Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5d2104a1-78cb-3e86-a25a-ac8d4ffbb8d6.roa
File:                     5d2104a1-78cb-3e86-a25a-ac8d4ffbb8d6.roa (raw, json)
Hash identifier:          RlBuPR44kwWDynQVWCXUzSeM9abrXq1n3lQBMQKF+zk=
Subject key identifier:   B9:B7:60:88:18:73:2E:55:68:B0:76:83:BA:40:3A:3C:D9:15:D2:20
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DB4A5B047AA91DD1D56E7B300
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5d2104a1-78cb-3e86-a25a-ac8d4ffbb8d6.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     5650
IP address blocks:        137.175.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b0:47:aa:91:dd:1d:56:e7:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=15258c0e-68e2-463e-95f5-eb44a753e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:cb:e3:36:f0:1c:8b:ea:85:cf:ff:15:6d:
                    3b:21:0c:9c:a2:3d:43:af:8f:0e:81:56:17:5d:3f:
                    fa:37:d6:4e:bd:c1:4e:d0:c3:e1:27:ab:56:25:b4:
                    e7:7e:39:d2:0b:a3:25:5d:80:f4:9a:f1:b5:df:bd:
                    ef:56:b5:94:fa:8c:d8:6d:1b:19:b6:18:9b:8d:de:
                    ec:b5:40:8d:1f:bd:3f:b3:17:87:c6:54:a9:59:f6:
                    66:ce:63:86:79:42:03:69:43:d4:3b:05:d8:cd:3b:
                    0f:8c:45:ab:55:08:2e:44:40:4d:88:e1:fd:55:a3:
                    61:28:79:d6:8e:be:97:fa:dd:f8:fc:4e:8b:ed:bd:
                    ed:d5:39:3f:b6:e6:5b:e7:66:f9:86:5d:5b:58:e8:
                    54:7d:2e:f9:04:bc:17:63:5b:20:b3:ac:bc:fd:29:
                    60:4e:fe:89:7a:5a:6e:51:2f:b7:a8:2c:ab:7c:aa:
                    32:46:d0:7a:1c:fe:1a:56:2f:25:63:e6:86:43:89:
                    43:a0:62:61:49:68:72:13:84:13:38:5e:10:99:ae:
                    be:f0:b1:6d:58:8e:4f:d8:01:bc:26:86:f0:05:0c:
                    af:75:7b:8a:64:9c:4c:ee:e5:e2:76:72:f0:9a:cf:
                    74:aa:85:29:4a:dc:ae:4c:c8:79:06:a7:e5:e7:c8:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:60:88:18:73:2E:55:68:B0:76:83:BA:40:3A:3C:D9:15:D2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5d2104a1-78cb-3e86-a25a-ac8d4ffbb8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:da:a1:60:24:17:d8:88:b5:23:ec:88:66:b1:b6:34:42:
         66:2b:3a:4c:d6:86:63:e9:63:90:64:b5:70:dc:a1:63:f7:f6:
         0c:a1:b1:43:ed:3e:16:6c:a8:5e:55:ac:e7:f2:04:45:d9:49:
         ac:41:2e:c0:86:66:53:3c:a1:e3:1a:ad:e3:ce:48:dd:e0:69:
         0e:76:79:24:2d:ce:00:7c:6e:ce:10:52:f6:ce:59:32:c5:11:
         54:b5:a2:ef:31:0d:45:36:3e:e0:1d:ee:8d:0e:20:79:db:f8:
         d6:bd:2e:97:37:48:9d:8e:0e:ad:b0:3f:f1:22:71:85:7c:38:
         a7:1f:6d:80:3f:37:b2:76:13:bc:bf:9b:f1:aa:e4:b4:09:d5:
         b3:6b:cf:2f:1c:b7:2e:7c:35:85:49:8a:1f:69:58:86:ec:01:
         40:a3:51:4d:7e:70:92:af:81:bf:40:7b:31:65:fd:44:ae:97:
         c9:d7:50:29:0b:59:2c:16:43:65:5f:e8:74:f7:6b:a3:8d:ee:
         38:86:34:94:39:6a:bc:9c:13:37:e4:e5:de:fd:95:28:12:b2:
         78:79:3d:13:ea:0f:e8:22:6c:b6:19:4a:65:cd:d9:a1:e5:1e:
         b9:35:32:e8:98:db:3f:40:8c:b8:47:f4:0f:cb:2e:8e:f7:07:
         be:fb:00:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pbBHqpHdHVbnswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MTUyNThjMGUtNjhlMi00NjNlLTk1ZjUtZWI0NGE3NTNlMWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxfL4zbwHIvqhc//FW07IQycoj1Dr48OgVYX
XT/6N9ZOvcFO0MPhJ6tWJbTnfjnSC6MlXYD0mvG1373vVrWU+ozYbRsZthibjd7s
tUCNH70/sxeHxlSpWfZmzmOGeUIDaUPUOwXYzTsPjEWrVQguREBNiOH9VaNhKHnW
jr6X+t34/E6L7b3t1Tk/tuZb52b5hl1bWOhUfS75BLwXY1sgs6y8/SlgTv6Jelpu
US+3qCyrfKoyRtB6HP4aVi8lY+aGQ4lDoGJhSWhyE4QTOF4Qma6+8LFtWI5P2AG8
JobwBQyvdXuKZJxM7uXidnLwms90qoUpStyuTMh5Bqfl58i2swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLm3YIgYcy5VaLB2g7pAOjzZFdIgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWQyMTA0YTEtNzhjYi0z
ZTg2LWEyNWEtYWM4ZDRmZmJiOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAia84MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG/2qFgJBfYiLUj7IhmsbY0QmYrOkzWhmPpY5BktXDcoWP39gyhsUPt
PhZsqF5VrOfyBEXZSaxBLsCGZlM8oeMarePOSN3gaQ52eSQtzgB8bs4QUvbOWTLF
EVS1ou8xDUU2PuAd7o0OIHnb+Na9Lpc3SJ2ODq2wP/EicYV8OKcfbYA/N7J2E7y/
m/Gq5LQJ1bNrzy8cty58NYVJih9pWIbsAUCjUU1+cJKvgb9AezFl/USul8nXUCkL
WSwWQ2Vf6HT3a6ON7jiGNJQ5arycEzfk5d79lSgSsnh5PRPqD+gibLYZSmXN2aHl
Hrk1MuiY2z9AjLhH9A/LLo73B777AAA=
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:06 2026 by rpki-client