Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0e4b68b-66f5-36a9-b1a1-b020081b6670.roa
File:                     c0e4b68b-66f5-36a9-b1a1-b020081b6670.roa (raw, json)
Hash identifier:          zgeLqGqzzA9qK/UR5MMHZQpdfdU7fRr0Xd0x4rg/qF8=
Subject key identifier:   7C:C9:67:D8:EF:76:B0:6C:63:A3:EA:CC:8B:90:FB:9B:B5:44:31:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E736A3DF97B2C45C8F78AE380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0e4b68b-66f5-36a9-b1a1-b020081b6670.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     3855
IP address blocks:        199.172.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3d:f9:7b:2c:45:c8:f7:8a:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=3206a65d-73f8-4e35-9345-c9c28b73b90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:8e:fd:06:aa:9b:32:d4:02:16:77:61:df:
                    b3:e0:26:5c:6b:28:35:e4:5a:cc:5c:78:cc:70:e0:
                    84:1d:ca:75:02:78:6c:a4:a7:39:83:5f:e5:5b:3c:
                    e7:e1:61:e6:f0:8e:9f:8b:5c:c8:a9:58:d7:15:72:
                    e2:a4:b0:90:db:dc:23:d9:dc:42:35:34:fa:96:bc:
                    de:88:11:47:75:9c:50:48:7c:8b:1b:65:ca:7b:e9:
                    f2:fb:7a:9a:c7:cb:db:32:ad:5a:75:12:13:ff:83:
                    93:9c:c2:18:f7:40:32:e4:5f:e6:08:24:98:8b:58:
                    a9:9a:4a:53:0c:cb:8b:66:48:00:8e:f8:eb:6e:74:
                    ae:83:d2:b8:77:2d:7f:eb:9d:4c:6d:19:6e:ee:39:
                    cf:89:84:bd:00:c9:16:06:92:f4:9c:a9:80:29:c3:
                    e3:d8:bf:41:fa:81:5d:7e:5e:b8:5a:88:f5:02:7e:
                    1b:3a:8f:a0:a4:d1:30:52:5f:7b:d7:bd:14:23:4c:
                    bd:53:06:9f:d8:02:79:72:9a:7a:2a:2d:f5:8f:05:
                    f2:2e:7f:4d:75:ec:1a:c7:8a:b7:b6:0a:a7:bc:45:
                    6f:78:e7:5f:7b:b4:9e:57:3f:df:d6:70:71:19:1c:
                    9c:55:95:50:4a:ea:bc:5a:22:2b:b9:90:5d:7a:6e:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:67:D8:EF:76:B0:6C:63:A3:EA:CC:8B:90:FB:9B:B5:44:31:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0e4b68b-66f5-36a9-b1a1-b020081b6670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:17:07:c6:85:70:f5:51:e9:da:16:7f:4e:2c:37:28:84:05:
         79:78:ab:1c:f4:6f:2e:bd:d9:04:ce:1e:dc:e0:b5:b2:87:5e:
         19:29:73:84:de:2c:d1:b4:f9:ca:1b:96:3c:b6:aa:92:be:3c:
         cf:d4:06:c0:85:f3:45:f9:f2:d9:cf:22:73:f3:f9:a5:73:f7:
         cb:bd:e2:c7:cc:c2:31:d2:7e:ae:99:c0:ed:16:04:c5:96:c7:
         ef:31:72:0b:8d:8a:19:88:00:14:40:94:fa:20:a6:ed:f3:1e:
         e8:34:42:83:9a:21:b2:1a:85:9a:4a:40:d7:9a:3c:ca:24:67:
         c9:96:86:d2:5f:05:35:18:ba:3f:e6:d1:1c:9b:a2:91:02:b8:
         1a:c6:1c:1d:6d:cf:34:1e:90:67:8b:eb:74:cd:4f:bf:54:47:
         6a:89:a6:5e:54:df:80:de:cc:db:5b:a2:ca:0e:76:f7:62:ea:
         74:40:38:a8:c2:d7:8a:e4:d9:24:3a:24:07:f8:5e:a6:08:75:
         2b:50:34:24:ef:d7:a7:6b:97:e3:5a:2b:8e:7c:bd:1a:40:84:
         84:db:2a:39:af:aa:34:7d:1a:16:88:b5:cb:9b:d6:bf:83:93:
         43:ec:33:f4:52:4d:0c:c6:19:2c:6d:5d:f2:a5:1c:c5:b7:10:
         95:50:4b:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaj35eyxFyPeK44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
MzIwNmE2NWQtNzNmOC00ZTM1LTkzNDUtYzljMjhiNzNiOTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS2O/QaqmzLUAhZ3Yd+z4CZcayg15FrMXHjM
cOCEHcp1AnhspKc5g1/lWzzn4WHm8I6fi1zIqVjXFXLipLCQ29wj2dxCNTT6lrze
iBFHdZxQSHyLG2XKe+ny+3qax8vbMq1adRIT/4OTnMIY90Ay5F/mCCSYi1ipmkpT
DMuLZkgAjvjrbnSug9K4dy1/651MbRlu7jnPiYS9AMkWBpL0nKmAKcPj2L9B+oFd
fl64Woj1An4bOo+gpNEwUl97170UI0y9Uwaf2AJ5cpp6Ki31jwXyLn9Ndewax4q3
tgqnvEVveOdfe7SeVz/f1nBxGRycVZVQSuq8WiIruZBdem6EmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzJZ9jvdrBsY6PqzIuQ+5u1RDGeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzBlNGI2OGItNjZmNS0z
NmE5LWIxYTEtYjAyMDA4MWI2NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6ztMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMXB8aFcPVR6doWf04sNyiEBXl4qxz0by692QTOHtzgtbKHXhkpc4Te
LNG0+cobljy2qpK+PM/UBsCF80X58tnPInPz+aVz98u94sfMwjHSfq6ZwO0WBMWW
x+8xcguNihmIABRAlPogpu3zHug0QoOaIbIahZpKQNeaPMokZ8mWhtJfBTUYuj/m
0RybopECuBrGHB1tzzQekGeL63TNT79UR2qJpl5U34DezNtbosoOdvdi6nRAOKjC
14rk2SQ6JAf4XqYIdStQNCTv16drl+NaK458vRpAhITbKjmvqjR9GhaItcub1r+D
k0PsM/RSTQzGGSxtXfKlHMW3EJVQS3Y=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:09 2026 by rpki-client