Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
File:                     a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa (raw, json)
Hash identifier:          2gnAfZ5pdQepopSmxOHH7FmcWBHQVdnk2Sa5oQWJSSo=
Subject key identifier:   D1:B3:C3:E5:23:D4:02:26:EC:C5:0E:8B:0D:FE:16:A8:69:9D:A9:BB
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584DC5659D0DB1759705A015E780
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     36556
IP address blocks:        66.148.32.0/19 maxlen: 19
                          98.96.128.0/19 maxlen: 19
                          104.151.192.0/19 maxlen: 19
                          170.176.224.0/20 maxlen: 20
                          204.144.160.0/20 maxlen: 20
                          2602:fdfc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9d:0d:b1:75:97:05:a0:15:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=cc83251f-fe34-4dd4-a269-eb10560804c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:87:97:b2:3b:1a:8e:af:cc:62:a7:93:d5:
                    6b:fa:36:c6:09:96:60:47:8f:08:68:da:07:aa:87:
                    c7:5f:47:b2:7a:d2:15:48:47:4b:a1:d7:76:1d:7d:
                    a3:a8:d0:56:68:ea:54:17:6c:be:76:46:25:e0:38:
                    2b:ef:f7:bf:e7:3a:8b:8e:b5:e2:bd:7c:c1:97:6f:
                    8d:ca:3d:f8:d3:f3:3b:b0:eb:35:ea:c3:06:68:7e:
                    fb:6b:19:29:93:50:ff:3e:8d:92:77:7d:6c:af:3d:
                    84:e0:98:90:8a:fb:89:d1:b2:de:79:42:a3:b2:e4:
                    9c:97:3a:68:09:a7:fb:e1:7f:81:1f:3c:d6:a7:5c:
                    34:03:4f:8a:a8:dd:78:2e:18:41:44:29:b6:5e:e9:
                    bd:03:4d:aa:62:73:5d:f9:d3:a9:ff:08:7f:dc:5f:
                    ea:6c:59:31:3d:0a:84:ca:95:07:55:61:7e:56:cd:
                    5d:9c:a1:5a:ef:95:d7:e9:33:7c:39:4c:b5:7e:8a:
                    ca:4a:e1:3a:e1:3b:fd:06:0d:90:41:2a:ca:dd:a7:
                    e2:04:7c:0f:71:4c:fe:11:38:ab:87:75:17:18:06:
                    99:79:b5:b4:ec:fb:61:3b:a1:75:85:19:c0:34:21:
                    83:12:8f:e7:b7:ae:7b:f6:76:f5:c6:0d:cf:a4:0f:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:C3:E5:23:D4:02:26:EC:C5:0E:8B:0D:FE:16:A8:69:9D:A9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.148.32.0/19
                  98.96.128.0/19
                  104.151.192.0/19
                  170.176.224.0/20
                  204.144.160.0/20
                IPv6:
                  2602:fdfc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:3d:f7:9e:33:ad:cc:2d:55:3f:93:a2:75:39:84:0a:7a:
         07:6c:c0:fb:5d:46:f1:40:b6:ad:82:89:aa:fd:c0:f2:96:03:
         cd:f0:39:a6:59:c0:f8:ad:3f:53:96:df:b1:5d:7a:50:7e:e2:
         7b:11:2e:0c:d3:b7:ee:92:48:5a:29:8c:15:d3:59:98:70:3f:
         5e:7a:d9:e3:06:dd:30:0e:5f:58:86:ae:b0:e2:bd:18:3f:7e:
         68:4a:fa:70:e7:8e:fc:96:8a:f4:a5:b1:de:c9:c0:15:59:31:
         69:16:bc:ac:cf:58:09:3f:1f:55:cb:6d:4d:3b:54:a7:cc:52:
         a8:1f:03:ab:d1:1e:55:93:8e:4b:ee:2b:1f:ef:df:05:ef:3e:
         6e:fb:ad:fd:92:30:6d:7e:e1:a7:e2:d1:20:e9:b9:93:1f:52:
         c1:d0:4c:3d:0c:58:fb:59:eb:64:2e:29:4e:5e:59:f3:11:4a:
         a7:f0:84:f3:b0:a8:27:53:9f:e7:c9:2d:99:13:a9:34:02:72:
         48:36:a2:86:34:e8:1d:42:33:a5:d9:d2:9e:92:e2:65:e5:ff:
         00:9d:34:9b:12:1e:76:18:fa:a1:e4:5a:cc:a1:23:d6:b6:fc:
         6e:48:36:71:89:36:9e:b3:16:16:e5:cb:de:5a:37:b8:a7:87:
         cc:c0:a1:cb
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE3FZZ0NsXWXBaAV54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1
N2JiMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
Y2M4MzI1MWYtZmUzNC00ZGQ0LWEyNjktZWIxMDU2MDgwNGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HKHl7I7Go6vzGKnk9Vr+jbGCZZgR48IaNoH
qofHX0eyetIVSEdLodd2HX2jqNBWaOpUF2y+dkYl4Dgr7/e/5zqLjrXivXzBl2+N
yj340/M7sOs16sMGaH77axkpk1D/Po2Sd31srz2E4JiQivuJ0bLeeUKjsuSclzpo
Caf74X+BHzzWp1w0A0+KqN14LhhBRCm2Xum9A02qYnNd+dOp/wh/3F/qbFkxPQqE
ypUHVWF+Vs1dnKFa75XX6TN8OUy1forKSuE64Tv9Bg2QQSrK3afiBHwPcUz+ETir
h3UXGAaZebW07PthO6F1hRnANCGDEo/nt6579nb1xg3PpA9qAwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFNGzw+Uj1AIm7MUOiw3+Fqhpnam7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz
Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvYTg5NmVjZjMtM2RjNy0z
YzYyLWJlODAtZjU5YmQ0MzlkNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4
N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy
NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2
NDVlMjU3YmIuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQFQpQgAwQF
YmCAAwQFaJfAAwQEqrDgAwQEzJCgMA4EAgACMAgDBgQmAv38ADBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7
Hz33njOtzC1VP5OidTmECnoHbMD7XUbxQLatgomq/cDylgPN8DmmWcD4rT9Tlt+x
XXpQfuJ7ES4M07fukkhaKYwV01mYcD9eetnjBt0wDl9Yhq6w4r0YP35oSvpw5478
lor0pbHeycAVWTFpFrysz1gJPx9Vy21NO1SnzFKoHwOr0R5Vk45L7isf798F7z5u
+639kjBtfuGn4tEg6bmTH1LB0Ew9DFj7WetkLilOXlnzEUqn8ITzsKgnU5/nyS2Z
E6k0AnJINqKGNOgdQjOl2dKekuJl5f8AnTSbEh52GPqh5FrMoSPWtvxuSDZxiTae
sxYW5cveWje4p4fMwKHL
-----END CERTIFICATE-----
Generated at Wed May 13 13:39:08 2026 by rpki-client