Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a810e277-9701-3bb2-8ed7-85289a8a0712.roa
File:                     a810e277-9701-3bb2-8ed7-85289a8a0712.roa (raw, json)
Hash identifier:          AIdW2jzSzIy5OrYdzbICxZ0aFiv+DVkdZy6nsWfK20M=
Subject key identifier:   22:25:E9:12:3E:E0:14:20:32:F9:21:F7:A6:06:5E:FF:90:80:D9:C7
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F4328584E6EE65CF92673CD89C779CA00
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a810e277-9701-3bb2-8ed7-85289a8a0712.roa
Signing time:             Wed 08 Jul 2026 18:11:35 +0000
ROA not before:           Wed 08 Jul 2026 18:11:35 +0000
ROA not after:            Tue 06 Oct 2026 18:11:35 +0000
asID:                     209043
IP address blocks:        172.103.33.0/24 maxlen: 32
                          172.103.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:e6:5c:f9:26:73:cd:89:c7:79:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Jul  8 18:11:35 2026 GMT
            Not After : Oct  6 18:11:35 2026 GMT
        Subject: CN=610f9c7f-570a-45c3-87be-3a04cdec8d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:9f:21:3c:68:d2:e3:fa:b6:39:20:30:12:
                    39:01:28:b0:57:16:db:b9:dd:fa:80:73:c7:bb:90:
                    6b:22:85:3e:c9:5f:5b:b4:3e:3f:ae:aa:9c:58:76:
                    bd:bd:67:e4:ab:ab:d3:50:11:bb:1b:fe:a6:df:88:
                    f1:f2:b2:30:de:54:b2:68:9a:d7:ab:e8:b0:a1:d5:
                    ec:59:62:27:f1:51:33:e4:0d:58:3d:54:a3:3a:a9:
                    80:bb:10:c3:1d:b0:85:f6:d3:35:9f:c2:c8:8f:87:
                    59:be:f7:e7:22:40:c6:29:50:80:18:d1:bc:7b:98:
                    7d:26:8d:9c:fc:df:80:c2:35:9f:27:60:8f:3f:71:
                    de:2d:eb:6f:23:57:30:f2:c0:3b:d2:b0:61:e7:2b:
                    fc:3e:85:68:48:cd:eb:62:27:e9:f9:f6:29:0f:44:
                    dd:53:1d:70:f9:fa:77:5c:18:d1:4a:ab:bf:9c:c6:
                    5f:78:50:f1:18:a5:1f:51:d7:f4:19:e7:51:ae:c8:
                    d9:ed:e5:7e:9f:3d:24:5d:9d:2b:62:00:c2:24:c9:
                    9a:24:80:2c:fb:9c:d6:70:6f:1f:89:3c:45:fb:d9:
                    ef:f1:92:8f:c4:21:b3:5d:7e:f2:6f:a1:b6:44:e0:
                    38:ab:18:cf:f3:5c:9f:69:a3:9c:b5:c8:0f:55:35:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:E9:12:3E:E0:14:20:32:F9:21:F7:A6:06:5E:FF:90:80:D9:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a810e277-9701-3bb2-8ed7-85289a8a0712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.33.0-172.103.34.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:e6:22:de:eb:7c:ec:31:36:3b:5a:e8:00:f3:fd:14:9a:
         c9:b0:3d:f6:ed:b8:9d:4c:df:72:04:f8:9e:64:75:13:3a:60:
         63:48:11:18:eb:83:1d:f3:17:1f:3c:eb:47:20:9d:4e:5d:5d:
         95:67:92:33:6f:fd:59:83:71:7c:f3:e1:97:31:90:33:67:f4:
         11:2a:d4:d9:81:07:c4:f3:84:42:a9:bb:4a:5d:0f:71:d5:eb:
         de:38:39:03:13:cd:76:35:e0:76:0e:cc:71:45:fd:f9:79:8b:
         ef:8c:af:a9:13:ca:c3:fb:83:ef:74:39:dd:70:a9:49:fc:dc:
         74:cc:99:2a:30:60:2c:59:bd:d0:84:de:28:50:76:c7:82:c7:
         64:15:28:a3:a1:ce:60:b8:f8:ed:35:73:31:8a:50:1b:e4:f2:
         8c:fa:da:49:a8:da:3c:df:1c:f3:dd:bd:3f:a7:ad:6b:e1:8c:
         45:10:f0:9c:2d:0e:68:02:0a:f4:d8:88:1b:68:c2:4f:27:ab:
         7b:3a:14:5a:11:a3:00:0f:5a:65:71:1c:cf:79:ef:c3:d3:4d:
         2a:7b:19:f5:2f:cc:b6:93:4d:73:fa:20:a3:88:4a:f0:f4:8f:
         b1:13:b5:03:8d:fa:b4:10:aa:b7:e1:d2:0f:38:ba:ec:54:aa:
         3d:1c:62:c3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5u5lz5JnPNicd5ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTI2MDcwODE4MTEzNVoXDTI2MTAwNjE4MTEzNVowLzEtMCsGA1UEAxMk
NjEwZjljN2YtNTcwYS00NWMzLTg3YmUtM2EwNGNkZWM4ZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHqfITxo0uP6tjkgMBI5ASiwVxbbud36gHPH
u5BrIoU+yV9btD4/rqqcWHa9vWfkq6vTUBG7G/6m34jx8rIw3lSyaJrXq+iwodXs
WWIn8VEz5A1YPVSjOqmAuxDDHbCF9tM1n8LIj4dZvvfnIkDGKVCAGNG8e5h9Jo2c
/N+AwjWfJ2CPP3HeLetvI1cw8sA70rBh5yv8PoVoSM3rYifp+fYpD0TdUx1w+fp3
XBjRSqu/nMZfeFDxGKUfUdf0GedRrsjZ7eV+nz0kXZ0rYgDCJMmaJIAs+5zWcG8f
iTxF+9nv8ZKPxCGzXX7yb6G2ROA4qxjP81yfaaOctcgPVTXY9QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFCIl6RI+4BQgMvkh96YGXv+QgNnHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYTgxMGUyNzctOTcwMS0z
YmIyLThlZDctODUyODlhOGEwNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACsZyED
BACsZyIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfjbmIt7rfOwxNjta6ADz/RSaybA99u24nUzfcgT4nmR1
EzpgY0gRGOuDHfMXHzzrRyCdTl1dlWeSM2/9WYNxfPPhlzGQM2f0ESrU2YEHxPOE
Qqm7Sl0PcdXr3jg5AxPNdjXgdg7McUX9+XmL74yvqRPKw/uD73Q53XCpSfzcdMyZ
KjBgLFm90ITeKFB2x4LHZBUoo6HOYLj47TVzMYpQG+TyjPraSajaPN8c8929P6et
a+GMRRDwnC0OaAIK9NiIG2jCTyerezoUWhGjAA9aZXEcz3nvw9NNKnsZ9S/MtpNN
c/ogo4hK8PSPsRO1A436tBCqt+HSDzi67FSqPRxiww==
-----END CERTIFICATE-----
Generated at Mon Jul 20 09:13:42 2026 by rpki-client