Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa
File:                     1eabd101-4ea2-3e75-be71-85267c567a73.roa (raw, json)
Hash identifier:          WFFAd2QHa8XbkF7sV3MpB1w+V0njwImZ6RsHxIxBii4=
Subject key identifier:   ED:DC:40:36:8B:D6:56:BD:41:87:9B:F4:20:3F:A4:D3:48:1E:31:47
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584E6DD4D78FA01C78C9976C5000
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     3300
IP address blocks:        63.250.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d7:8f:a0:1c:78:c9:97:6c:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=27c4f844-6362-4319-bf13-2f8bc73eaeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:aa:65:fc:41:2b:52:04:5c:b4:86:91:cf:
                    85:64:dc:ce:45:df:69:9e:e0:60:7e:c1:42:8c:eb:
                    92:63:be:cf:f6:fb:67:cf:9f:9c:b0:78:66:c3:a0:
                    fc:f1:37:da:f4:35:ea:a7:b8:85:24:5c:4b:e5:fd:
                    cf:16:43:35:0f:6e:f1:62:ac:c1:67:28:9f:10:d8:
                    4f:ec:41:66:71:88:74:ad:02:b9:06:88:54:5a:c9:
                    cf:f2:8f:21:9b:4e:59:cd:a0:02:d0:44:86:8d:48:
                    6a:f7:e7:e4:a2:bc:09:fb:1f:4b:19:de:88:3f:40:
                    ea:be:80:81:fa:5d:f7:ec:bc:67:0d:45:77:c6:ff:
                    7f:a2:8d:e9:88:28:7e:1e:1a:74:f4:79:57:27:dd:
                    ea:0e:12:e6:18:22:ec:e8:c0:ca:e7:a5:db:2e:67:
                    82:b8:75:56:fa:20:d0:a4:21:22:a4:ab:7d:5d:74:
                    de:47:15:f5:e9:e1:cf:17:80:d5:91:67:09:3e:ef:
                    f0:67:86:13:37:9f:b8:b2:be:fd:59:08:a2:78:ac:
                    28:d1:a6:35:7d:17:2f:3d:05:c7:e3:b2:73:6e:5a:
                    c3:6d:38:85:3e:76:96:a3:cd:38:ed:19:4a:a4:12:
                    af:2c:4a:6f:81:fe:1b:7e:02:f0:2e:2e:c7:3f:d6:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:40:36:8B:D6:56:BD:41:87:9B:F4:20:3F:A4:D3:48:1E:31:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:74:db:69:85:ce:dd:b5:82:58:67:37:41:99:73:ff:80:
         ef:58:5b:c0:aa:7c:ef:bb:57:f6:9f:84:67:50:b5:97:f1:34:
         bf:84:c9:09:e6:a4:3f:54:4c:73:d8:8d:11:d7:f8:d3:9b:13:
         ae:22:59:10:38:11:72:b1:bd:7e:c8:48:37:64:52:b7:88:9e:
         a8:5a:0d:2e:aa:ea:87:c3:ef:10:18:01:69:ba:83:09:1b:c1:
         07:55:a6:d6:a7:23:f5:9f:4e:25:3a:63:db:3f:70:21:c8:c9:
         ae:0d:a3:86:7d:f0:4a:15:ce:5c:51:29:55:a3:79:0d:d6:c8:
         62:01:db:c1:7e:df:67:ac:a7:46:06:d2:d1:8c:fa:87:66:f7:
         61:53:6f:8b:e4:1e:85:76:65:03:d6:c8:47:c9:6a:ed:15:ca:
         54:19:f1:84:43:d0:bc:09:32:17:2b:52:58:65:50:2c:2f:73:
         af:a5:3a:cb:bc:6a:d6:d6:90:d7:e6:28:22:c5:43:e1:83:07:
         2c:8d:80:78:23:02:ff:1c:45:58:93:85:fa:e9:24:19:fe:ec:
         6b:f5:f4:99:88:3b:bf:38:cb:d2:a6:91:81:1c:bb:1e:09:de:
         74:b0:6f:0e:06:6e:5a:34:4e:14:0b:62:0e:f2:76:b5:4b:2e:
         03:18:19:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1NePoBx4yZdsUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2
ZDcxMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
MjdjNGY4NDQtNjM2Mi00MzE5LWJmMTMtMmY4YmM3M2VhZWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmqZfxBK1IEXLSGkc+FZNzORd9pnuBgfsFC
jOuSY77P9vtnz5+csHhmw6D88Tfa9DXqp7iFJFxL5f3PFkM1D27xYqzBZyifENhP
7EFmcYh0rQK5BohUWsnP8o8hm05ZzaAC0ESGjUhq9+fkorwJ+x9LGd6IP0DqvoCB
+l337LxnDUV3xv9/oo3piCh+Hhp09HlXJ93qDhLmGCLs6MDK56XbLmeCuHVW+iDQ
pCEipKt9XXTeRxX16eHPF4DVkWcJPu/wZ4YTN5+4sr79WQiieKwo0aY1fRcvPQXH
47JzblrDbTiFPnaWo8047RlKpBKvLEpvgf4bfgLwLi7HP9ZelQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3cQDaL1la9QYeb9CA/pNNIHjFHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4
NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMWVhYmQxMDEtNGVhMi0z
ZTc1LWJlNzEtODUyNjdjNTY3YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx
NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx
NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx
MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC1dNtphc7dtYJYZzdBmXP/gO9YW8CqfO+7V/afhGdQtZfxNL+EyQnm
pD9UTHPYjRHX+NObE64iWRA4EXKxvX7ISDdkUreInqhaDS6q6ofD7xAYAWm6gwkb
wQdVptanI/WfTiU6Y9s/cCHIya4No4Z98EoVzlxRKVWjeQ3WyGIB28F+32esp0YG
0tGM+odm92FTb4vkHoV2ZQPWyEfJau0VylQZ8YRD0LwJMhcrUlhlUCwvc6+lOsu8
atbWkNfmKCLFQ+GDByyNgHgjAv8cRViThfrpJBn+7Gv19JmIO784y9KmkYEcux4J
3nSwbw4Gblo0ThQLYg7ydrVLLgMYGbo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:58 2026 by rpki-client