Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba80c141-4db3-366d-8017-5244c86cb5b1.roa
File:                     ba80c141-4db3-366d-8017-5244c86cb5b1.roa (raw, json)
Hash identifier:          AaAxObuYTLx1SENrvHXXk8Ds+eRQpg1ILyltvnmdxxA=
Subject key identifier:   31:B3:F3:86:60:4B:DB:06:9A:AB:4A:25:1A:3D:AC:9D:F0:53:0F:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7AC9036880433EDA59000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba80c141-4db3-366d-8017-5244c86cb5b1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        67.166.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:ac:90:36:88:04:33:ed:a5:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=100efe05-395a-4d66-9371-9c0248a963e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:4c:03:cd:c3:7c:73:1c:7d:e2:b9:f4:db:
                    04:a2:aa:0d:e0:d1:24:24:14:d1:75:b4:d6:53:a1:
                    cb:b8:b6:82:6f:24:a8:9d:c9:48:81:5b:ed:50:12:
                    52:6c:76:21:fd:98:c0:5b:4e:98:27:24:a6:aa:12:
                    af:35:6d:52:dc:75:74:d3:b4:ad:ae:bd:ef:fc:43:
                    ec:35:1a:50:ab:7d:52:1e:b1:16:23:05:de:04:58:
                    66:46:8a:aa:07:93:e7:96:72:19:1c:29:ec:8f:41:
                    48:64:31:b8:9d:f8:a7:38:da:17:0e:3b:a5:49:29:
                    6a:7f:fc:03:a5:c7:8b:b7:cc:ba:25:4d:28:34:cf:
                    d2:c4:ca:67:1c:b4:d8:b6:d4:9c:5e:3d:3a:ed:2e:
                    82:5e:85:48:6a:d0:e0:51:c8:a1:8e:11:90:d3:7f:
                    4e:5b:69:2b:fc:d3:d3:e3:36:4c:8b:72:3b:88:12:
                    c2:46:f9:17:47:c2:7b:5e:80:cc:80:a3:6e:d2:ca:
                    c7:31:87:78:15:bf:c2:75:7d:ab:71:2e:f6:ac:e4:
                    5c:4b:52:cc:68:bc:3e:8f:06:00:c1:84:35:74:48:
                    11:f3:81:d4:b3:ef:48:c5:23:9e:ee:ae:90:e3:33:
                    0f:88:9f:69:9d:76:ce:e5:3b:28:ea:a5:f2:ac:a0:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:F3:86:60:4B:DB:06:9A:AB:4A:25:1A:3D:AC:9D:F0:53:0F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba80c141-4db3-366d-8017-5244c86cb5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.166.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:91:46:e2:0f:37:7c:d9:11:98:ee:2a:b7:68:44:a0:40:
         3f:48:97:7a:3d:bb:8b:c9:76:7b:21:d1:e0:e7:d6:42:33:3b:
         dd:cf:5f:ca:a7:c2:c7:75:a1:19:da:46:28:02:ca:14:54:0d:
         87:32:47:6f:48:7d:ef:fe:fa:90:67:d7:e5:d8:04:b8:4c:f5:
         69:a4:84:d6:9b:4e:a1:07:53:64:db:bd:7e:4a:23:a1:ba:12:
         59:ae:67:36:e9:7b:25:32:f0:c5:17:eb:15:61:2a:3b:17:a1:
         94:3b:83:bf:1a:39:1a:1b:dc:ab:38:83:13:16:3a:8e:d7:53:
         d4:da:91:44:a9:94:a6:24:ae:c9:6c:c8:52:cd:5f:ed:f2:12:
         5b:60:43:d4:1d:56:bf:c7:de:41:8a:e7:f1:2b:3f:0a:a8:a8:
         b6:e8:a1:3a:08:c8:01:93:97:e0:cc:59:a9:7b:8b:ea:88:7f:
         b8:dd:ed:19:af:a8:f0:a3:6d:1e:f9:99:52:a4:46:7d:3d:cb:
         5d:01:be:60:ed:e4:5e:e9:07:44:09:b0:10:87:8e:7d:11:2b:
         ba:89:9e:05:df:a5:35:33:67:8f:c9:af:d6:fe:3d:0b:89:f8:
         4b:8f:8d:ab:0c:a5:f5:f6:35:e8:5b:20:88:cf:d3:4f:00:cf:
         b8:a6:0b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp6yQNogEM+2lkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
MTAwZWZlMDUtMzk1YS00ZDY2LTkzNzEtOWMwMjQ4YTk2M2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWlMA83DfHMcfeK59NsEoqoN4NEkJBTRdbTW
U6HLuLaCbySonclIgVvtUBJSbHYh/ZjAW06YJySmqhKvNW1S3HV007Strr3v/EPs
NRpQq31SHrEWIwXeBFhmRoqqB5PnlnIZHCnsj0FIZDG4nfinONoXDjulSSlqf/wD
pceLt8y6JU0oNM/SxMpnHLTYttScXj067S6CXoVIatDgUcihjhGQ039OW2kr/NPT
4zZMi3I7iBLCRvkXR8J7XoDMgKNu0srHMYd4Fb/CdX2rcS72rORcS1LMaLw+jwYA
wYQ1dEgR84HUs+9IxSOe7q6Q4zMPiJ9pnXbO5Tso6qXyrKASxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGz84ZgS9sGmqtKJRo9rJ3wUw+pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE4MGMxNDEtNGRiMy0z
NjZkLTgwMTctNTI0NGM4NmNiNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6bcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuykUbiDzd82RGY7iq3aESgQD9Il3o9u4vJdnsh0eDn1kIzO93PX8qn
wsd1oRnaRigCyhRUDYcyR29Ife/++pBn1+XYBLhM9WmkhNabTqEHU2TbvX5KI6G6
ElmuZzbpeyUy8MUX6xVhKjsXoZQ7g78aORob3Ks4gxMWOo7XU9TakUSplKYkrsls
yFLNX+3yEltgQ9QdVr/H3kGK5/ErPwqoqLbooToIyAGTl+DMWal7i+qIf7jd7Rmv
qPCjbR75mVKkRn09y10BvmDt5F7pB0QJsBCHjn0RK7qJngXfpTUzZ4/Jr9b+PQuJ
+EuPjasMpfX2NehbIIjP008Az7imC7o=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:05:20 2026 by rpki-client