Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/39726dfa-53d2-35c0-9c7f-1fe19847e2f1.roa
File:                     39726dfa-53d2-35c0-9c7f-1fe19847e2f1.roa (raw, json)
Hash identifier:          BxGvzD9BiuC5VEQol+USRufDWczLWCsblId4Ob0445k=
Subject key identifier:   34:8B:03:B4:4B:8C:66:04:32:76:19:14:49:0B:A8:98:48:8C:78:7E
Certificate issuer:       /CN=4ee6a656-8b84-4850-8417-d53e22107f20
Certificate serial:       010D0C9F4328584E5EA52339C6440BA6FFEC2340
Authority key identifier: 99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/39726dfa-53d2-35c0-9c7f-1fe19847e2f1.roa
Signing time:             Thu 02 Jul 2026 22:27:14 +0000
ROA not before:           Thu 02 Jul 2026 22:27:14 +0000
ROA not after:            Wed 30 Sep 2026 22:27:14 +0000
asID:                     17378
IP address blocks:        199.231.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:a5:23:39:c6:44:0b:a6:ff:ec:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee6a656-8b84-4850-8417-d53e22107f20
        Validity
            Not Before: Jul  2 22:27:14 2026 GMT
            Not After : Sep 30 22:27:14 2026 GMT
        Subject: CN=bddfb79e-7b33-4bb7-9738-f032568e8046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:42:9d:35:27:a4:96:f6:78:b7:60:ce:a4:
                    eb:e1:fc:bf:3c:f8:4f:aa:64:94:fd:4b:6d:d4:47:
                    75:f9:64:e7:20:53:2c:87:a0:68:90:54:22:8c:45:
                    95:52:87:c9:01:2a:b9:4a:81:64:3d:3a:55:49:cd:
                    77:be:49:9b:8e:0a:38:a5:ab:56:b5:19:4b:33:24:
                    4f:1f:7b:48:a0:e9:6c:05:a2:38:e6:5d:b1:0d:ff:
                    c7:d4:97:aa:51:cd:67:7c:5e:9e:16:2f:ee:42:08:
                    82:17:3b:fe:0f:ec:f7:98:6a:19:29:58:09:f9:a6:
                    10:c8:af:15:2c:4c:96:d5:b1:b5:5e:93:66:7a:d0:
                    fc:38:52:cc:c7:24:9b:cc:33:d9:ae:75:7d:70:b2:
                    ff:09:92:d2:76:d5:3c:83:de:67:dc:7f:be:1b:5c:
                    88:d1:53:56:76:03:4e:fa:e9:59:72:d0:da:f8:be:
                    a7:0a:95:5e:e5:35:f1:c3:85:54:65:b1:b6:22:66:
                    4c:d4:dc:e3:65:58:8c:3c:db:e3:91:4c:04:f5:10:
                    67:b8:27:ba:14:5c:9c:cc:1d:71:81:2c:5f:e3:74:
                    a9:9f:79:e4:6c:00:63:58:4d:70:41:9f:b5:b6:a5:
                    9b:c1:86:8b:1d:fa:46:91:9e:ad:99:9c:b2:ca:de:
                    c3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:03:B4:4B:8C:66:04:32:76:19:14:49:0B:A8:98:48:8C:78:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/39726dfa-53d2-35c0-9c7f-1fe19847e2f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl

            X509v3 Authority Key Identifier:
                keyid:99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:86:94:22:f1:51:42:27:10:79:c2:3c:29:b3:0c:27:3d:
         79:13:83:93:5c:46:6f:59:6b:56:64:d4:3d:14:64:3a:0f:b7:
         06:b0:4e:3d:34:9d:d6:b2:22:47:94:61:9b:26:fc:47:f3:0c:
         ce:27:cf:25:a1:44:3a:93:e2:86:ed:d3:ed:a9:43:82:7e:07:
         89:b7:66:c7:84:1f:db:7a:78:21:6a:75:a3:4d:8f:e8:e4:7a:
         98:74:b2:3d:32:96:de:2c:ee:e0:c3:1d:eb:f5:4c:ac:fe:62:
         1f:ad:c5:ac:5f:da:01:02:d5:38:78:b0:36:11:f9:df:42:27:
         3b:9b:c2:7f:94:57:82:5f:b3:fd:16:7c:c7:65:ca:fc:a9:bd:
         64:48:78:70:34:73:fa:99:f2:7b:3c:b7:44:39:85:0f:a9:d1:
         23:cc:a3:00:1e:51:94:19:84:32:6e:c8:b5:77:3b:eb:0b:15:
         c4:61:48:8d:17:b9:cf:a4:2e:d0:cf:99:0a:4d:69:be:78:36:
         9c:68:10:ec:6f:03:1d:91:fc:4c:9a:ef:82:79:bd:ef:ef:ba:
         fa:1e:4d:c7:20:bd:1b:5b:fe:7d:e4:5a:90:70:ac:f6:dc:47:
         25:97:8f:3d:ef:3c:cb:35:f0:10:22:52:c4:12:f5:23:4e:52:
         84:bc:5c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5epSM5xkQLpv/sI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNmE2NTYtOGI4NC00ODUwLTg0MTctZDUzZTIyMTA3
ZjIwMB4XDTI2MDcwMjIyMjcxNFoXDTI2MDkzMDIyMjcxNFowLzEtMCsGA1UEAxMk
YmRkZmI3OWUtN2IzMy00YmI3LTk3MzgtZjAzMjU2OGU4MDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvapCnTUnpJb2eLdgzqTr4fy/PPhPqmSU/Utt
1Ed1+WTnIFMsh6BokFQijEWVUofJASq5SoFkPTpVSc13vkmbjgo4patWtRlLMyRP
H3tIoOlsBaI45l2xDf/H1JeqUc1nfF6eFi/uQgiCFzv+D+z3mGoZKVgJ+aYQyK8V
LEyW1bG1XpNmetD8OFLMxySbzDPZrnV9cLL/CZLSdtU8g95n3H++G1yI0VNWdgNO
+ulZctDa+L6nCpVe5TXxw4VUZbG2ImZM1NzjZViMPNvjkUwE9RBnuCe6FFyczB1x
gSxf43Spn3nkbABjWE1wQZ+1tqWbwYaLHfpGkZ6tmZyyyt7DVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSLA7RLjGYEMnYZFEkLqJhIjHh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ZWU2
YTY1Ni04Yjg0LTQ4NTAtODQxNy1kNTNlMjIxMDdmMjAvMzk3MjZkZmEtNTNkMi0z
NWMwLTljN2YtMWZlMTk4NDdlMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGVlNmE2NTYtOGI4NC00ODUwLTg0
MTctZDUzZTIyMTA3ZjIwLzRlZTZhNjU2LThiODQtNDg1MC04NDE3LWQ1M2UyMjEw
N2YyMC5jcmwwHwYDVR0jBBgwFoAUmULEn0hVsYxikwwU4Nk51DmGzDYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80ZWU2YTY1Ni04Yjg0LTQ4NTAtODQxNy1kNTNl
MjIxMDdmMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx+dMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlNhpQi8VFCJxB5wjwpswwnPXkTg5NcRm9Za1Zk1D0UZDoPtwawTj00
ndayIkeUYZsm/EfzDM4nzyWhRDqT4obt0+2pQ4J+B4m3ZseEH9t6eCFqdaNNj+jk
eph0sj0ylt4s7uDDHev1TKz+Yh+txaxf2gEC1Th4sDYR+d9CJzubwn+UV4Jfs/0W
fMdlyvypvWRIeHA0c/qZ8ns8t0Q5hQ+p0SPMowAeUZQZhDJuyLV3O+sLFcRhSI0X
uc+kLtDPmQpNab54NpxoEOxvAx2R/Eya74J5ve/vuvoeTccgvRtb/n3kWpBwrPbc
RyWXjz3vPMs18BAiUsQS9SNOUoS8XDQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:08 2026 by rpki-client