Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa
File:                     b706d41a-c66e-3f9f-98db-035b0a62613b.roa (raw, json)
Hash identifier:          vQUjfcc7Z6EfC0x5yU8H6eEE/H2Ds6kAPohLZ1GYWX8=
Subject key identifier:   BA:33:81:5E:19:06:73:4A:71:42:CE:F5:B2:D1:8B:C5:01:40:A2:29
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E98F0CA814D98F3B550062000
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa
Signing time:             Thu 23 Jul 2026 19:36:33 +0000
ROA not before:           Thu 23 Jul 2026 19:36:33 +0000
ROA not after:            Wed 21 Oct 2026 19:36:33 +0000
asID:                     54847
IP address blocks:        208.98.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:f0:ca:81:4d:98:f3:b5:50:06:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jul 23 19:36:33 2026 GMT
            Not After : Oct 21 19:36:33 2026 GMT
        Subject: CN=1ae9ea13-5b4e-49c7-bba6-857effc6e67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:db:e2:ea:d0:cb:2c:47:c7:5a:68:1f:d5:
                    84:07:69:b9:5b:c1:7e:35:1e:6b:12:12:7c:30:bf:
                    60:88:e2:e4:92:df:b7:2b:9e:de:68:4d:54:4c:18:
                    9f:7c:d0:04:f6:38:fb:6a:79:f7:07:42:70:78:d4:
                    a9:42:56:e3:7d:bc:e4:48:82:2a:6b:bc:c7:96:b9:
                    9b:47:78:d6:1b:78:40:b6:36:e5:00:60:45:db:08:
                    5a:05:12:25:64:07:1d:72:38:4c:45:f3:9c:71:81:
                    ca:1e:3c:25:7a:53:52:41:55:c4:3a:55:97:c7:02:
                    ef:50:d1:03:a3:5a:00:d1:9a:e8:ff:64:36:df:40:
                    94:fc:bd:de:a0:a3:3b:e5:a7:23:e5:7e:c1:88:7a:
                    83:81:48:ef:0d:cc:bf:55:60:fd:d1:ae:70:ad:1f:
                    d7:65:65:32:14:bf:45:17:e1:9c:bc:ef:c2:7e:1a:
                    5e:5e:f3:3a:5c:8c:45:d8:7b:ef:01:e3:63:3b:1c:
                    d0:1c:13:25:09:b4:4e:98:32:fa:95:c1:50:d9:ae:
                    ba:a0:fa:16:a8:b2:37:4f:f6:79:c4:40:3a:57:18:
                    bc:b9:fb:6e:bb:fe:85:85:c3:e3:c8:6f:96:44:4b:
                    83:e0:fd:b1:ec:23:c7:6d:5b:cf:fd:f6:86:27:6e:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:33:81:5E:19:06:73:4A:71:42:CE:F5:B2:D1:8B:C5:01:40:A2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.98.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:21:10:01:2d:75:8e:8b:95:06:12:38:db:e2:68:cb:7a:47:
         cc:0f:aa:04:a7:ce:27:3d:bd:bc:6a:e6:ea:17:22:21:1a:e1:
         1a:9b:aa:cc:12:c3:f5:5d:6f:f5:9a:d1:8a:d4:c1:49:52:1e:
         21:b9:4e:18:20:4b:9d:84:13:b7:25:27:1b:65:6c:97:44:56:
         fd:fe:6d:41:5e:49:a5:36:54:93:15:0f:28:11:b6:cc:ad:2e:
         52:15:5c:70:b1:41:78:a7:97:b5:5c:b1:ce:61:ec:79:75:cf:
         4d:ec:09:0d:ac:2b:62:c8:28:17:06:f0:62:3f:53:82:c8:40:
         cd:05:97:39:c7:89:d1:2a:e6:14:2c:18:09:e3:ec:d8:0d:74:
         14:c0:e4:f0:9e:90:52:3a:58:06:f1:5c:32:5e:44:df:b1:2b:
         dd:42:98:48:65:72:eb:ff:23:ec:c0:48:fa:4a:19:51:a1:e4:
         cf:81:ec:86:66:67:cf:00:da:a1:98:62:31:77:43:cd:79:ce:
         b3:e9:c3:6a:7d:c3:0c:ed:8c:f4:52:c6:be:ac:92:6c:67:bf:
         46:63:3f:35:78:f6:5f:50:bc:78:cd:2b:88:d7:59:5f:e7:ff:
         5d:97:8d:c2:4f:d7:ee:77:15:6f:0e:a0:65:64:a4:a0:52:f1:
         88:b3:4f:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Y8MqBTZjztVAGIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3
ZmU0MB4XDTI2MDcyMzE5MzYzM1oXDTI2MTAyMTE5MzYzM1owLzEtMCsGA1UEAxMk
MWFlOWVhMTMtNWI0ZS00OWM3LWJiYTYtODU3ZWZmYzZlNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAjb4urQyyxHx1poH9WEB2m5W8F+NR5rEhJ8
ML9giOLkkt+3K57eaE1UTBiffNAE9jj7ann3B0JweNSpQlbjfbzkSIIqa7zHlrmb
R3jWG3hAtjblAGBF2whaBRIlZAcdcjhMRfOccYHKHjwlelNSQVXEOlWXxwLvUNED
o1oA0Zro/2Q230CU/L3eoKM75acj5X7BiHqDgUjvDcy/VWD90a5wrR/XZWUyFL9F
F+GcvO/CfhpeXvM6XIxF2HvvAeNjOxzQHBMlCbROmDL6lcFQ2a66oPoWqLI3T/Z5
xEA6Vxi8uftuu/6FhcPjyG+WREuD4P2x7CPHbVvP/faGJ27EdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLozgV4ZBnNKcULO9bLRi8UBQKIpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5
NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvYjcwNmQ0MWEtYzY2ZS0z
ZjlmLTk4ZGItMDM1YjBhNjI2MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh
YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0
N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm
NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAhEAEtdY6LlQYSONviaMt6R8wPqgSnzic9vbxq5uoXIiEa4RqbqswS
w/Vdb/Wa0YrUwUlSHiG5ThggS52EE7clJxtlbJdEVv3+bUFeSaU2VJMVDygRtsyt
LlIVXHCxQXinl7Vcsc5h7Hl1z03sCQ2sK2LIKBcG8GI/U4LIQM0FlznHidEq5hQs
GAnj7NgNdBTA5PCekFI6WAbxXDJeRN+xK91CmEhlcuv/I+zASPpKGVGh5M+B7IZm
Z88A2qGYYjF3Q815zrPpw2p9wwztjPRSxr6skmxnv0ZjPzV49l9QvHjNK4jXWV/n
/12XjcJP1+53FW8OoGVkpKBS8YizT6Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:13 2026 by rpki-client