Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          Sw7p37Zk76Hmbb4JIfU8YeD6WZ4MngZzAXVWYL3W+e8=
Subject key identifier:   64:10:2E:81:3C:5A:6B:98:55:D6:72:6B:84:4A:C2:8F:2D:DE:D5:95
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584E54B4ACE607EC689A7862F880
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:ac:e6:07:ec:68:9a:78:62:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=a8975a1b-a866-47e3-acac-18564a48d00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:3f:29:69:aa:27:36:18:c0:99:2e:f6:b7:
                    e9:54:08:c2:ad:55:14:aa:a5:45:6c:3c:66:9d:ab:
                    7f:2c:cb:74:6f:c6:41:58:26:69:7a:6f:de:b5:e9:
                    e5:04:5d:33:15:d2:bd:67:e3:50:4c:c4:8e:39:ca:
                    64:bd:8b:74:ac:12:c3:91:99:e0:95:d7:95:ec:d4:
                    0f:61:eb:47:85:3a:19:da:5b:43:1c:52:f6:cc:45:
                    a5:f3:ae:01:9a:a8:cc:03:30:30:fe:ae:09:a3:6a:
                    f4:c3:7f:a7:bc:4c:48:89:f4:47:3a:4d:a7:44:80:
                    fb:bd:3f:b7:43:87:af:72:ec:d2:f9:37:18:83:ce:
                    6b:aa:e6:2c:23:3e:f2:fe:13:8e:f8:c1:88:ab:5c:
                    50:e7:b8:de:8b:05:ef:e8:ec:e5:6f:cd:3b:b0:ea:
                    f2:1c:e0:63:47:58:a5:d3:fe:14:25:3c:51:74:48:
                    74:93:45:9f:1a:c2:24:29:7e:67:fc:b2:00:f9:b6:
                    91:a8:5d:a4:f3:44:7d:57:6b:bd:62:c8:91:08:8f:
                    03:14:13:b5:87:87:05:30:1d:8d:a8:0b:44:c9:64:
                    f6:ed:ee:3e:59:4c:68:71:42:b9:94:f0:5d:c6:6d:
                    ec:b9:5d:7c:9a:87:42:7c:43:46:5e:14:38:b9:a1:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:2E:81:3C:5A:6B:98:55:D6:72:6B:84:4A:C2:8F:2D:DE:D5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:26:f8:42:28:1f:68:6c:02:82:93:bf:96:fe:0a:14:d2:35:
         bb:15:b3:a6:23:c0:67:e8:a0:9f:26:d3:25:9b:7e:ec:1a:be:
         3e:eb:df:f4:0e:c1:76:64:c1:2b:85:ea:16:61:75:27:91:4a:
         be:ab:3d:1b:ed:82:1f:4e:a9:7d:ae:c4:cd:2a:f0:0a:a0:1b:
         08:85:61:da:19:3c:c9:fa:98:23:a1:e8:29:b3:00:67:5e:78:
         4b:5e:20:29:29:30:04:3b:64:3d:ba:06:19:c1:90:36:f9:7e:
         3e:d4:7f:8a:85:3d:ef:0a:c5:6f:c2:63:24:1a:bc:58:02:0e:
         05:d2:5a:eb:a1:0c:ca:31:11:2e:c7:36:94:00:58:d5:dc:80:
         51:f0:fb:36:10:3d:e4:08:59:0b:a8:54:ca:d5:e2:7b:cd:99:
         89:6c:7b:56:e5:18:c2:cc:c4:57:2c:2c:a0:6a:aa:e0:c5:85:
         09:b2:d8:f4:68:c0:9a:b4:40:40:66:ec:dd:b9:6c:75:06:39:
         55:e3:39:32:31:c5:f7:f8:73:73:3d:3a:9b:d7:f0:98:cd:e9:
         3e:fe:f3:e5:ec:55:41:29:67:65:ab:0a:d4:d7:27:10:17:00:
         da:42:08:dd:90:de:02:f1:2b:a6:5c:65:07:d8:d5:38:34:9b:
         67:b9:03:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKzmB+xomnhi+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJhMGQ4NjItM2QwZS00MTUwLTkwZGUtM2M5NTZjMWI1
MzJkMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
YTg5NzVhMWItYTg2Ni00N2UzLWFjYWMtMTg1NjRhNDhkMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3c/KWmqJzYYwJku9rfpVAjCrVUUqqVFbDxm
nat/LMt0b8ZBWCZpem/etenlBF0zFdK9Z+NQTMSOOcpkvYt0rBLDkZngldeV7NQP
YetHhToZ2ltDHFL2zEWl864BmqjMAzAw/q4Jo2r0w3+nvExIifRHOk2nRID7vT+3
Q4evcuzS+TcYg85rquYsIz7y/hOO+MGIq1xQ57jeiwXv6Ozlb807sOryHOBjR1il
0/4UJTxRdEh0k0WfGsIkKX5n/LIA+baRqF2k80R9V2u9YsiRCI8DFBO1h4cFMB2N
qAtEyWT27e4+WUxocUK5lPBdxm3suV18modCfENGXhQ4uaEHUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQQLoE8WmuYVdZya4RKwo8t3tWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYmEw
ZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1NmMxYjUzMmQvYjQwNWZkNTYtNzIzOC0z
NWUxLWFiNGQtMjU4MTE5ODNjODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGJhMGQ4NjItM2QwZS00MTUwLTkw
ZGUtM2M5NTZjMWI1MzJkL2RiYTBkODYyLTNkMGUtNDE1MC05MGRlLTNjOTU2YzFi
NTMyZC5jcmwwHwYDVR0jBBgwFoAUixpiLfa8wUDAoIW4NK7DDDxt8lswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kYmEwZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1
NmMxYjUzMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqkvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIm+EIoH2hsAoKTv5b+ChTSNbsVs6YjwGfooJ8m0yWbfuwavj7r3/QO
wXZkwSuF6hZhdSeRSr6rPRvtgh9OqX2uxM0q8AqgGwiFYdoZPMn6mCOh6CmzAGde
eEteICkpMAQ7ZD26BhnBkDb5fj7Uf4qFPe8KxW/CYyQavFgCDgXSWuuhDMoxES7H
NpQAWNXcgFHw+zYQPeQIWQuoVMrV4nvNmYlse1blGMLMxFcsLKBqquDFhQmy2PRo
wJq0QEBm7N25bHUGOVXjOTIxxff4c3M9OpvX8JjN6T7+8+XsVUEpZ2WrCtTXJxAX
ANpCCN2Q3gLxK6ZcZQfY1Tg0m2e5Aw0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:50 2026 by rpki-client