Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/86a06065-ba91-3501-acfc-cac248672adb.roa
File:                     86a06065-ba91-3501-acfc-cac248672adb.roa (raw, json)
Hash identifier:          iTaIt8Alh7D4leIakjKU573ai5rGLNlMl6eVEd5u9eE=
Subject key identifier:   B5:FE:37:0F:95:61:F2:1E:E1:C2:3C:CE:7C:70:74:E9:B3:B3:79:D4
Certificate issuer:       /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial:       010D0C9F4328584E5D14B7F8CCC950804B20FCC0
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/86a06065-ba91-3501-acfc-cac248672adb.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     394056
IP address blocks:        72.57.0.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b7:f8:cc:c9:50:80:4b:20:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=71d168b8-80cb-4e5b-9a0b-b924efb6ff59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:2b:18:70:4c:eb:40:c8:93:ee:10:50:d2:
                    bb:da:44:2a:a8:af:d9:42:51:6c:90:f4:05:66:84:
                    71:f3:af:a8:3f:04:3f:b5:05:26:9f:4a:37:83:42:
                    da:98:1a:c1:af:ea:80:e5:d5:4e:74:50:64:0f:2e:
                    65:67:8d:21:41:a8:a1:56:fb:d0:68:82:9a:3d:56:
                    0f:11:63:3b:20:ff:d4:65:fe:2a:00:61:1a:87:ea:
                    1a:bd:f5:5a:40:9e:d5:a2:8a:8b:02:9e:29:e1:95:
                    75:34:39:d8:06:c3:7a:0e:f2:fe:fc:ff:61:93:63:
                    0e:4b:2f:40:e0:55:10:8d:14:2e:ed:e0:02:92:9c:
                    9a:02:1f:40:39:c1:02:d9:5d:38:d9:23:82:bc:08:
                    2f:a4:5e:88:61:ee:b5:2a:bc:e1:8c:40:13:ee:fc:
                    e0:70:b2:71:35:2c:e0:47:92:42:28:7d:e0:6e:9e:
                    11:fb:f6:69:ae:9b:24:b7:03:fd:4a:0a:04:0f:78:
                    f8:68:6c:9d:0e:39:cd:8f:ed:1b:d9:45:a2:b0:0f:
                    0b:3d:fd:f5:a7:5e:09:0f:d8:f8:03:00:d8:93:bd:
                    31:cf:8f:3a:d4:b2:fd:e0:07:b5:c4:4d:1a:74:b2:
                    45:a4:3b:76:5d:74:9b:76:46:c1:cc:08:e5:09:96:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:37:0F:95:61:F2:1E:E1:C2:3C:CE:7C:70:74:E9:B3:B3:79:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/86a06065-ba91-3501-acfc-cac248672adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:61:d1:53:e1:cc:f4:3d:de:0c:9e:56:ec:56:0f:c2:c0:
         ef:56:72:fd:fc:7f:dd:ff:04:eb:43:ce:82:b4:d4:55:83:a1:
         9e:d3:48:06:e1:c3:94:ef:26:c0:38:de:46:95:a3:de:d0:0c:
         a3:c1:de:3b:58:00:06:c7:50:ee:94:54:94:b4:cb:b8:59:4b:
         af:be:31:d9:02:f6:bb:cd:02:a6:89:bb:a6:ff:93:da:32:ce:
         b9:9b:d1:f1:6e:0e:b5:aa:b1:a7:37:ac:cf:dd:e5:44:50:fd:
         8d:13:82:4a:91:88:4d:6b:c7:5e:62:4c:3e:13:3d:d7:9a:bb:
         fd:34:c1:5a:41:5c:9f:4e:7b:82:df:bc:84:bd:20:c5:12:3e:
         09:7d:89:57:56:b6:cf:d2:6e:71:9c:72:a0:8c:01:23:c0:68:
         eb:ab:66:cd:9a:32:5e:c6:83:b8:1d:cc:fe:60:3c:33:f5:30:
         e5:c5:2c:53:43:b8:aa:81:b6:c0:87:a7:d3:fa:df:7a:64:c2:
         47:8d:98:ef:1c:88:bc:62:33:10:2d:f2:c0:2a:8a:7c:47:9e:
         f3:ce:5d:8c:a3:b5:57:95:5e:88:0b:d1:b9:8e:2b:6f:06:35:
         83:8d:e5:88:6d:66:fa:31:0b:85:f0:aa:ab:25:42:f1:7b:18:
         62:71:ce:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFLf4zMlQgEsg/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz
M2E1MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
NzFkMTY4YjgtODBjYi00ZTViLTlhMGItYjkyNGVmYjZmZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sQrGHBM60DIk+4QUNK72kQqqK/ZQlFskPQF
ZoRx86+oPwQ/tQUmn0o3g0LamBrBr+qA5dVOdFBkDy5lZ40hQaihVvvQaIKaPVYP
EWM7IP/UZf4qAGEah+oavfVaQJ7VooqLAp4p4ZV1NDnYBsN6DvL+/P9hk2MOSy9A
4FUQjRQu7eACkpyaAh9AOcEC2V042SOCvAgvpF6IYe61KrzhjEAT7vzgcLJxNSzg
R5JCKH3gbp4R+/ZprpsktwP9SgoED3j4aGydDjnNj+0b2UWisA8LPf31p14JD9j4
AwDYk70xz4861LL94Ae1xE0adLJFpDt2XXSbdkbBzAjlCZYpgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX+Nw+VYfIe4cI8znxwdOmzs3nUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj
ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvODZhMDYwNjUtYmE5MS0z
NTAxLWFjZmMtY2FjMjQ4NjcyYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3
OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx
MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl
ODk0MTMzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSDkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDAYdFT4cz0Pd4MnlbsVg/CwO9Wcv38f93/BOtDzoK01FWDoZ7TSAbh
w5TvJsA43kaVo97QDKPB3jtYAAbHUO6UVJS0y7hZS6++MdkC9rvNAqaJu6b/k9oy
zrmb0fFuDrWqsac3rM/d5URQ/Y0TgkqRiE1rx15iTD4TPdeau/00wVpBXJ9Oe4Lf
vIS9IMUSPgl9iVdWts/SbnGccqCMASPAaOurZs2aMl7Gg7gdzP5gPDP1MOXFLFND
uKqBtsCHp9P633pkwkeNmO8ciLxiMxAt8sAqinxHnvPOXYyjtVeVXogL0bmOK28G
NYON5YhtZvoxC4XwqqslQvF7GGJxzng=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:26 2026 by rpki-client