Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ebf38d2-68b8-346d-85b7-a0aa79a0a913.roa
File:                     1ebf38d2-68b8-346d-85b7-a0aa79a0a913.roa (raw, json)
Hash identifier:          H6VaIzOnlHM1wk9/gMeVOllUeWd2dEzfvK/Yf+jFc2k=
Subject key identifier:   08:30:16:D6:CB:CF:0D:FF:09:5A:9D:08:96:6D:F0:CD:9C:B3:E0:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3722D5FCC8FFAC5F811D8E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ebf38d2-68b8-346d-85b7-a0aa79a0a913.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        97.86.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:2d:5f:cc:8f:fa:c5:f8:11:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=4c8511e4-7197-4769-ab98-fa2bd90b043e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:15:fc:05:2d:66:fb:c1:a2:be:fc:da:d8:
                    97:ae:7b:7e:ee:44:ab:1c:15:fe:67:d2:7c:08:a0:
                    0b:b4:77:a4:54:20:eb:10:8a:21:7d:ec:6d:03:13:
                    a2:9f:a6:05:75:f5:a4:70:62:0d:3c:35:aa:95:1a:
                    12:76:15:93:bb:42:84:31:cb:7d:bf:29:ef:96:4c:
                    6c:0a:76:3c:53:fd:45:f2:b8:3d:03:8d:d3:84:15:
                    be:8a:80:c9:6e:75:40:3b:2a:1e:d8:4d:94:9e:a5:
                    d3:79:07:69:c4:b5:23:ab:e7:f4:2a:a6:af:cc:c1:
                    67:d9:b3:6a:17:fb:0e:3d:a5:b8:c0:84:ac:e0:b5:
                    ac:e0:bb:71:7d:eb:47:b9:35:04:4e:b2:ca:4e:1e:
                    1b:dc:63:37:85:0b:3a:eb:41:52:f4:ae:b4:71:d5:
                    8d:6b:e9:86:87:38:a4:49:9f:88:02:0b:85:a1:26:
                    ee:fd:57:55:be:66:8c:72:16:40:fb:71:04:dd:b6:
                    4a:0f:83:8a:5b:4f:d2:05:65:06:1c:ef:6a:8c:bb:
                    15:5f:4c:8e:56:87:8a:50:9c:d8:d2:9b:1e:e2:ff:
                    92:71:1d:8f:d6:fa:3f:20:8e:60:ab:33:4a:05:ee:
                    ee:38:99:62:f4:e9:fb:11:b4:d8:cb:60:7e:a4:38:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:16:D6:CB:CF:0D:FF:09:5A:9D:08:96:6D:F0:CD:9C:B3:E0:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ebf38d2-68b8-346d-85b7-a0aa79a0a913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:90:23:7b:90:15:74:6b:0e:47:64:69:15:ca:c5:de:ef:
         63:f7:c7:b9:89:60:24:75:69:64:d1:0a:ea:2d:f7:9a:0e:1d:
         38:a7:8e:b7:92:dd:64:a6:75:83:c5:55:da:1e:68:44:d2:79:
         55:4f:65:9a:0c:06:cd:ab:47:1f:04:73:5e:4e:73:8f:fb:c2:
         b7:a3:9d:8b:a7:61:e3:14:f3:25:44:dd:3f:86:c8:99:5f:70:
         b3:b1:13:48:b8:09:21:fd:6c:20:21:4e:50:69:dd:33:1c:7a:
         6e:a8:bc:6d:1c:9d:19:bd:fc:65:13:d8:dc:ba:a2:b8:ae:27:
         17:fe:56:02:88:56:d3:71:10:1b:d2:bf:60:bc:30:f4:a2:8d:
         d9:86:13:11:ce:08:d3:93:7c:68:58:f5:39:e7:c6:a7:ab:74:
         50:94:f2:b6:99:89:9c:b7:62:64:ef:f9:b7:94:fa:87:28:b4:
         02:2a:14:df:02:e7:2b:b5:f6:08:82:c0:1b:73:57:d9:db:e7:
         17:be:1b:23:77:0f:5d:6a:c8:50:f5:58:8c:4d:30:1a:c7:ef:
         ea:2e:40:9d:fd:37:10:be:80:24:8f:24:41:ab:5e:b7:5b:a7:
         fe:64:78:3c:65:cf:36:ad:bd:29:f0:fd:e7:07:a1:bb:8a:5a:
         9f:3a:44:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dci1fzI/6xfgR2OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NGM4NTExZTQtNzE5Ny00NzY5LWFiOTgtZmEyYmQ5MGIwNDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ4V/AUtZvvBor782tiXrnt+7kSrHBX+Z9J8
CKALtHekVCDrEIohfextAxOin6YFdfWkcGINPDWqlRoSdhWTu0KEMct9vynvlkxs
CnY8U/1F8rg9A43ThBW+ioDJbnVAOyoe2E2UnqXTeQdpxLUjq+f0KqavzMFn2bNq
F/sOPaW4wISs4LWs4LtxfetHuTUETrLKTh4b3GM3hQs660FS9K60cdWNa+mGhzik
SZ+IAguFoSbu/VdVvmaMchZA+3EE3bZKD4OKW0/SBWUGHO9qjLsVX0yOVoeKUJzY
0pse4v+ScR2P1vo/II5gqzNKBe7uOJli9On7EbTYy2B+pDhWTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgwFtbLzw3/CVqdCJZt8M2cs+BnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWViZjM4ZDItNjhiOC0z
NDZkLTg1YjctYTBhYTc5YTBhOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYVYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVbkCN7kBV0aw5HZGkVysXe72P3x7mJYCR1aWTRCuot95oOHTinjreS
3WSmdYPFVdoeaETSeVVPZZoMBs2rRx8Ec15Oc4/7wrejnYunYeMU8yVE3T+GyJlf
cLOxE0i4CSH9bCAhTlBp3TMcem6ovG0cnRm9/GUT2Ny6oriuJxf+VgKIVtNxEBvS
v2C8MPSijdmGExHOCNOTfGhY9TnnxqerdFCU8raZiZy3YmTv+beU+ocotAIqFN8C
5yu19giCwBtzV9nb5xe+GyN3D11qyFD1WIxNMBrH7+ouQJ39NxC+gCSPJEGrXrdb
p/5keDxlzzatvSnw/ecHobuKWp86RDQ=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:34 2026 by rpki-client