Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/e704cabc-aabe-346a-beb9-770b81e74503.roa
File:                     e704cabc-aabe-346a-beb9-770b81e74503.roa (raw, json)
Hash identifier:          fDQUpr/epjW6zZH/mXGFXcES7ssGU+Xr5tkZZP+WMvc=
Subject key identifier:   89:69:81:03:89:68:89:AB:D0:F3:13:12:83:B0:C0:60:36:F5:20:03
Certificate issuer:       /CN=57c8d964-67cd-41a7-a53f-67520998d5f4
Certificate serial:       010D0C9F4328584DE150A5AA40B0F3D98F5D9320
Authority key identifier: 09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/e704cabc-aabe-346a-beb9-770b81e74503.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     70
IP address blocks:        192.5.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a5:aa:40:b0:f3:d9:8f:5d:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c8d964-67cd-41a7-a53f-67520998d5f4
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=d4a7dacc-9098-4a3d-9936-ce9998e3e56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:c0:cd:f5:80:be:9a:50:b8:db:d9:54:82:
                    5b:8a:9e:1c:d6:42:81:1e:27:f5:03:77:e8:e0:17:
                    2d:36:eb:53:dc:1b:d5:fe:06:c7:47:a1:06:b1:fa:
                    36:e5:db:69:84:07:00:4d:22:fd:51:44:47:87:90:
                    48:5e:ac:0d:5e:24:2c:d4:ff:dd:12:54:5f:3e:96:
                    b7:85:4d:3e:dd:77:47:7e:d7:b1:fa:65:73:e7:09:
                    45:3b:42:56:6b:4b:ab:a2:a8:63:6c:9c:77:09:91:
                    7f:3f:fd:15:92:df:8d:bb:28:8e:cc:b7:9e:04:a8:
                    b0:0c:be:6a:70:e0:5c:bf:a4:a0:70:ef:b1:df:18:
                    8c:db:06:52:7a:79:bf:a9:39:07:29:37:fd:f9:3b:
                    43:be:65:d4:d0:ec:9e:5d:ad:fc:4f:bd:1b:ae:f2:
                    51:00:db:eb:6c:e8:8d:66:b2:2f:9b:fd:9b:f6:dd:
                    1b:cc:53:b4:4d:99:de:1c:a2:2f:15:a1:f7:4a:45:
                    c6:f5:92:df:04:31:09:24:87:2e:d2:2e:d8:ad:ac:
                    27:99:84:7b:f5:29:c8:ae:dc:2d:00:fb:1a:b7:7b:
                    64:b0:6d:33:d7:f6:b6:11:5c:a1:24:76:aa:ce:d4:
                    aa:47:60:3c:00:3c:e3:28:da:49:2e:7c:99:80:73:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:69:81:03:89:68:89:AB:D0:F3:13:12:83:B0:C0:60:36:F5:20:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/e704cabc-aabe-346a-beb9-770b81e74503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.crl

            X509v3 Authority Key Identifier:
                keyid:09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:14:0a:50:ee:2a:a7:69:59:3f:e0:95:ec:ff:96:75:14:af:
         8c:14:b3:2e:5f:24:61:5a:63:13:2b:a5:76:72:ed:db:31:d3:
         c7:80:6e:4e:ed:ab:00:ae:4d:4c:6a:d2:aa:1d:d4:82:c0:05:
         60:54:81:34:6f:2c:61:0a:36:11:39:82:1a:ce:8a:0b:2d:3a:
         92:bb:49:2b:93:44:dd:b9:6a:d6:e6:cb:80:91:78:c1:56:4c:
         1c:bc:cd:98:3d:56:c9:11:9d:95:5e:88:08:c5:b2:35:00:c3:
         67:42:78:ed:4a:e6:39:ec:80:6f:de:c4:a6:e0:c6:bc:41:19:
         40:b2:80:eb:0b:69:dd:00:2f:e3:d6:4d:be:4e:aa:3c:60:f0:
         aa:57:54:08:a9:a2:be:d4:48:4d:b2:84:f7:29:e5:ac:66:00:
         d0:a5:3b:97:71:83:57:27:e8:68:13:1b:66:fb:4b:57:03:28:
         ba:25:3a:52:72:36:89:1c:84:1b:aa:f5:70:cc:bc:3a:03:20:
         ab:ba:81:cb:b7:7f:5e:a9:09:82:1c:fa:dd:d3:79:7e:27:fd:
         75:65:07:29:3e:7b:21:f3:d1:70:95:c3:6e:79:10:05:9a:f0:
         6b:49:08:68:0f:b4:3c:e5:06:2b:d8:af:52:41:7f:e6:ae:92:
         24:c3:97:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKWqQLDz2Y9dkyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTdjOGQ5NjQtNjdjZC00MWE3LWE1M2YtNjc1MjA5OThk
NWY0MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZDRhN2RhY2MtOTA5OC00YTNkLTk5MzYtY2U5OTk4ZTNlNTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvrAzfWAvppQuNvZVIJbip4c1kKBHif1A3fo
4BctNutT3BvV/gbHR6EGsfo25dtphAcATSL9UURHh5BIXqwNXiQs1P/dElRfPpa3
hU0+3XdHftex+mVz5wlFO0JWa0uroqhjbJx3CZF/P/0Vkt+NuyiOzLeeBKiwDL5q
cOBcv6SgcO+x3xiM2wZSenm/qTkHKTf9+TtDvmXU0OyeXa38T70brvJRANvrbOiN
ZrIvm/2b9t0bzFO0TZneHKIvFaH3SkXG9ZLfBDEJJIcu0i7YrawnmYR79SnIrtwt
APsat3tksG0z1/a2EVyhJHaqztSqR2A8ADzjKNpJLnyZgHOm+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlpgQOJaImr0PMTEoOwwGA29SADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81N2M4
ZDk2NC02N2NkLTQxYTctYTUzZi02NzUyMDk5OGQ1ZjQvZTcwNGNhYmMtYWFiZS0z
NDZhLWJlYjktNzcwYjgxZTc0NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTdjOGQ5NjQtNjdjZC00MWE3LWE1
M2YtNjc1MjA5OThkNWY0LzU3YzhkOTY0LTY3Y2QtNDFhNy1hNTNmLTY3NTIwOTk4
ZDVmNC5jcmwwHwYDVR0jBBgwFoAUCXDhkuJMOEchfwC6uvzl81tUBgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81N2M4ZDk2NC02N2NkLTQxYTctYTUzZi02NzUy
MDk5OGQ1ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgUClDuKqdpWT/glez/lnUUr4wUsy5fJGFaYxMrpXZy7dsx08eAbk7t
qwCuTUxq0qod1ILABWBUgTRvLGEKNhE5ghrOigstOpK7SSuTRN25atbmy4CReMFW
TBy8zZg9VskRnZVeiAjFsjUAw2dCeO1K5jnsgG/exKbgxrxBGUCygOsLad0AL+PW
Tb5Oqjxg8KpXVAipor7USE2yhPcp5axmANClO5dxg1cn6GgTG2b7S1cDKLolOlJy
NokchBuq9XDMvDoDIKu6gcu3f16pCYIc+t3TeX4n/XVlByk+eyHz0XCVw255EAWa
8GtJCGgPtDzlBivYr1JBf+aukiTDlxw=
-----END CERTIFICATE-----
Generated at Sat Jun 6 22:41:12 2026 by rpki-client