Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d57bc1e-115d-332e-9471-8bdfeb2548ce.roa
File:                     6d57bc1e-115d-332e-9471-8bdfeb2548ce.roa (raw, json)
Hash identifier:          1B5RoN9M1U+fy9cK19pcSCQwiMhgjigjJwkr3khmrtw=
Subject key identifier:   F1:50:A2:3B:8E:C8:01:BF:68:CA:98:AF:0A:D1:7C:D4:82:AD:9B:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A83630FCA1C12A0FD0A000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d57bc1e-115d-332e-9471-8bdfeb2548ce.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        71.224.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:36:30:fc:a1:c1:2a:0f:d0:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=d685e7c5-bd4a-42a5-a0b5-f7f35c430cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:07:7a:09:7f:40:33:e4:67:68:8f:c2:b1:
                    bb:27:d6:9e:b7:30:90:d8:90:ba:44:31:7c:78:bb:
                    de:19:3f:49:d3:c8:8e:f9:22:3b:8e:96:d0:ce:6c:
                    3e:31:2e:e0:1f:dc:fa:eb:a3:20:fd:14:b7:95:75:
                    ce:d1:d0:49:36:2a:81:0f:3f:30:6d:e7:00:7e:d2:
                    0e:fc:08:32:bb:de:02:1b:77:0e:14:b5:f4:98:75:
                    37:73:62:80:9f:cd:3c:4f:1d:e5:a8:3b:a0:b9:f5:
                    50:fc:f1:7f:df:58:54:a1:3d:c4:30:fe:32:26:b2:
                    f6:2b:1e:a2:c0:d5:76:98:29:3e:93:fd:75:36:f8:
                    bd:c6:07:70:97:d9:07:28:c4:25:aa:a8:61:08:fe:
                    70:34:50:94:33:ec:99:7f:b7:7e:48:b3:1b:b7:4b:
                    be:04:9c:4f:3a:99:20:76:98:ff:c6:ce:b8:81:00:
                    c0:d4:31:34:42:3a:1a:3a:29:09:ab:97:22:84:d8:
                    b2:b3:ad:c1:6a:0f:22:01:79:c2:f2:1b:0e:a2:57:
                    8b:8d:93:7f:97:d4:89:3a:72:4a:04:ce:3e:4c:7b:
                    60:37:10:39:da:f0:b6:8f:61:26:62:f7:05:53:fb:
                    58:25:a5:77:c7:3c:f2:90:23:8c:a4:61:51:06:e0:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:A2:3B:8E:C8:01:BF:68:CA:98:AF:0A:D1:7C:D4:82:AD:9B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d57bc1e-115d-332e-9471-8bdfeb2548ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.224.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:da:29:36:4d:da:d0:ea:ef:38:a1:2c:e4:82:68:47:cb:
         4a:7b:09:30:27:02:aa:3b:04:ad:ba:e1:93:8d:55:58:8a:37:
         58:d9:1a:44:f5:d0:7c:b3:8c:d5:9b:ba:92:b6:ad:ca:a3:c4:
         66:2c:0a:98:d7:60:40:bd:81:39:bc:f7:0e:fb:e8:c7:15:f1:
         52:4a:6a:64:0a:b6:a7:e5:fe:eb:c9:84:b2:a6:9d:aa:34:45:
         00:4b:ac:f1:07:7c:0f:61:2a:7f:e7:42:87:ea:73:d7:db:11:
         70:43:5e:d5:8e:12:4a:29:c9:9b:e0:a7:9b:d0:61:e3:e9:58:
         23:4a:b7:87:f7:37:7a:35:04:28:0c:6a:eb:69:1e:90:6d:67:
         a6:6e:02:18:c5:8d:b7:61:9a:c9:5c:98:fc:b9:07:55:57:39:
         6f:62:df:db:3e:91:7c:b2:a6:69:68:9a:ca:c9:38:09:4c:ca:
         db:b9:0a:86:dd:5c:e0:b0:e3:42:f6:2d:a0:a2:5d:6b:19:83:
         a2:5f:f3:93:23:37:cc:fd:a8:67:f2:b4:c4:ee:c1:54:90:9b:
         71:07:59:64:a2:5c:2e:09:e1:70:c8:45:97:53:8d:3d:8a:b2:
         98:2a:76:e6:7d:88:44:ca:17:d1:6b:41:14:b2:ea:d2:3e:e2:
         eb:eb:0e:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqDYw/KHBKg/QoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDY4NWU3YzUtYmQ0YS00MmE1LWEwYjUtZjdmMzVjNDMwY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgugHegl/QDPkZ2iPwrG7J9aetzCQ2JC6RDF8
eLveGT9J08iO+SI7jpbQzmw+MS7gH9z666Mg/RS3lXXO0dBJNiqBDz8wbecAftIO
/Agyu94CG3cOFLX0mHU3c2KAn808Tx3lqDugufVQ/PF/31hUoT3EMP4yJrL2Kx6i
wNV2mCk+k/11Nvi9xgdwl9kHKMQlqqhhCP5wNFCUM+yZf7d+SLMbt0u+BJxPOpkg
dpj/xs64gQDA1DE0QjoaOikJq5cihNiys63Bag8iAXnC8hsOoleLjZN/l9SJOnJK
BM4+THtgNxA52vC2j2EmYvcFU/tYJaV3xzzykCOMpGFRBuCLAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFQojuOyAG/aMqYrwrRfNSCrZtVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQ1N2JjMWUtMTE1ZC0z
MzJlLTk0NzEtOGJkZmViMjU0OGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+A8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkN2ik2TdrQ6u84oSzkgmhHy0p7CTAnAqo7BK264ZONVViKN1jZGkT1
0HyzjNWbupK2rcqjxGYsCpjXYEC9gTm89w776McV8VJKamQKtqfl/uvJhLKmnao0
RQBLrPEHfA9hKn/nQofqc9fbEXBDXtWOEkopyZvgp5vQYePpWCNKt4f3N3o1BCgM
autpHpBtZ6ZuAhjFjbdhmslcmPy5B1VXOW9i39s+kXyypmlomsrJOAlMytu5Cobd
XOCw40L2LaCiXWsZg6Jf85MjN8z9qGfytMTuwVSQm3EHWWSiXC4J4XDIRZdTjT2K
spgqduZ9iETKF9FrQRSy6tI+4uvrDjI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:18:36 2026 by rpki-client