Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
File:                     873d4b38-1604-341a-a8a0-f8b12792ef66.roa (raw, json)
Hash identifier:          9U9/8WdI8/IWiI/BKa3LKlWfIUWjZqOZz8bTJull2AY=
Subject key identifier:   81:37:82:60:F5:EA:68:23:5B:FF:FA:B3:11:34:F1:1D:14:A3:07:49
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F418C36505EBEBCAE8EE0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        148.59.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:41:8c:36:50:5e:be:bc:ae:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c706e007-1c61-4fde-81bf-a9d264f30542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:33:ab:d5:6c:22:21:51:52:86:e1:e8:51:
                    0a:41:19:4f:a4:a0:8f:b3:fa:9b:a3:34:13:cb:77:
                    24:f7:7b:df:4b:e4:ac:7a:02:82:dd:a9:00:7b:9e:
                    1b:d2:a3:7f:ce:92:a3:68:56:d1:5a:96:4c:75:1d:
                    7f:24:7a:5b:84:e4:57:87:fc:43:7e:26:d2:f3:8b:
                    d1:30:6c:68:24:a3:8f:da:60:a2:f4:0c:4b:b6:33:
                    60:12:f7:32:b5:32:f2:1a:5f:f3:41:0e:72:ed:dc:
                    8b:c2:4d:01:74:ed:af:0c:7e:3e:f9:a7:25:22:ad:
                    6b:83:a4:85:38:f2:71:1e:03:e1:bb:69:9f:23:09:
                    d6:a6:fe:eb:7a:87:27:f0:e4:7e:e0:b9:36:2c:b0:
                    07:19:92:ee:0d:e1:af:ee:4d:a8:05:e0:62:f8:67:
                    17:61:62:43:6c:d8:bb:61:5d:9f:bf:3d:e9:5e:bc:
                    99:49:bb:97:5a:25:ae:54:74:1f:ba:0c:f6:71:f9:
                    2c:cb:e1:e9:02:4b:33:9d:5c:3e:77:59:29:a2:91:
                    2a:05:c2:99:72:9c:22:0e:7e:ee:78:f8:13:28:ba:
                    36:ec:d0:80:1a:97:67:51:38:b6:a3:89:82:d2:0f:
                    35:26:b1:0d:9c:6e:57:ab:83:ed:d7:f2:56:3e:d9:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:82:60:F5:EA:68:23:5B:FF:FA:B3:11:34:F1:1D:14:A3:07:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/873d4b38-1604-341a-a8a0-f8b12792ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:fb:67:2e:84:42:af:db:15:d6:f1:4f:17:50:29:4a:a0:
         c5:f3:71:06:ac:b6:38:7c:ba:24:19:37:52:63:52:1e:f4:47:
         00:58:fb:95:02:d6:e4:09:2c:87:e3:b1:a7:d2:f1:63:19:77:
         a7:6b:f5:cc:b4:a4:76:9e:26:20:29:09:a5:fc:91:3a:e8:b3:
         67:31:52:83:be:de:4c:ff:98:ba:8a:87:33:c3:b2:6a:22:c4:
         fe:f5:82:17:51:21:ca:cd:53:df:c1:e5:fa:66:c7:2e:03:93:
         f8:8e:1c:25:17:4a:7f:ac:64:11:1b:58:69:ef:e2:2a:32:c8:
         75:b2:a4:cf:e8:e1:d4:5f:93:95:96:b6:d0:ed:bd:7b:76:b0:
         cc:98:04:80:bb:d9:dc:a4:19:cc:a7:a1:b3:10:6c:4b:be:59:
         10:6e:a8:24:22:c2:90:bc:24:be:7f:5a:02:40:98:33:46:d3:
         ea:82:99:cf:1a:9f:7a:ef:b5:77:f4:91:1f:8a:f9:4c:85:c0:
         0a:ad:39:05:0d:e0:d8:eb:cd:5a:af:b1:81:88:ea:44:da:d9:
         84:6f:00:13:90:73:bb:1a:6e:dd:ae:55:85:99:94:8d:f6:30:
         c6:a3:94:c5:93:6f:6e:3a:98:45:8b:75:c7:ff:5e:ab:5e:65:
         d3:49:e4:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0GMNlBevryujuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzcwNmUwMDctMWM2MS00ZmRlLTgxYmYtYTlkMjY0ZjMwNTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh8zq9VsIiFRUobh6FEKQRlPpKCPs/qbozQT
y3ck93vfS+SsegKC3akAe54b0qN/zpKjaFbRWpZMdR1/JHpbhORXh/xDfibS84vR
MGxoJKOP2mCi9AxLtjNgEvcytTLyGl/zQQ5y7dyLwk0BdO2vDH4++aclIq1rg6SF
OPJxHgPhu2mfIwnWpv7reocn8OR+4Lk2LLAHGZLuDeGv7k2oBeBi+GcXYWJDbNi7
YV2fvz3pXryZSbuXWiWuVHQfugz2cfksy+HpAksznVw+d1kpopEqBcKZcpwiDn7u
ePgTKLo27NCAGpdnUTi2o4mC0g81JrENnG5Xq4Pt1/JWPtmyQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIE3gmD16mgjW//6sxE08R0UowdJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODczZDRiMzgtMTYwNC0z
NDFhLWE4YTAtZjhiMTI3OTJlZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTI+2cuhEKv2xXW8U8XUClKoMXzcQastjh8uiQZN1JjUh70RwBY+5UC
1uQJLIfjsafS8WMZd6dr9cy0pHaeJiApCaX8kTros2cxUoO+3kz/mLqKhzPDsmoi
xP71ghdRIcrNU9/B5fpmxy4Dk/iOHCUXSn+sZBEbWGnv4ioyyHWypM/o4dRfk5WW
ttDtvXt2sMyYBIC72dykGcynobMQbEu+WRBuqCQiwpC8JL5/WgJAmDNG0+qCmc8a
n3rvtXf0kR+K+UyFwAqtOQUN4NjrzVqvsYGI6kTa2YRvABOQc7sabt2uVYWZlI32
MMajlMWTb246mEWLdcf/XqteZdNJ5Hw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:41 2026 by rpki-client