Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/89c0bc2c-86e6-3b12-aaec-afa649779798.roa
File:                     89c0bc2c-86e6-3b12-aaec-afa649779798.roa (raw, json)
Hash identifier:          YmkLYt/iFEk93cqPuryS7pSam1qjCUYcB4i2WjV5De8=
Subject key identifier:   29:19:CA:C6:C6:66:9D:E9:8B:16:64:41:BF:CD:CB:E3:31:7C:D0:B2
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F30525FD321894B9AEFEE69C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/89c0bc2c-86e6-3b12-aaec-afa649779798.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        67.218.96.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:5f:d3:21:89:4b:9a:ef:ee:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=4c670585-638a-42c8-b144-9670726d4b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:e1:be:f1:74:08:41:8f:54:fa:05:29:d4:
                    f5:78:ee:4f:ab:8f:83:88:9c:fd:79:ef:e6:d2:1e:
                    90:d0:86:a8:07:d7:2a:c4:66:06:3d:6b:35:fa:a9:
                    ad:72:03:aa:82:37:e3:dc:da:1a:d0:48:33:f8:e0:
                    68:9f:51:63:77:ec:64:57:a5:84:cc:97:2d:3f:38:
                    c4:f1:92:ab:d3:42:7d:1e:c2:18:e6:35:38:82:4c:
                    a7:2a:43:3e:97:3b:51:da:66:c8:79:f8:cb:69:f1:
                    a0:25:67:13:30:00:ec:75:ff:7e:8a:55:44:05:b8:
                    43:ee:61:b8:82:52:f0:e0:0d:f0:72:2f:3f:9d:6e:
                    5b:f9:2d:1b:97:ce:ac:92:0b:9d:d1:9b:a1:93:d5:
                    99:71:6f:fb:aa:bc:4e:4c:64:e7:22:aa:87:03:46:
                    d3:fb:af:18:56:16:0f:54:46:c1:3d:73:cd:bb:f6:
                    05:90:61:93:ef:18:b9:1c:1d:6a:2e:01:9a:17:33:
                    2f:4e:14:49:86:6d:90:39:34:3d:97:4f:81:e3:40:
                    7b:9d:37:5b:d0:c1:1e:28:77:2c:6b:29:e9:b1:8e:
                    de:c4:24:9f:bc:a1:0c:20:90:f6:64:b5:eb:b8:68:
                    76:e1:f7:ba:e9:16:1d:96:d2:54:7d:68:85:84:15:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:CA:C6:C6:66:9D:E9:8B:16:64:41:BF:CD:CB:E3:31:7C:D0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/89c0bc2c-86e6-3b12-aaec-afa649779798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:82:61:51:3e:39:d6:ce:4d:48:c0:c9:ed:ae:66:65:6c:
         03:a7:5c:62:37:63:3b:ea:fb:a9:60:e2:27:0b:ac:0f:ec:fd:
         dd:f6:44:04:fd:6f:8b:9e:57:3e:6e:bf:7d:b5:4c:57:f9:7a:
         6b:b9:d3:af:b6:4c:68:51:99:ea:a0:49:28:80:34:a0:bb:ee:
         78:39:2f:d4:71:b9:22:16:ea:cb:2d:a6:a1:8c:cd:e2:85:38:
         f6:00:3f:8f:f2:51:2c:f5:bd:66:e5:b9:a5:cb:0c:be:d6:dc:
         ff:f0:bd:12:9d:89:5d:b7:ad:fb:60:6b:90:e2:89:7c:22:d7:
         76:5a:be:9a:65:b8:b1:2e:44:4c:b3:79:c8:05:b0:ff:95:a6:
         04:f4:f6:55:f0:cc:6d:02:78:57:ce:57:73:b2:88:c7:66:44:
         cc:5c:0e:24:d5:56:3f:73:91:22:3d:29:95:a8:44:0b:62:62:
         5c:b3:e2:16:81:15:99:89:bf:46:d0:7a:bf:a2:65:d0:7d:a4:
         d8:8f:d4:a4:15:ee:17:ca:5e:4f:e2:f6:14:75:74:05:6e:b1:
         17:db:c8:6b:27:1a:e4:2d:04:4b:d5:14:a9:79:23:12:71:db:
         7f:e5:e2:c9:55:f8:6d:6d:08:ce:99:e1:d1:a5:12:3a:28:0d:
         62:f1:e7:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUl/TIYlLmu/uacAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
NGM2NzA1ODUtNjM4YS00MmM4LWIxNDQtOTY3MDcyNmQ0YjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz7hvvF0CEGPVPoFKdT1eO5Pq4+DiJz9ee/m
0h6Q0IaoB9cqxGYGPWs1+qmtcgOqgjfj3Noa0Egz+OBon1Fjd+xkV6WEzJctPzjE
8ZKr00J9HsIY5jU4gkynKkM+lztR2mbIefjLafGgJWcTMADsdf9+ilVEBbhD7mG4
glLw4A3wci8/nW5b+S0bl86skgud0Zuhk9WZcW/7qrxOTGTnIqqHA0bT+68YVhYP
VEbBPXPNu/YFkGGT7xi5HB1qLgGaFzMvThRJhm2QOTQ9l0+B40B7nTdb0MEeKHcs
aynpsY7exCSfvKEMIJD2ZLXruGh24fe66RYdltJUfWiFhBXF2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkZysbGZp3pixZkQb/Ny+MxfNCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODljMGJjMmMtODZlNi0z
YjEyLWFhZWMtYWZhNjQ5Nzc5Nzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9pgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn+gmFRPjnWzk1IwMntrmZlbAOnXGI3Yzvq+6lg4icLrA/s/d32RAT9
b4ueVz5uv321TFf5emu506+2TGhRmeqgSSiANKC77ng5L9RxuSIW6sstpqGMzeKF
OPYAP4/yUSz1vWbluaXLDL7W3P/wvRKdiV23rftga5DiiXwi13ZavppluLEuREyz
ecgFsP+VpgT09lXwzG0CeFfOV3OyiMdmRMxcDiTVVj9zkSI9KZWoRAtiYlyz4haB
FZmJv0bQer+iZdB9pNiP1KQV7hfKXk/i9hR1dAVusRfbyGsnGuQtBEvVFKl5IxJx
23/l4slV+G1tCM6Z4dGlEjooDWLx568=
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:17:00 2026 by rpki-client