Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
File:                     c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json)
Hash identifier:          /7CO0wuSfwb+73UJddKZly8D5v2y/UsLKK4IGT6z9Rs=
Subject key identifier:   D1:EF:65:44:5C:D3:DB:7B:95:16:1E:7A:12:05:92:B6:D3:C4:88:F2
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F4328584DA3E563984B1BEA3DF31D8C00
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     5009
IP address blocks:        64.56.0.0/19 maxlen: 24
                          64.237.64.0/19 maxlen: 24
                          66.186.224.0/19 maxlen: 24
                          108.179.160.0/19 maxlen: 24
                          159.48.192.0/19 maxlen: 24
                          160.223.208.0/20 maxlen: 24
                          205.233.40.0/22 maxlen: 24
                          206.124.192.0/19 maxlen: 24
                          206.204.112.0/20 maxlen: 24
                          208.97.32.0/20 maxlen: 24
                          209.62.192.0/19 maxlen: 24
                          209.124.192.0/19 maxlen: 24
                          209.124.224.0/19 maxlen: 24
                          216.115.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:63:98:4b:1b:ea:3d:f3:1d:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=9b89290d-b9ca-4743-8fc9-0dc4ecf765e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:45:a7:71:f6:0c:b6:a4:f4:d2:21:58:d0:
                    0f:f8:5b:d6:bc:04:d8:65:00:25:f3:24:e4:e6:4e:
                    44:74:f8:d1:9e:96:3a:0c:58:de:27:d8:b0:b7:a9:
                    ef:e2:22:58:fe:c4:72:1c:91:da:86:82:f2:41:35:
                    76:55:17:cf:b9:c5:d2:da:ab:e6:89:56:0f:ec:24:
                    56:c6:b7:c9:97:6e:4c:31:ca:4e:ec:8e:78:ee:4f:
                    cc:f2:c0:f1:41:62:d6:21:90:b3:92:52:65:61:31:
                    ea:35:1c:2d:87:be:01:dd:78:bb:78:1e:90:0b:7c:
                    9d:05:41:c2:92:4b:f0:e1:04:89:68:26:67:cc:bf:
                    77:1a:b0:06:10:e1:61:fc:57:6b:5c:70:d3:32:a4:
                    32:c8:d5:14:3e:aa:c0:d8:9b:60:82:42:43:f6:4f:
                    52:3b:a2:0c:c7:df:5f:e9:fc:d6:23:03:a1:63:d6:
                    d9:e7:a2:58:5f:1f:5b:2d:1b:2a:28:64:da:98:15:
                    e0:aa:b1:e3:aa:d3:f6:3a:7c:46:8d:13:bc:25:9a:
                    43:64:7f:85:d3:c9:26:c8:6d:e2:d4:d6:41:dc:29:
                    04:a7:f2:97:db:0d:91:87:8f:c9:c6:bc:6f:ae:31:
                    b5:c9:2d:a1:c4:42:a8:f1:91:bf:37:c6:78:a2:b0:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EF:65:44:5C:D3:DB:7B:95:16:1E:7A:12:05:92:B6:D3:C4:88:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.0.0/19
                  64.237.64.0/19
                  66.186.224.0/19
                  108.179.160.0/19
                  159.48.192.0/19
                  160.223.208.0/20
                  205.233.40.0/22
                  206.124.192.0/19
                  206.204.112.0/20
                  208.97.32.0/20
                  209.62.192.0/19
                  209.124.192.0/18
                  216.115.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:e5:bd:ef:f1:b2:c8:df:39:72:e6:62:c7:40:f3:15:bd:
         ac:0d:4f:6b:9a:a8:05:5f:d2:fe:9d:eb:92:75:57:02:67:7a:
         de:cb:6f:2f:31:d2:58:0b:41:f4:f1:6f:5b:e4:eb:87:db:df:
         18:cb:5f:25:b1:19:7f:7d:b7:d3:48:19:3a:b9:8e:5c:fa:af:
         98:ce:b6:3a:61:1f:23:38:44:f1:d7:8c:ef:9b:3f:5b:04:a9:
         6f:c3:6c:df:27:9f:09:e7:83:3b:34:60:78:ed:94:49:10:91:
         ce:72:8d:24:2f:cb:c7:08:a1:60:fb:17:d5:0c:6e:f3:d4:f6:
         b9:c1:62:98:e1:d7:91:a3:46:bf:35:b2:ad:6a:f3:9a:3e:85:
         e2:44:96:91:e6:74:8f:c9:68:16:1e:a4:bb:81:f7:1b:bb:28:
         c1:62:70:bc:ac:71:24:f2:63:6c:71:75:8d:fd:0c:79:8a:92:
         c4:0d:08:ce:a4:d2:4d:fd:87:ed:a6:ab:0d:12:c2:87:bc:b5:
         ce:2c:de:26:a6:97:ed:4c:4e:d0:a9:72:d9:09:44:12:ba:47:
         04:16:30:68:3f:19:c6:50:6d:1f:c0:ab:f1:72:e4:ff:72:8a:
         62:e4:4d:a4:d9:65:13:bd:56:55:19:f6:e7:17:5c:b0:66:ef:
         c7:eb:d0:5f
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE2j5WOYSxvqPfMdjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy
OTk4MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
OWI4OTI5MGQtYjljYS00NzQzLThmYzktMGRjNGVjZjc2NWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDBFp3H2DLak9NIhWNAP+FvWvATYZQAl8yTk
5k5EdPjRnpY6DFjeJ9iwt6nv4iJY/sRyHJHahoLyQTV2VRfPucXS2qvmiVYP7CRW
xrfJl25MMcpO7I547k/M8sDxQWLWIZCzklJlYTHqNRwth74B3Xi7eB6QC3ydBUHC
kkvw4QSJaCZnzL93GrAGEOFh/FdrXHDTMqQyyNUUPqrA2JtggkJD9k9SO6IMx99f
6fzWIwOhY9bZ56JYXx9bLRsqKGTamBXgqrHjqtP2OnxGjRO8JZpDZH+F08kmyG3i
1NZB3CkEp/KX2w2Rh4/JxrxvrjG1yS2hxEKo8ZG/N8Z4orDHyQIDAQABo4IDnTCC
A5kwHQYDVR0OBBYEFNHvZURc09t7lRYeehIFkrbTxIjyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3
MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvYzVjMWFiOWEtZjk5ZC0z
Yjc1LWI3ZjQtOThmYmVmMzE1ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl
MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2
Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh
MTJkNjI5OTguY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQFQDgAAwQF
QO1AAwQFQrrgAwQFbLOgAwQFnzDAAwQEoN/QAwQCzekoAwQFznzAAwQEzsxwAwQE
0GEgAwQF0T7AAwQG0XzAAwQF2HOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFfA5b3v8bLI3zly5mLHQPMV
vawNT2uaqAVf0v6d65J1VwJnet7Lby8x0lgLQfTxb1vk64fb3xjLXyWxGX99t9NI
GTq5jlz6r5jOtjphHyM4RPHXjO+bP1sEqW/DbN8nnwnngzs0YHjtlEkQkc5yjSQv
y8cIoWD7F9UMbvPU9rnBYpjh15GjRr81sq1q85o+heJElpHmdI/JaBYepLuB9xu7
KMFicLyscSTyY2xxdY39DHmKksQNCM6k0k39h+2mqw0Swoe8tc4s3iaml+1MTtCp
ctkJRBK6RwQWMGg/GcZQbR/Aq/Fy5P9yimLkTaTZZRO9VlUZ9ucXXLBm78fr0F8=
-----END CERTIFICATE-----
Generated at Wed May 13 14:49:17 2026 by rpki-client