Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
File:                     2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa (raw, json)
Hash identifier:          m46asYQav+nik8YJEZw512bGpoQpYbL7sGTM+DGQE5w=
Subject key identifier:   E6:EF:D0:17:62:A3:D9:AD:FE:FD:5A:3C:5E:37:30:60:A0:1D:D3:AE
Certificate issuer:       /CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Certificate serial:       010D0C9F4328584E7E94F1BCD4452F78ABC03400
Authority key identifier: 38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     14503
IP address blocks:        161.129.22.0/24 maxlen: 24
                          2620:13f:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f1:bc:d4:45:2f:78:ab:c0:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=23d97a99-a19a-43c9-9d35-b248ba262153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:ea:c7:2e:e2:f7:90:a7:90:89:72:85:27:
                    78:6f:68:1f:df:56:76:de:f3:e0:a3:b9:da:9a:d4:
                    d7:b3:9b:b7:01:e7:74:f8:b5:19:96:ae:cf:cc:f6:
                    e4:17:8b:d4:8f:83:fe:92:90:bd:ab:61:a9:af:3a:
                    ae:5d:ec:24:38:3f:5f:55:cc:18:d3:20:b6:b6:51:
                    9b:60:be:59:8c:da:09:9f:0e:85:67:13:1b:8b:50:
                    13:b9:cd:09:b8:69:dd:3a:69:f7:c4:03:c7:e6:ee:
                    f1:54:60:32:d8:c8:c9:bf:cb:1d:7c:38:06:cd:c5:
                    d4:d2:11:6d:a1:8f:06:5f:6c:61:a7:ca:11:43:bd:
                    da:af:cb:36:de:53:ed:31:3c:7d:36:a0:df:2c:cf:
                    01:f1:a3:ba:31:1e:87:fe:25:62:71:44:00:35:16:
                    21:43:f3:cc:d4:4c:c5:34:a4:02:ab:75:44:da:fe:
                    6e:09:97:a2:06:5a:2e:4d:31:9c:b3:5d:95:85:ae:
                    fd:c8:9b:9a:bb:79:1d:5f:28:ac:f6:e6:05:62:1b:
                    6f:f9:ce:6f:5d:1d:fa:c9:9b:30:56:a8:bd:83:53:
                    84:7a:66:7a:39:a3:2b:8b:ef:35:13:0d:cc:8e:38:
                    20:71:36:3b:10:c4:aa:ed:cf:6f:16:50:69:ba:66:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:D0:17:62:A3:D9:AD:FE:FD:5A:3C:5E:37:30:60:A0:1D:D3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.22.0/24
                IPv6:
                  2620:13f:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:73:48:8b:3f:43:23:6b:fc:9a:b9:03:d7:14:58:e4:b7:
         b9:5b:28:80:6b:04:f6:65:01:73:a0:e3:d1:67:2f:7c:05:61:
         4a:82:42:d3:6a:a7:6c:4d:8c:f2:10:fb:a1:32:25:4c:c3:3b:
         c7:ca:07:e8:3a:a9:1d:06:c0:9e:2a:c9:9a:8b:8d:34:03:76:
         be:8d:d9:9d:93:78:79:f4:9e:42:79:68:74:0f:82:61:f3:c8:
         fc:41:12:5d:0f:31:36:14:a2:37:4d:cf:19:3a:84:7a:ce:a3:
         ff:fd:f3:91:13:7d:43:07:8d:67:2a:45:9a:3b:72:ed:3e:d6:
         f9:46:49:86:e3:bd:82:34:9c:1d:e1:a2:4b:66:4a:86:b2:14:
         f9:89:99:73:0f:af:00:4c:72:2e:fe:f5:0c:f4:08:58:12:9e:
         1b:f4:dd:84:56:55:05:ce:8a:21:ee:36:af:9e:96:e9:e1:ef:
         08:58:65:20:34:d1:59:1f:76:7a:70:d7:96:68:d8:17:22:9f:
         a0:0c:92:22:18:2a:25:1c:78:13:01:a2:9b:ea:c3:b3:7e:44:
         26:4a:47:90:ed:62:46:02:1a:4e:fd:8a:8f:4a:5d:6e:b6:01:
         58:a5:2f:c8:26:e2:20:12:9a:21:72:ab:f2:e0:5c:b4:64:9e:
         f2:6f:fd:4a
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5+lPG81EUveKvANAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjAwZWZiNWQtZjZlMS00OWJmLWE0ZTMtZWE1YjRjNzVi
OWZhMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
MjNkOTdhOTktYTE5YS00M2M5LTlkMzUtYjI0OGJhMjYyMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/zqxy7i95CnkIlyhSd4b2gf31Z23vPgo7na
mtTXs5u3Aed0+LUZlq7PzPbkF4vUj4P+kpC9q2GprzquXewkOD9fVcwY0yC2tlGb
YL5ZjNoJnw6FZxMbi1ATuc0JuGndOmn3xAPH5u7xVGAy2MjJv8sdfDgGzcXU0hFt
oY8GX2xhp8oRQ73ar8s23lPtMTx9NqDfLM8B8aO6MR6H/iVicUQANRYhQ/PM1EzF
NKQCq3VE2v5uCZeiBlouTTGcs12Vha79yJuau3kdXyis9uYFYhtv+c5vXR36yZsw
Vqi9g1OEemZ6OaMri+81Ew3MjjggcTY7EMSq7c9vFlBpumYTqQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFObv0Bdio9mt/v1aPF43MGCgHdOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mMDBl
ZmI1ZC1mNmUxLTQ5YmYtYTRlMy1lYTViNGM3NWI5ZmEvMmNkZTcwNjQtOWIzMS0z
YWVkLThjZjMtMjNjZjFhZTVhNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjAwZWZiNWQtZjZlMS00OWJmLWE0
ZTMtZWE1YjRjNzViOWZhL2YwMGVmYjVkLWY2ZTEtNDliZi1hNGUzLWVhNWI0Yzc1
YjlmYS5jcmwwHwYDVR0jBBgwFoAUOI3iniaphZk3ew8TcIY5CKT4NhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mMDBlZmI1ZC1mNmUxLTQ5YmYtYTRlMy1lYTVi
NGM3NWI5ZmEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAoYEWMA8E
AgACMAkDBwQmIAE/wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASiZzSIs/QyNr/Jq5A9cUWOS3uVsogGsE
9mUBc6Dj0WcvfAVhSoJC02qnbE2M8hD7oTIlTMM7x8oH6DqpHQbAnirJmouNNAN2
vo3ZnZN4efSeQnlodA+CYfPI/EESXQ8xNhSiN03PGTqEes6j//3zkRN9QweNZypF
mjty7T7W+UZJhuO9gjScHeGiS2ZKhrIU+YmZcw+vAExyLv71DPQIWBKeG/TdhFZV
Bc6KIe42r56W6eHvCFhlIDTRWR92enDXlmjYFyKfoAySIhgqJRx4EwGim+rDs35E
JkpHkO1iRgIaTv2Kj0pdbrYBWKUvyCbiIBKaIXKr8uBctGSe8m/9Sg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:11 2026 by rpki-client