:a5:92:64:7c:
                    35:a6:d6:d8:ba:32:61:df:02:87:67:c0:aa:d9:ff:
                    38:bc:8e:eb:22:57:d6:24:b3:8a:6a:50:dc:86:c1:
                    53:f2:fa:3b:ac:fc:97:49:dc:b2:ab:2d:5a:4c:e5:
                    81:aa:fb:57:81:7d:bf:2d:c1:eb:64:77:77:52:5c:
                    ce:5f:81:c2:dd:cb:eb:7a:cb:43:50:1f:e6:bd:ec:
                    f4:0f:47:5c:4f:6d:2d:b3:cf:b3:e4:32:0d:c2:7e:
                    d8:8e:c7:80:73:5b:b2:26:a7:c1:47:c9:01:c4:03:
                    0f:cb:e6:28:fe:37:e2:cd:c8:28:a7:0e:b6:53:46:
                    42:11:19:7c:58:a0:cd:b4:c6:61:5d:d7:ec:58:f2:
                    9e:e7:34:57:47:29:17:fc:c8:8f:98:10:99:0e:90:
                    59:8e:a3:60:bc:b6:d1:b7:44:2b:1d:87:47:b2:45:
                    6e:c3:2c:ae:c5:90:06:14:2c:69:e1:31:8f:a8:b7:
                    0a:ff:b1:55:0a:19:62:49:f0:1c:aa:5b:05:3c:09:
                    3d:89:89:5a:92:04:72:57:35:ac:a7:c3:ce:ae:36:
                    86:13:b6:cd:c2:4b:fb:95:3c:95:f5:85:55:7b:11:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:98:C7:17:6A:86:D2:5E:DA:DC:67:05:94:4D:1D:F6:B5:51:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:73:67:98:7b:c3:d7:53:65:b8:12:03:1f:2d:91:dd:ec:
         ed:ee:42:5d:d5:c1:78:67:b4:84:dd:cd:9d:5f:4b:ea:c1:d7:
         f0:b5:49:4a:1b:7f:c6:36:52:5a:ae:00:42:81:f4:f3:51:00:
         a7:f6:5f:fe:11:93:5f:0d:3f:d0:7b:69:1b:9c:e3:6f:d7:37:
         3b:e3:96:d7:e2:03:50:5e:9e:f2:db:23:52:4c:78:a1:fc:8d:
         d5:d9:8b:f4:72:db:cd:d6:1b:ac:ff:8f:80:1e:66:94:74:85:
         30:a1:ec:92:05:cc:60:98:7d:e6:cf:59:f4:41:dc:3d:a9:51:
         d1:78:09:0f:98:f2:0b:c4:7a:91:f4:1d:3e:f6:35:09:20:fb:
         7f:e6:77:1a:bb:03:ad:2f:65:15:a3:58:dc:2e:7c:13:ef:96:
         db:2c:27:81:bc:f2:24:e6:e5:42:30:06:c9:86:07:a9:24:29:
         3f:b9:89:95:67:fb:15:cc:e3:12:55:d4:bb:69:9b:6d:7a:b8:
         e0:79:30:62:cf:92:4c:30:48:22:d6:16:8b:6e:5b:2d:1d:21:
         67:d8:42:c1:ec:db:b0:5d:61:93:1f:e6:76:76:10:a1:93:a6:
         bb:7a:6b:8b:2d:a9:57:f7:ab:6f:2b:c7:68:b5:9e:0f:1f:09:
         b5:9d:f9:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jucxWs1ya3/ZYYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl
OTNhMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
YmU3MGVmOWUtMDc5YS00ZGY4LWI2MDItNWI4ZTgzYjkzMDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTzB/hFsLkFAcGYYJasmjeTTCCZh7G/jaWS
ZHw1ptbYujJh3wKHZ8Cq2f84vI7rIlfWJLOKalDchsFT8vo7rPyXSdyyqy1aTOWB
qvtXgX2/LcHrZHd3UlzOX4HC3cvrestDUB/mvez0D0dcT20ts8+z5DINwn7YjseA
c1uyJqfBR8kBxAMPy+Yo/jfizcgopw62U0ZCERl8WKDNtMZhXdfsWPKe5zRXRykX
/MiPmBCZDpBZjqNgvLbRt0QrHYdHskVuwyyuxZAGFCxp4TGPqLcK/7FVChliSfAc
qlsFPAk9iYlakgRyVzWsp8POrjaGE7bNwkv7lTyV9YVVexE9FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHvamMcXaobSXtrcZwWUTR32tVHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk
YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMjNkOTVhNDYtYTUzNS0z
MGVmLThjYzQtMzg2YWQxN2FiZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4
YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz
ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1
MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExy2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/ac2eYe8PXU2W4EgMfLZHd7O3uQl3VwXhntITdzZ1fS+rB1/C1SUob
f8Y2UlquAEKB9PNRAKf2X/4Rk18NP9B7aRuc42/XNzvjltfiA1BenvLbI1JMeKH8
jdXZi/Ry283WG6z/j4AeZpR0hTCh7JIFzGCYfebPWfRB3D2pUdF4CQ+Y8gvEepH0
HT72NQkg+3/mdxq7A60vZRWjWNwufBPvltssJ4G88iTm5UIwBsmGB6kkKT+5iZVn
+xXM4xJV1Ltpm216uOB5MGLPkkwwSCLWFotuWy0dIWfYQsHs27BdYZMf5nZ2EKGT
prt6a4stqVf3q28rx2i1ng8fCbWd+TU=
-----END CERTIFICATE-----
Generated at Thu Jul 9 20:57:20 2026 by rpki-client