Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/d5a03862-6449-30e1-8e5d-ea5fdb6af601.roa
File:                     d5a03862-6449-30e1-8e5d-ea5fdb6af601.roa (raw, json)
Hash identifier:          u+SLyawSlShnknRX5TZdxz39pgl2nBa0nhupiMeC9TA=
Subject key identifier:   97:31:A8:27:6F:2D:9F:DB:34:D5:E3:40:FD:5E:68:E8:08:61:13:AC
Certificate issuer:       /CN=e987b11b-b307-4d95-abbc-a061ff00c004
Certificate serial:       010D0C9F4328584E7D5F647C69A0F462D22E1240
Authority key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/d5a03862-6449-30e1-8e5d-ea5fdb6af601.roa
Signing time:             Mon 13 Jul 2026 22:36:46 +0000
ROA not before:           Mon 13 Jul 2026 22:36:46 +0000
ROA not after:            Sun 11 Oct 2026 19:44:47 +0000
asID:                     6461
IP address blocks:        134.199.40.0/22 maxlen: 24
                          162.219.180.0/22 maxlen: 24
                          208.82.232.0/22 maxlen: 24
                          2602:ffe1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:5f:64:7c:69:a0:f4:62:d2:2e:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e987b11b-b307-4d95-abbc-a061ff00c004
        Validity
            Not Before: Jul 13 22:36:46 2026 GMT
            Not After : Oct 11 19:44:47 2026 GMT
        Subject: CN=3c649fa1-8f7a-4412-a056-55c1ed1261c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:db:30:39:82:0b:8a:b0:53:b9:0d:7b:30:
                    b9:c6:a1:2d:51:27:d8:dc:43:1f:13:ae:e4:61:44:
                    56:a3:44:18:81:25:91:69:12:f1:fb:17:a4:67:2e:
                    99:06:c6:7f:da:ed:80:54:cd:92:60:ad:34:7d:70:
                    6a:ba:43:c9:ae:c2:1b:e4:aa:26:43:ca:78:4a:4b:
                    aa:47:35:14:d4:2c:ce:57:5c:2e:56:7f:07:68:6d:
                    2e:6f:b9:fd:9e:ed:c8:3d:14:cd:f6:6c:15:0c:5c:
                    78:d9:fd:40:90:59:69:e7:ca:e6:fb:d1:29:26:a4:
                    3b:65:ad:b1:52:d9:ca:79:c6:d2:07:d0:ad:e7:86:
                    3b:c5:8c:8e:99:d5:ea:ac:3b:0a:56:e2:75:45:9e:
                    bb:97:67:d9:42:f0:88:46:49:12:07:86:01:3b:45:
                    93:f3:56:9c:c0:2e:67:94:6f:9b:5a:e9:cd:18:e7:
                    59:60:c1:82:7b:cd:f3:5b:bb:35:41:0a:3a:35:48:
                    c9:1a:16:ec:5a:3c:e1:5b:a5:39:05:e9:a7:3f:31:
                    ba:8a:71:e6:c4:da:ef:f5:29:49:11:08:04:b4:d8:
                    80:23:ea:00:64:2c:7f:d9:60:4d:75:d8:29:e1:0a:
                    6c:a9:78:e8:7c:1b:0a:be:79:3b:4f:8b:5f:80:00:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:A8:27:6F:2D:9F:DB:34:D5:E3:40:FD:5E:68:E8:08:61:13:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/d5a03862-6449-30e1-8e5d-ea5fdb6af601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.40.0/22
                  162.219.180.0/22
                  208.82.232.0/22
                IPv6:
                  2602:ffe1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e5:18:78:a1:a9:4b:7a:d8:ae:94:34:fc:5b:25:e2:9b:71:
         86:f5:6d:ca:24:a1:6d:e2:b0:f0:b7:17:e3:ce:c2:ed:8b:3a:
         6d:f0:79:82:1d:44:5b:98:6e:8d:88:1e:2b:09:17:36:8b:ef:
         fd:c2:de:71:a2:c5:f6:b7:4d:c5:65:94:84:35:33:27:f8:a2:
         53:54:c3:04:3a:39:ce:00:f0:56:49:20:e7:57:4c:cc:c5:71:
         50:73:01:b5:62:de:78:0f:9b:67:56:8e:31:24:e3:03:68:44:
         d8:0d:59:b9:15:92:f2:fc:80:8b:0c:cf:3c:93:b4:58:8a:62:
         da:58:38:4c:32:21:82:d4:33:74:44:f3:a5:1a:cf:95:fd:7b:
         4a:29:6a:c6:ab:b7:5f:63:b8:5e:2b:3e:30:a8:aa:ee:a9:91:
         20:49:45:91:3e:08:35:09:bd:aa:21:e4:13:9e:b0:ed:85:81:
         c2:24:27:3c:2c:2e:6a:55:52:77:17:df:76:f8:59:29:07:3e:
         f7:4b:80:98:79:9c:44:2e:bd:73:49:92:ec:02:93:80:d8:48:
         31:5d:16:c9:df:f7:e5:99:da:ab:e7:ec:dc:7d:01:e3:62:7c:
         9e:10:37:82:da:16:1a:10:b8:94:6a:0a:7d:02:17:da:28:65:
         14:de:4f:93
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE59X2R8aaD0YtIuEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4N2IxMWItYjMwNy00ZDk1LWFiYmMtYTA2MWZmMDBj
MDA0MB4XDTI2MDcxMzIyMzY0NloXDTI2MTAxMTE5NDQ0N1owLzEtMCsGA1UEAxMk
M2M2NDlmYTEtOGY3YS00NDEyLWEwNTYtNTVjMWVkMTI2MWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rHbMDmCC4qwU7kNezC5xqEtUSfY3EMfE67k
YURWo0QYgSWRaRLx+xekZy6ZBsZ/2u2AVM2SYK00fXBqukPJrsIb5KomQ8p4Skuq
RzUU1CzOV1wuVn8HaG0ub7n9nu3IPRTN9mwVDFx42f1AkFlp58rm+9EpJqQ7Za2x
UtnKecbSB9Ct54Y7xYyOmdXqrDsKVuJ1RZ67l2fZQvCIRkkSB4YBO0WT81acwC5n
lG+bWunNGOdZYMGCe83zW7s1QQo6NUjJGhbsWjzhW6U5BemnPzG6inHmxNrv9SlJ
EQgEtNiAI+oAZCx/2WBNddgp4QpsqXjofBsKvnk7T4tfgAATCwIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFJcxqCdvLZ/bNNXjQP1eaOgIYROsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTg3
YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYxZmYwMGMwMDQvZDVhMDM4NjItNjQ0OS0z
MGUxLThlNWQtZWE1ZmRiNmFmNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk4N2IxMWItYjMwNy00ZDk1LWFi
YmMtYTA2MWZmMDBjMDA0L2U5ODdiMTFiLWIzMDctNGQ5NS1hYmJjLWEwNjFmZjAw
YzAwNC5jcmwwHwYDVR0jBBgwFoAUszvzjfaSa39ZRleUWU1a7P51a14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTg3YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYx
ZmYwMGMwMDQuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQChscoAwQC
otu0AwQC0FLoMA4EAgACMAgDBgQmAv/hADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB75Rh4oalLetiulDT8
WyXim3GG9W3KJKFt4rDwtxfjzsLtizpt8HmCHURbmG6NiB4rCRc2i+/9wt5xosX2
t03FZZSENTMn+KJTVMMEOjnOAPBWSSDnV0zMxXFQcwG1Yt54D5tnVo4xJOMDaETY
DVm5FZLy/ICLDM88k7RYimLaWDhMMiGC1DN0RPOlGs+V/XtKKWrGq7dfY7heKz4w
qKruqZEgSUWRPgg1Cb2qIeQTnrDthYHCJCc8LC5qVVJ3F992+FkpBz73S4CYeZxE
Lr1zSZLsApOA2EgxXRbJ3/flmdqr5+zcfQHjYnyeEDeC2hYaELiUagp9AhfaKGUU
3k+T
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client