Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/19dfce59-2e70-37d5-a04e-a4b2ca95e86c.roa
File:                     19dfce59-2e70-37d5-a04e-a4b2ca95e86c.roa (raw, json)
Hash identifier:          LjhJhqwoumu2L24EJH9iFONMtgFDO85HOHe2a3Twkik=
Subject key identifier:   70:31:2D:80:CE:68:61:7D:12:70:E8:D0:D6:C5:29:DB:27:5D:F3:8F
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584E47C8C8324A1E9FDEC2B10100
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/19dfce59-2e70-37d5-a04e-a4b2ca95e86c.roa
Signing time:             Wed 24 Jun 2026 17:55:27 +0000
ROA not before:           Wed 24 Jun 2026 17:55:27 +0000
ROA not after:            Tue 22 Sep 2026 17:55:27 +0000
asID:                     46588
IP address blocks:        64.73.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:47:c8:c8:32:4a:1e:9f:de:c2:b1:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Jun 24 17:55:27 2026 GMT
            Not After : Sep 22 17:55:27 2026 GMT
        Subject: CN=afa96d45-415f-47dd-8102-f4567b18fbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:08:de:03:13:6a:2d:d2:94:e0:e5:ad:77:
                    e5:76:2f:cc:cf:9e:21:60:47:e6:63:13:e6:f6:b6:
                    22:ec:07:34:27:61:69:47:05:e5:55:06:49:ab:f2:
                    ee:f9:08:39:34:fd:e8:2a:36:2a:ad:02:2c:a4:31:
                    7b:fa:ce:22:f6:5d:ed:16:c4:ed:6d:06:67:41:b2:
                    70:b1:ca:c8:17:26:b6:82:7d:92:24:59:6a:f3:71:
                    58:7a:b5:af:a2:1c:92:40:88:fc:e7:43:90:e1:0d:
                    8e:3e:28:8f:7a:02:d4:10:29:bd:37:ea:34:a3:74:
                    31:f0:01:9e:a4:88:7d:57:1b:4f:2a:ae:66:79:28:
                    27:81:83:41:3d:45:d1:0a:42:8f:b5:d3:ce:66:e4:
                    87:73:70:21:ce:55:8d:e2:03:08:a0:aa:54:79:a9:
                    6a:36:db:99:cc:e5:96:b0:24:48:e7:de:22:a2:98:
                    22:05:d6:4f:e0:3f:2f:58:2c:7b:e4:7e:06:89:8f:
                    5a:8b:a8:d4:71:a6:9c:77:2b:76:41:ac:e7:01:3c:
                    62:8f:39:6a:43:28:f5:f8:c4:b4:7c:cc:8d:ce:05:
                    5d:0d:5c:84:d7:ed:37:2f:39:37:12:c4:47:60:ca:
                    b9:5b:65:ba:cc:10:dd:e7:b5:88:f3:8d:ae:e1:40:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:2D:80:CE:68:61:7D:12:70:E8:D0:D6:C5:29:DB:27:5D:F3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/19dfce59-2e70-37d5-a04e-a4b2ca95e86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.73.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:20:f2:cf:56:d2:0e:b5:e0:51:0b:57:89:82:f3:e6:d6:
         5e:e7:dc:0b:df:8e:56:99:5a:0b:35:28:9c:d1:c3:89:29:02:
         e9:56:f7:94:f4:1d:26:be:22:ac:c1:cf:a6:fe:b9:e0:cf:f2:
         3b:e3:aa:b5:02:a8:d0:ec:52:b5:cc:f8:5f:c9:0a:0f:c4:fa:
         24:70:6c:ba:15:f9:73:4b:21:f2:32:c2:da:88:24:33:0b:b9:
         85:87:4b:fd:03:7d:5d:15:bc:35:b7:4d:77:24:75:75:8d:d5:
         2d:28:34:07:8b:4c:61:2e:58:b3:b6:b6:cc:0a:7d:a8:29:0e:
         c5:ce:23:35:2a:7a:43:f1:d4:61:e6:60:40:bf:c4:6b:a3:e0:
         48:55:5e:27:01:1c:fe:b6:0c:ed:6c:5b:a2:be:54:96:58:41:
         15:21:dc:8f:46:36:97:0a:65:6c:61:5c:68:63:ca:03:65:31:
         d0:ff:68:5f:8e:0c:d5:cc:6e:e3:54:82:5f:9f:58:d3:84:cb:
         01:24:fe:ef:6d:09:10:69:25:36:cc:d7:12:ea:42:89:7f:6c:
         63:f6:4a:86:a1:54:1b:eb:db:d3:be:ea:6a:81:cf:6d:3e:00:
         36:91:d5:d2:02:08:4f:3e:bb:0d:a3:68:33:cc:75:1d:a4:11:
         62:9e:01:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5HyMgySh6f3sKxAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm
YjdhMB4XDTI2MDYyNDE3NTUyN1oXDTI2MDkyMjE3NTUyN1owLzEtMCsGA1UEAxMk
YWZhOTZkNDUtNDE1Zi00N2RkLTgxMDItZjQ1NjdiMThmYmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKgI3gMTai3SlODlrXfldi/Mz54hYEfmYxPm
9rYi7Ac0J2FpRwXlVQZJq/Lu+Qg5NP3oKjYqrQIspDF7+s4i9l3tFsTtbQZnQbJw
scrIFya2gn2SJFlq83FYerWvohySQIj850OQ4Q2OPiiPegLUECm9N+o0o3Qx8AGe
pIh9VxtPKq5meSgngYNBPUXRCkKPtdPOZuSHc3AhzlWN4gMIoKpUealqNtuZzOWW
sCRI594iopgiBdZP4D8vWCx75H4GiY9ai6jUcaacdyt2QaznATxijzlqQyj1+MS0
fMyNzgVdDVyE1+03Lzk3EsRHYMq5W2W6zBDd57WI842u4UA30QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAxLYDOaGF9EnDo0NbFKdsnXfOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx
NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvMTlkZmNlNTktMmU3MC0z
N2Q1LWEwNGUtYTRiMmNhOTVlODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk
MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1
ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0
YmMxNWZiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFt4IPLPVtIOteBRC1eJgvPm1l7n3AvfjlaZWgs1KJzRw4kpAulW95T0
HSa+IqzBz6b+ueDP8jvjqrUCqNDsUrXM+F/JCg/E+iRwbLoV+XNLIfIywtqIJDML
uYWHS/0DfV0VvDW3TXckdXWN1S0oNAeLTGEuWLO2tswKfagpDsXOIzUqekPx1GHm
YEC/xGuj4EhVXicBHP62DO1sW6K+VJZYQRUh3I9GNpcKZWxhXGhjygNlMdD/aF+O
DNXMbuNUgl+fWNOEywEk/u9tCRBpJTbM1xLqQol/bGP2SoahVBvr29O+6mqBz20+
ADaR1dICCE8+uw2jaDPMdR2kEWKeAZw=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:09:55 2026 by rpki-client