Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87a55234-3249-388e-b91f-c3d1cfd646d5.roa
File:                     87a55234-3249-388e-b91f-c3d1cfd646d5.roa (raw, json)
Hash identifier:          pJ3VjNoxx3qAn11WzPtXbMYMZFTaXPlQAYYDHxoGrms=
Subject key identifier:   E6:C6:76:2B:CB:B7:01:DA:09:91:26:C8:28:32:77:2B:20:16:94:8A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E6DD4C7135EC722320B22C4C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87a55234-3249-388e-b91f-c3d1cfd646d5.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     274191
IP address blocks:        216.28.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c7:13:5e:c7:22:32:0b:22:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=0fab6067-703b-4381-9def-ebe7ec758200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:65:89:02:a6:0a:f9:15:91:6e:b8:98:e6:
                    11:0b:b6:1d:8c:ba:76:d2:27:5e:74:75:97:21:ab:
                    3e:e5:5a:3c:40:fe:0a:0b:fc:81:c9:1f:87:da:03:
                    3a:84:c7:0b:47:c9:cc:f6:e8:60:12:74:97:85:cf:
                    97:83:ea:5c:7c:2d:10:05:f5:96:d2:28:84:22:5a:
                    90:b9:f9:4f:1b:f7:1b:55:70:d1:b7:e3:eb:a4:26:
                    cd:e7:ac:0a:b9:35:f6:40:d5:0b:31:46:20:64:53:
                    b4:10:05:71:b6:25:4a:b0:3b:38:40:ab:2f:c8:70:
                    3c:03:11:03:20:03:08:f7:a8:06:81:17:4f:cd:7a:
                    a5:2d:c1:f3:79:41:e4:e1:8a:b7:3d:18:a0:72:3f:
                    b2:d2:41:97:ee:ef:81:30:07:67:76:0e:c8:16:11:
                    7b:a9:12:e7:f4:26:da:84:15:c6:6c:e5:5c:d4:65:
                    a8:bb:f4:e9:29:05:90:f9:09:6e:e0:42:c0:cd:2c:
                    14:dd:fb:3e:d8:d2:62:24:fd:38:2c:5c:b8:0b:09:
                    24:a3:57:29:fe:e2:4f:88:6c:14:0c:8a:77:a0:45:
                    da:e5:58:d5:c1:d4:6b:a3:43:ff:92:7a:75:ac:da:
                    02:ba:4c:57:e5:26:a0:7a:1e:89:c6:a4:67:d0:ce:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:76:2B:CB:B7:01:DA:09:91:26:C8:28:32:77:2B:20:16:94:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87a55234-3249-388e-b91f-c3d1cfd646d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:6f:a8:c1:ad:29:f8:bc:9f:6b:6a:d1:06:e1:34:5d:14:
         c5:26:d5:ae:e0:3e:43:f4:f3:b6:10:bd:76:48:1d:86:50:b3:
         d2:74:0d:7a:94:d9:af:2d:e3:45:5d:3f:96:1f:46:9e:26:f4:
         26:19:24:56:ec:ff:e8:15:ff:69:e2:0a:dc:5c:0b:32:a2:cc:
         0c:87:b3:5a:85:ea:2c:3b:d0:23:f0:33:09:d7:c7:20:06:2e:
         78:aa:ca:ba:d2:88:0d:a3:fb:58:93:f9:0b:ed:a3:0b:dc:e0:
         d6:2b:ee:36:8a:9e:d3:0d:eb:dc:24:65:08:01:56:5f:08:cc:
         2d:49:f6:f5:f5:c9:e2:c0:7b:5c:20:2b:9e:5d:e6:00:53:cf:
         a1:93:8d:91:9a:8a:65:68:da:b7:d3:40:a6:6f:1e:bc:9b:80:
         f2:c7:be:96:54:70:13:00:af:d8:69:6f:d8:9c:01:cc:d9:88:
         3d:9b:51:aa:f6:84:4f:4a:61:7a:c6:13:8f:5e:b5:30:37:6c:
         fd:00:23:8a:77:ee:ff:6e:7e:1f:42:a7:a1:77:50:ac:ef:70:
         1d:9d:9b:c5:c6:94:fc:cf:19:ac:95:43:d5:f6:25:9c:13:b1:
         d1:cf:c0:f5:d9:d4:1f:c5:14:c5:19:af:12:93:17:db:62:74:
         d2:0f:4d:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1McTXsciMgsixMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
MGZhYjYwNjctNzAzYi00MzgxLTlkZWYtZWJlN2VjNzU4MjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguRliQKmCvkVkW64mOYRC7YdjLp20idedHWX
Ias+5Vo8QP4KC/yByR+H2gM6hMcLR8nM9uhgEnSXhc+Xg+pcfC0QBfWW0iiEIlqQ
uflPG/cbVXDRt+PrpCbN56wKuTX2QNULMUYgZFO0EAVxtiVKsDs4QKsvyHA8AxED
IAMI96gGgRdPzXqlLcHzeUHk4Yq3PRigcj+y0kGX7u+BMAdndg7IFhF7qRLn9Cba
hBXGbOVc1GWou/TpKQWQ+Qlu4ELAzSwU3fs+2NJiJP04LFy4Cwkko1cp/uJPiGwU
DIp3oEXa5VjVwdRro0P/knp1rNoCukxX5Sageh6JxqRn0M6d0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObGdivLtwHaCZEmyCgydysgFpSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdhNTUyMzQtMzI0OS0z
ODhlLWI5MWYtYzNkMWNmZDY0NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ByGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAi0b6jBrSn4vJ9ratEG4TRdFMUm1a7gPkP087YQvXZIHYZQs9J0DXqU
2a8t40VdP5YfRp4m9CYZJFbs/+gV/2niCtxcCzKizAyHs1qF6iw70CPwMwnXxyAG
LniqyrrSiA2j+1iT+Qvtowvc4NYr7jaKntMN69wkZQgBVl8IzC1J9vX1yeLAe1wg
K55d5gBTz6GTjZGaimVo2rfTQKZvHrybgPLHvpZUcBMAr9hpb9icAczZiD2bUar2
hE9KYXrGE49etTA3bP0AI4p37v9ufh9Cp6F3UKzvcB2dm8XGlPzPGayVQ9X2JZwT
sdHPwPXZ1B/FFMUZrxKTF9tidNIPTfo=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:53 2026 by rpki-client