Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
File:                     15de4dc8-a657-3baf-8d71-7563142b8734.roa (raw, json)
Hash identifier:          LWwBQIndsS8EXM6eq39h824OVjxpDXRGRzYLwtK12iE=
Subject key identifier:   D8:78:1E:8B:EE:C3:90:92:18:AE:B9:0A:7E:0D:34:7E:81:D7:2C:6E
Certificate issuer:       /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Certificate serial:       010D0C9F4328584EC371C35FDD75B2E5C157C200
Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11708
IP address blocks:        72.22.208.0/20 maxlen: 32
                          75.98.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c3:5f:dd:75:b2:e5:c1:57:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=43311650-378f-4af8-9814-62313e2982b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:17:d9:31:9f:c7:76:65:b2:b0:3b:bc:43:
                    d4:5d:fe:6f:8a:ac:ec:9a:0c:fb:91:72:f1:ec:fc:
                    ce:ec:ab:d8:2b:39:26:2e:91:ee:b7:fa:49:41:89:
                    75:a2:6f:57:86:8b:d3:79:27:58:ba:02:1e:92:bf:
                    f8:21:84:25:c7:73:5e:3e:88:e9:fc:e0:a2:6e:8f:
                    c9:5d:33:09:5a:1d:aa:a7:aa:25:8d:7f:ad:8c:53:
                    ee:c5:6f:09:7e:77:09:8b:1b:a0:53:b8:ed:9c:e2:
                    f9:66:14:69:dc:d8:b0:d7:0e:50:07:a6:2d:23:d7:
                    62:75:5f:7d:23:ad:0f:08:47:bf:04:4d:ea:77:41:
                    ac:d3:d5:88:dd:41:31:9a:ba:9e:8f:cb:61:1f:64:
                    19:50:0d:83:22:19:4c:f2:7f:97:f8:80:05:f4:09:
                    a1:9b:8e:80:1a:ef:63:e8:36:3a:de:8d:c4:9d:12:
                    ca:d3:4b:e1:10:46:4c:e9:a8:87:f3:8a:d4:ab:1a:
                    c3:25:10:e7:1c:ff:ae:26:5f:b6:e9:a8:30:27:7f:
                    eb:66:34:f0:30:b7:3d:3b:1e:3d:fa:f8:b4:29:ae:
                    36:16:8e:d9:7f:e7:0f:5d:11:e3:da:5a:50:f7:af:
                    47:07:79:72:8e:82:e0:4c:0a:8e:30:40:cc:fd:29:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:1E:8B:EE:C3:90:92:18:AE:B9:0A:7E:0D:34:7E:81:D7:2C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl

            X509v3 Authority Key Identifier:
                keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.208.0/20
                  75.98.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:70:2f:de:45:ca:54:7b:38:e5:63:b8:93:ff:e3:3a:0a:0c:
         fa:23:7d:c7:8e:de:9e:02:14:2a:f8:d8:45:ac:2e:a3:03:89:
         3e:f7:45:3f:40:38:95:86:d9:5c:ff:22:c5:61:1c:fd:86:af:
         b4:df:9f:3b:d8:32:04:3a:77:fb:3f:33:dd:7f:07:79:3a:2f:
         bf:4a:b5:7a:72:51:33:b5:7f:b9:d9:37:27:88:a5:15:54:74:
         fd:d3:03:51:8f:97:08:59:8a:42:7f:79:24:35:f3:b6:a6:9c:
         e1:67:ab:5e:69:55:56:9f:fc:a7:55:82:1e:26:a4:2c:1b:83:
         b8:7e:cf:f7:c3:da:07:a7:f1:e3:f7:7f:1d:49:dc:93:4f:f7:
         e7:5d:f8:74:57:b2:7f:a2:aa:43:88:94:ae:e0:9b:dc:cf:7e:
         15:56:9e:08:fa:cd:2e:6a:9f:09:27:e9:28:54:81:c4:30:76:
         00:03:9c:27:e3:43:9f:86:c5:da:32:2a:fb:9a:67:ec:29:86:
         a6:b5:c6:85:40:f2:bf:33:a6:eb:9b:7e:90:55:8c:7d:7d:c0:
         9b:69:1a:df:6a:94:0b:61:52:65:9c:a9:c1:e4:9d:44:f0:31:
         e4:af:6d:91:a5:bc:9c:a6:b1:08:db:ce:bb:42:10:14:99:77:
         b9:74:ff:02
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7DccNf3XWy5cFXwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1
N2EzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NDMzMTE2NTAtMzc4Zi00YWY4LTk4MTQtNjIzMTNlMjk4MmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPEX2TGfx3ZlsrA7vEPUXf5viqzsmgz7kXLx
7PzO7KvYKzkmLpHut/pJQYl1om9XhovTeSdYugIekr/4IYQlx3NePojp/OCibo/J
XTMJWh2qp6oljX+tjFPuxW8JfncJixugU7jtnOL5ZhRp3Niw1w5QB6YtI9didV99
I60PCEe/BE3qd0Gs09WI3UExmrqej8thH2QZUA2DIhlM8n+X+IAF9Amhm46AGu9j
6DY63o3EnRLK00vhEEZM6aiH84rUqxrDJRDnHP+uJl+26agwJ3/rZjTwMLc9Ox49
+vi0Ka42Fo7Zf+cPXRHj2lpQ969HB3lyjoLgTAqOMEDM/Sm5OQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNh4Hovuw5CSGK65Cn4NNH6B1yxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdl
OGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvMTVkZTRkYzgtYTY1Ny0z
YmFmLThkNzEtNzU2MzE0MmI4NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA3ZThjNzUtNzVlNC00NjRjLTg4
YzAtMGY4YzZkODc1N2EzL2QwN2U4Yzc1LTc1ZTQtNDY0Yy04OGMwLTBmOGM2ZDg3
NTdhMy5jcmwwHwYDVR0jBBgwFoAUAjwHSGYDD0Ag9gR4pn9ZKBTI9OgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhj
NmQ4NzU3YTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQESBbQAwQE
S2JwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAZwL95FylR7OOVjuJP/4zoKDPojfceO3p4CFCr42EWsLqMD
iT73RT9AOJWG2Vz/IsVhHP2Gr7TfnzvYMgQ6d/s/M91/B3k6L79KtXpyUTO1f7nZ
NyeIpRVUdP3TA1GPlwhZikJ/eSQ187amnOFnq15pVVaf/KdVgh4mpCwbg7h+z/fD
2gen8eP3fx1J3JNP9+dd+HRXsn+iqkOIlK7gm9zPfhVWngj6zS5qnwkn6ShUgcQw
dgADnCfjQ5+GxdoyKvuaZ+wphqa1xoVA8r8zpuubfpBVjH19wJtpGt9qlAthUmWc
qcHknUTwMeSvbZGlvJymsQjbzrtCEBSZd7l0/wI=
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:23:30 2026 by rpki-client