Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa
File:                     d1656d04-2463-3789-a064-97c719b35806.roa (raw, json)
Hash identifier:          ffp0QrY+X5SyHkhZqshva+p5jWeE8kgKWzF32CUzxaY=
Subject key identifier:   2D:F3:8F:4C:05:88:E4:4D:6F:A6:EE:D7:7F:31:1C:79:A6:D7:CC:76
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584E4824888738675ED99F150B80
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     5744
IP address blocks:        151.207.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:88:87:38:67:5e:d9:9f:15:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=4c9d0782-91ae-46dd-9051-bc796bac0166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:6c:40:ea:a6:ef:7a:03:54:bd:12:74:cd:
                    c1:37:0f:83:bc:8d:13:ce:b6:ea:55:b8:d4:7f:7b:
                    33:72:d4:35:64:d9:d4:3d:4c:fe:50:fa:4d:62:39:
                    9f:1b:39:5e:07:c1:8c:95:92:e7:43:6b:9b:6d:b0:
                    93:76:ab:c8:89:7e:1e:c6:d4:8f:77:1e:2f:4d:61:
                    b9:50:a2:03:34:71:8a:f0:00:0f:0d:de:11:46:95:
                    32:cf:71:05:1a:11:fb:4a:bf:03:14:5f:2c:f7:2f:
                    af:b9:0d:e4:32:fd:8b:db:0e:c3:7b:89:4b:d9:6c:
                    09:1d:60:e2:06:52:b7:57:9a:89:4c:19:f5:92:0f:
                    04:e2:b0:67:73:8a:12:8e:7d:52:12:b9:83:ac:92:
                    a5:15:9f:5d:6c:04:be:7a:32:f1:ad:2b:72:31:ce:
                    d3:50:5c:97:23:d4:64:ab:96:f2:8f:aa:7b:08:96:
                    df:38:38:fd:16:16:85:c8:be:36:ec:80:74:7f:81:
                    b3:19:99:5f:63:ef:96:63:f9:fc:dc:47:35:14:39:
                    33:9d:c5:90:df:d0:e6:37:eb:b1:cb:62:f7:7c:4d:
                    a3:3f:f8:e3:64:ba:c6:f5:d4:81:72:49:bf:8f:75:
                    65:fd:d7:8e:ef:91:1f:ea:0e:52:10:3a:04:27:31:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:8F:4C:05:88:E4:4D:6F:A6:EE:D7:7F:31:1C:79:A6:D7:CC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:88:04:77:46:7a:a1:86:e7:a4:d2:b8:67:18:05:db:53:
         32:92:5b:1f:06:ba:5a:fd:ce:55:97:87:41:f3:cb:cd:cb:4c:
         76:f9:53:73:73:3c:76:c2:6e:c5:6b:40:5b:0e:f7:9a:0d:e0:
         dc:09:dc:de:17:72:b8:27:c8:17:22:b5:71:2f:e7:93:51:07:
         ef:56:f5:b6:c7:93:35:54:27:fa:d1:9a:ba:2e:4e:70:e8:13:
         4d:8f:56:0a:06:1c:ba:2b:42:1e:bd:a7:a7:d0:3b:86:89:ed:
         f8:33:c6:d7:ab:ef:5f:fa:1c:f7:75:d1:34:ef:ea:57:29:6a:
         08:45:1d:9a:e1:54:3c:dc:ab:3b:ba:ea:9d:28:94:c0:c6:dc:
         c3:fc:3a:5a:d3:56:d0:91:3b:4e:ed:84:12:e2:ba:29:4b:e6:
         97:1c:9b:36:c9:46:b9:ee:50:cd:49:67:80:10:cf:19:9f:4c:
         4a:c4:e3:bc:02:b2:9e:7f:36:cd:27:32:f6:45:19:c3:b2:0c:
         c2:20:8e:82:2b:0c:f5:88:49:f1:e2:da:5f:ba:74:28:bd:ac:
         14:64:5c:12:3d:ba:fd:0d:69:56:8b:e8:70:9a:ce:03:f8:82:
         4e:04:3b:d7:a9:8e:06:0a:b0:f5:67:6b:fc:6e:b0:c7:43:36:
         7c:13:89:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIiHOGde2Z8VC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5
Y2I1MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGM5ZDA3ODItOTFhZS00NmRkLTkwNTEtYmM3OTZiYWMwMTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7tsQOqm73oDVL0SdM3BNw+DvI0TzrbqVbjU
f3szctQ1ZNnUPUz+UPpNYjmfGzleB8GMlZLnQ2ubbbCTdqvIiX4extSPdx4vTWG5
UKIDNHGK8AAPDd4RRpUyz3EFGhH7Sr8DFF8s9y+vuQ3kMv2L2w7De4lL2WwJHWDi
BlK3V5qJTBn1kg8E4rBnc4oSjn1SErmDrJKlFZ9dbAS+ejLxrStyMc7TUFyXI9Rk
q5byj6p7CJbfODj9FhaFyL427IB0f4GzGZlfY++WY/n83Ec1FDkzncWQ39DmN+ux
y2L3fE2jP/jjZLrG9dSBckm/j3Vl/deO75Ef6g5SEDoEJzHfDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3zj0wFiORNb6bu138xHHmm18x2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl
NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZDE2NTZkMDQtMjQ2My0z
Nzg5LWEwNjQtOTdjNzE5YjM1ODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2
ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi
OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl
YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl8/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALasiAR3Rnqhhuek0rhnGAXbUzKSWx8Gulr9zlWXh0Hzy83LTHb5U3Nz
PHbCbsVrQFsO95oN4NwJ3N4XcrgnyBcitXEv55NRB+9W9bbHkzVUJ/rRmrouTnDo
E02PVgoGHLorQh69p6fQO4aJ7fgzxter71/6HPd10TTv6lcpaghFHZrhVDzcqzu6
6p0olMDG3MP8OlrTVtCRO07thBLiuilL5pccmzbJRrnuUM1JZ4AQzxmfTErE47wC
sp5/Ns0nMvZFGcOyDMIgjoIrDPWISfHi2l+6dCi9rBRkXBI9uv0NaVaL6HCazgP4
gk4EO9epjgYKsPVna/xusMdDNnwTiZQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:21:48 2026 by rpki-client