Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          SeetSBJSElbdqd/IDX19c/++RE6ojitzjlRH+B3JDXY=
Subject key identifier:   3B:F8:7B:F9:DF:E4:0C:B5:1A:82:D2:75:52:0C:99:A9:C7:B9:F8:B3
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584F3CE2AC3F3F65B6B4D0C218C0
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ac:3f:3f:65:b6:b4:d0:c2:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=e1f51b80-bc19-4823-bc42-cdd691e8df02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:50:be:ac:49:e5:99:52:f0:61:73:77:e8:
                    d2:44:3d:4a:5b:41:50:12:68:57:a9:8d:aa:68:59:
                    fd:25:66:36:20:75:0d:df:e4:e0:00:4a:00:85:59:
                    a6:05:0b:9a:6e:b4:1c:28:fd:bb:65:71:0f:78:2a:
                    59:e3:0e:6f:c5:c1:b9:2f:77:dc:02:e2:28:f6:24:
                    b4:62:b3:94:b9:08:e9:0d:e7:f6:88:70:fd:80:15:
                    f7:30:a1:33:85:87:09:9a:3c:b4:3f:2c:31:ad:19:
                    59:2f:a7:42:2b:07:49:90:20:e2:96:06:3b:c8:9c:
                    74:bc:11:8d:86:be:e2:ad:0b:43:20:a2:b5:af:3e:
                    43:fb:da:3b:de:18:7a:44:4b:c6:c2:b3:bf:87:29:
                    5a:93:12:99:54:c1:f6:65:34:ce:ec:61:f2:25:e7:
                    99:6f:56:fb:1c:4b:25:80:c8:df:cb:9a:44:7c:22:
                    5e:ee:56:e5:29:35:9e:8a:4c:7f:20:ef:10:ad:58:
                    e6:01:f6:03:b2:53:4d:1d:cd:54:06:af:53:d1:9b:
                    86:72:b4:a8:6a:a8:29:26:16:cd:f8:13:87:45:74:
                    d3:6e:93:8d:3a:47:40:b8:55:c1:5b:93:0d:12:81:
                    cd:50:c0:da:4f:3c:cf:88:bc:98:45:de:eb:8e:97:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:7B:F9:DF:E4:0C:B5:1A:82:D2:75:52:0C:99:A9:C7:B9:F8:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:ec:4c:f1:44:07:a2:5a:74:a5:c8:72:93:2b:d9:a1:b0:
         6b:15:dd:3e:90:dc:43:22:6f:5e:fa:93:b7:5e:9c:86:8b:30:
         02:17:9d:f0:15:e8:b8:e2:ce:bb:1b:29:16:a4:4e:9a:ff:1f:
         60:7f:cd:70:2f:eb:51:36:17:57:b5:1a:3b:2a:5e:19:0e:d4:
         56:fe:3b:59:87:8b:df:16:6d:9e:e4:df:6b:a9:91:d4:d8:24:
         b6:d6:0f:1c:0d:b2:a7:74:ff:d3:5f:b1:af:56:fd:b2:12:a1:
         71:94:0f:91:62:27:09:2d:13:c5:9e:05:94:32:dd:67:43:22:
         a6:bd:b9:d7:42:3d:6b:48:b6:44:6c:4d:1d:49:a3:67:54:80:
         21:66:55:94:82:27:51:92:24:8a:c5:57:8e:7d:6f:26:0c:4b:
         7b:97:c8:3f:a6:ec:03:22:e7:24:39:5b:53:b0:05:99:d6:98:
         eb:dd:a0:89:42:f6:43:5b:ab:69:7f:7b:2d:6e:31:51:5b:32:
         87:eb:f3:66:79:aa:70:e5:68:03:d9:ec:81:0a:21:10:3f:d0:
         15:4d:b1:b2:99:b1:91:66:bd:bc:61:40:29:d3:4a:41:ba:29:
         e5:78:9c:89:92:be:45:ab:25:44:f3:6f:ee:71:5d:5d:8e:fd:
         59:f9:ae:a8
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE884qw/P2W2tNDCGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDc0NmE5MmQtNWY2OS00MjY0LTg2M2YtODEyOThhM2Q5
M2VkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZTFmNTFiODAtYmMxOS00ODIzLWJjNDItY2RkNjkxZThkZjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij1QvqxJ5ZlS8GFzd+jSRD1KW0FQEmhXqY2q
aFn9JWY2IHUN3+TgAEoAhVmmBQuabrQcKP27ZXEPeCpZ4w5vxcG5L3fcAuIo9iS0
YrOUuQjpDef2iHD9gBX3MKEzhYcJmjy0PywxrRlZL6dCKwdJkCDilgY7yJx0vBGN
hr7irQtDIKK1rz5D+9o73hh6REvGwrO/hylakxKZVMH2ZTTO7GHyJeeZb1b7HEsl
gMjfy5pEfCJe7lblKTWeikx/IO8QrVjmAfYDslNNHc1UBq9T0ZuGcrSoaqgpJhbN
+BOHRXTTbpONOkdAuFXBW5MNEoHNUMDaTzzPiLyYRd7rjpeZzwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFDv4e/nf5Ay1GoLSdVIMmanHufizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2
YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEzZDkzZWQvNzAzZjVmMzktNGNhMS0z
ODQ0LWE0NzUtNzA4ZTUzZjE0ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc0NmE5MmQtNWY2OS00MjY0LTg2
M2YtODEyOThhM2Q5M2VkLzQ3NDZhOTJkLTVmNjktNDI2NC04NjNmLTgxMjk4YTNk
OTNlZC5jcmwwHwYDVR0jBBgwFoAUgW9dnFJE1xApxoveK2ZyuqaaHnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5
OGEzZDkzZWQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCSC6AAwQC
TKTAAwQBaI8KMA0EAgACMAcDBQAmBW+AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACKj7EzxRAeiWnSlyHKT
K9mhsGsV3T6Q3EMib176k7denIaLMAIXnfAV6LjizrsbKRakTpr/H2B/zXAv61E2
F1e1GjsqXhkO1Fb+O1mHi98WbZ7k32upkdTYJLbWDxwNsqd0/9Nfsa9W/bISoXGU
D5FiJwktE8WeBZQy3WdDIqa9uddCPWtItkRsTR1Jo2dUgCFmVZSCJ1GSJIrFV459
byYMS3uXyD+m7AMi5yQ5W1OwBZnWmOvdoIlC9kNbq2l/ey1uMVFbMofr82Z5qnDl
aAPZ7IEKIRA/0BVNsbKZsZFmvbxhQCnTSkG6KeV4nImSvkWrJUTzb+5xXV2O/Vn5
rqg=
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:42:46 2026 by rpki-client