Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
File:                     795fa07a-13af-344a-81c5-38585d67c87d.roa (raw, json)
Hash identifier:          S1HV16jeGV85CzbpsEWsgGlxa5OGdVjsik3RcDCIV8c=
Subject key identifier:   3F:09:99:50:1E:8F:E1:65:99:71:6F:0E:BD:19:50:49:C6:D1:A7:71
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F4328584DC29AF051BBCE90470C770500
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     398471
IP address blocks:        157.62.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f0:51:bb:ce:90:47:0c:77:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=1f2c68b5-58e7-4ac7-80fd-b70b63e0d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:04:9b:7a:79:02:c2:30:a3:1f:2e:a8:f4:
                    b1:7d:ea:84:73:b2:38:9e:ca:6b:97:02:34:47:9c:
                    9a:06:1a:3f:0f:1e:be:8c:3d:b9:66:08:7a:1d:3c:
                    d9:88:71:53:68:11:20:63:4d:5c:09:ea:18:8c:ac:
                    15:e0:00:b0:be:91:43:9f:aa:ff:99:cc:dd:94:01:
                    02:36:92:10:b4:ef:59:13:9c:16:86:c5:18:7c:76:
                    12:ed:8d:73:d1:35:52:26:3d:01:87:39:db:db:b1:
                    70:53:de:94:84:0f:80:a3:db:ec:07:c7:b6:4c:cd:
                    f8:c3:a6:50:ae:4b:4c:22:bb:15:04:9c:cc:e3:4c:
                    f0:2c:72:dc:eb:f1:43:8c:72:af:9d:36:0a:09:7a:
                    73:ae:9a:1a:27:89:41:47:87:0a:b1:ac:d2:8f:fb:
                    ea:fc:7b:c5:d5:ab:6b:ff:9d:cf:33:8c:7a:02:d5:
                    eb:b4:14:c2:4b:08:01:bd:b2:1e:fd:65:29:71:74:
                    1f:bd:70:48:70:9a:a8:c6:6d:88:43:ad:62:7a:2d:
                    f9:67:7a:c7:2e:92:76:e2:d6:62:75:2e:60:b2:51:
                    a1:79:00:96:9b:b0:03:ef:ff:fa:9f:74:c0:52:12:
                    80:59:f6:0d:11:94:c9:63:91:10:3c:53:5c:c0:6a:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:99:50:1E:8F:E1:65:99:71:6F:0E:BD:19:50:49:C6:D1:A7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:51:e9:a5:31:fa:93:0c:44:bf:63:8b:52:a5:b8:99:17:
         f8:d4:45:ea:c9:37:29:6e:41:20:51:9c:37:7d:1b:c2:f3:d4:
         f9:ac:e3:72:0a:e5:47:c9:e0:51:5c:c0:49:e2:ce:24:65:6a:
         63:7e:b4:35:bb:d2:35:49:03:6b:f9:b4:5e:95:a3:4e:d1:0d:
         cb:77:04:68:e4:d0:89:64:65:87:10:eb:b1:a8:86:52:3f:78:
         51:08:a7:01:bf:9c:1d:5a:60:6b:e9:07:da:f6:bf:8d:f2:7a:
         b8:9d:e5:de:65:9b:57:32:bb:5e:ae:fa:c0:81:9e:91:5c:e0:
         14:a4:f6:0c:b3:26:b0:8e:3d:1b:dc:13:d3:11:ed:6d:80:ae:
         ca:6c:c9:f2:62:61:d1:57:84:b3:46:94:11:30:6f:93:27:31:
         36:d1:03:1c:ed:b7:3b:80:6d:12:5a:c6:44:96:26:8b:71:02:
         05:10:f8:0f:51:04:60:4c:7c:54:59:bf:da:13:92:61:e5:8d:
         3b:ca:2d:1a:13:9a:ac:4f:19:ca:0a:a7:83:88:e5:be:e2:cf:
         c4:36:3c:d5:d0:1b:41:51:42:56:3d:b0:54:6c:4a:d7:d6:f3:
         56:55:7e:ef:40:a1:26:14:37:c3:6e:4a:5a:b4:72:cb:89:59:
         f2:db:7c:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3CmvBRu86QRwx3BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz
YWExMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
MWYyYzY4YjUtNThlNy00YWM3LTgwZmQtYjcwYjYzZTBkMDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dcEm3p5AsIwox8uqPSxfeqEc7I4nsprlwI0
R5yaBho/Dx6+jD25Zgh6HTzZiHFTaBEgY01cCeoYjKwV4ACwvpFDn6r/mczdlAEC
NpIQtO9ZE5wWhsUYfHYS7Y1z0TVSJj0Bhznb27FwU96UhA+Ao9vsB8e2TM34w6ZQ
rktMIrsVBJzM40zwLHLc6/FDjHKvnTYKCXpzrpoaJ4lBR4cKsazSj/vq/HvF1atr
/53PM4x6AtXrtBTCSwgBvbIe/WUpcXQfvXBIcJqoxm2IQ61iei35Z3rHLpJ24tZi
dS5gslGheQCWm7AD7//6n3TAUhKAWfYNEZTJY5EQPFNcwGpZzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD8JmVAej+FlmXFvDr0ZUEnG0adxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw
ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvNzk1ZmEwN2EtMTNhZi0z
NDRhLTgxYzUtMzg1ODVkNjdjODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk
YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx
M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0
YjRmMTNhYTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFeBR6aUx+pMMRL9ji1KluJkX+NRF6sk3KW5BIFGcN30bwvPU+azjcgrl
R8ngUVzASeLOJGVqY360NbvSNUkDa/m0XpWjTtENy3cEaOTQiWRlhxDrsaiGUj94
UQinAb+cHVpga+kH2va/jfJ6uJ3l3mWbVzK7Xq76wIGekVzgFKT2DLMmsI49G9wT
0xHtbYCuymzJ8mJh0VeEs0aUETBvkycxNtEDHO23O4BtElrGRJYmi3ECBRD4D1EE
YEx8VFm/2hOSYeWNO8otGhOarE8Zygqng4jlvuLPxDY81dAbQVFCVj2wVGxK19bz
VlV+70ChJhQ3w25KWrRyy4lZ8tt8mQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:22:09 2026 by rpki-client