Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04fa7622-8611-3c7c-a65c-88979e44011d.roa
File:                     04fa7622-8611-3c7c-a65c-88979e44011d.roa (raw, json)
Hash identifier:          Eo7TXCYDfHHB+gk4t9YJ7mmsAVkZgiAMTNe+4vt79xo=
Subject key identifier:   1D:56:D4:8B:4D:88:99:4B:8C:28:49:86:1E:C2:C5:F2:A3:B8:8D:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F2FB6AA5C1B258A1B8A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04fa7622-8611-3c7c-a65c-88979e44011d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     22394
IP address blocks:        166.246.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:2f:b6:aa:5c:1b:25:8a:1b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=2b3d7aa3-af9f-48dc-87d8-5d5a51ce7739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:9a:43:ca:1d:e8:74:97:ea:af:2e:21:7d:
                    ae:cb:ae:1f:f6:d8:71:a7:cc:4c:7b:e5:e3:39:87:
                    c0:4b:9b:5d:ab:4b:93:74:eb:02:20:b5:19:bc:ec:
                    db:83:9f:d2:5e:ba:f2:00:db:33:5a:39:f2:f6:3a:
                    55:91:db:dd:c1:0a:4e:ca:7c:e4:97:f6:c5:74:29:
                    e7:43:82:39:0c:ef:e9:ba:f2:df:bf:48:25:1e:6b:
                    aa:f8:1b:98:c1:66:30:7e:fa:cf:da:d7:18:6a:65:
                    72:3c:2e:1c:0f:a0:a9:ee:3f:4e:17:b5:d2:4c:48:
                    4e:76:f5:d8:6e:d0:16:6b:b2:20:d1:5d:a0:19:0f:
                    72:c4:f3:8b:1f:2a:98:60:d7:0f:21:dd:c3:56:9b:
                    f8:a1:95:f8:f0:1c:ca:0e:88:fd:64:d8:a7:18:17:
                    af:e8:12:38:05:4e:87:6d:2c:cc:db:e5:e9:03:72:
                    6c:55:b4:94:9b:61:d4:56:3f:63:db:79:b1:38:7c:
                    7e:c9:9a:df:5c:02:67:f3:d1:aa:8a:00:15:71:b9:
                    77:f2:68:77:8d:1d:47:0b:e8:da:aa:e5:05:9e:b6:
                    e1:07:f5:6a:a3:ef:cf:f9:c5:41:78:ae:39:5f:d9:
                    35:8b:31:6b:bb:47:55:ea:8a:8d:81:ec:2a:c3:5e:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:D4:8B:4D:88:99:4B:8C:28:49:86:1E:C2:C5:F2:A3:B8:8D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04fa7622-8611-3c7c-a65c-88979e44011d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.246.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:9b:d9:70:40:e5:16:53:e9:20:f8:11:a5:d0:84:78:7c:
         b4:32:0a:6c:46:4e:45:92:68:5d:d4:18:93:cf:4d:03:25:59:
         d2:3d:c7:eb:bf:35:63:f6:ed:db:5f:e7:4a:8e:7b:d9:9d:4e:
         16:ae:19:1f:d9:88:f4:67:39:3a:1b:f0:d7:a9:b7:83:fc:35:
         cd:04:f0:34:f0:78:07:22:32:b7:fe:16:80:61:5b:1f:67:bd:
         10:61:70:ef:44:65:ed:25:e3:fc:e7:98:1a:40:d6:29:40:db:
         0b:1d:17:cd:45:6c:34:2a:f7:9a:4e:d9:c3:cd:f1:a1:36:e7:
         4c:62:b8:1c:67:c7:83:8c:d3:ca:8e:e0:21:ca:22:fc:af:6f:
         cf:46:46:61:3a:1f:cd:47:53:33:e1:2b:ad:46:47:44:8f:2e:
         52:aa:dd:6f:0f:a2:03:6d:95:90:f2:80:37:48:a7:42:bf:59:
         99:f7:dd:d8:e6:50:8b:48:64:a6:84:cb:0c:87:4f:a0:d1:c8:
         d7:60:2a:96:01:6c:b7:62:26:5b:a5:52:3a:68:d7:bb:4f:54:
         4c:8a:0a:70:5d:53:bc:08:da:43:6f:10:59:ec:e0:62:96:cd:
         16:c0:f5:a0:b4:39:ae:d3:5b:97:75:45:ee:da:50:25:a4:7b:
         5c:28:e0:b6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4+Xy+2qlwbJYobigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MmIzZDdhYTMtYWY5Zi00OGRjLTg3ZDgtNWQ1YTUxY2U3NzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6aaQ8od6HSX6q8uIX2uy64f9thxp8xMe+Xj
OYfAS5tdq0uTdOsCILUZvOzbg5/SXrryANszWjny9jpVkdvdwQpOynzkl/bFdCnn
Q4I5DO/puvLfv0glHmuq+BuYwWYwfvrP2tcYamVyPC4cD6Cp7j9OF7XSTEhOdvXY
btAWa7Ig0V2gGQ9yxPOLHyqYYNcPId3DVpv4oZX48BzKDoj9ZNinGBev6BI4BU6H
bSzM2+XpA3JsVbSUm2HUVj9j23mxOHx+yZrfXAJn89GqigAVcbl38mh3jR1HC+ja
quUFnrbhB/Vqo+/P+cVBeK45X9k1izFru0dV6oqNgewqw17okwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB1W1ItNiJlLjChJhh7CxfKjuI1VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDRmYTc2MjItODYxMS0z
YzdjLWE2NWMtODg5NzllNDQwMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBpvYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOvSb2XBA5RZT6SD4EaXQhHh8tDIKbEZORZJoXdQYk89NAyVZ0j3H6781
Y/bt21/nSo572Z1OFq4ZH9mI9Gc5Ohvw16m3g/w1zQTwNPB4ByIyt/4WgGFbH2e9
EGFw70Rl7SXj/OeYGkDWKUDbCx0XzUVsNCr3mk7Zw83xoTbnTGK4HGfHg4zTyo7g
Icoi/K9vz0ZGYTofzUdTM+ErrUZHRI8uUqrdbw+iA22VkPKAN0inQr9Zmffd2OZQ
i0hkpoTLDIdPoNHI12AqlgFst2ImW6VSOmjXu09UTIoKcF1TvAjaQ28QWezgYpbN
FsD1oLQ5rtNbl3VF7tpQJaR7XCjgtg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:00 2026 by rpki-client