Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File:                     43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier:          VxI3pz7HjZrluT+CitsvlKtgbI/DfFGa3vNOsuoPolg=
Subject key identifier:   7F:26:2E:25:F1:4B:D0:92:8F:F3:0E:DD:07:3D:2D:72:2C:C2:E5:94
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584D3B34DC402E5499916B81B800
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     10865
IP address blocks:        66.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:dc:40:2e:54:99:91:6b:81:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=607b0ddd-f8bf-442b-80ab-ad7c7f5c2a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:0e:55:3c:f4:22:b2:31:5f:48:66:04:8f:
                    d4:cf:0a:4f:21:16:47:8d:82:f0:15:ae:88:d9:67:
                    76:7b:4b:a3:5a:3a:14:9f:ce:eb:5c:e2:01:f2:1e:
                    9d:59:08:bc:8c:fe:95:4a:50:7b:ba:45:d3:69:ce:
                    35:09:4c:53:0c:a5:fe:e3:51:06:e1:cf:eb:49:80:
                    fe:b0:aa:69:56:04:8c:e8:3b:85:a1:33:c1:19:c1:
                    5a:56:3f:2e:e1:b9:5b:d2:fd:3b:b8:b6:92:71:91:
                    c3:29:09:91:e9:2a:b1:a2:14:47:35:4a:e3:6a:a7:
                    49:fe:e4:d3:24:f9:eb:33:9a:27:3e:6c:01:e1:46:
                    4e:4a:95:db:66:e5:e5:86:82:7a:8f:ba:6b:37:dd:
                    5c:fc:c7:cd:ac:8d:88:e9:92:d4:c2:0f:ff:8e:d5:
                    0b:20:a9:bb:78:1e:f4:5e:93:16:b3:28:9f:1b:47:
                    df:8c:5f:d0:b1:df:f3:93:03:27:fc:9d:6d:ae:4e:
                    75:cf:1d:56:c5:b3:60:72:99:76:05:cf:51:fd:c8:
                    c5:f9:62:e4:02:a5:b4:d4:5f:71:21:1d:19:a5:12:
                    a0:8c:18:0a:c0:69:ea:45:84:12:8e:9f:03:ef:41:
                    ff:72:5f:79:20:f4:de:45:e0:c1:c3:f0:f7:b7:2f:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:2E:25:F1:4B:D0:92:8F:F3:0E:DD:07:3D:2D:72:2C:C2:E5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:39:76:3d:66:ae:9b:f5:fc:99:6c:f9:8c:ee:e3:0f:e4:
         24:44:62:1d:56:54:32:69:b2:d6:60:bf:85:83:d4:a0:ca:3d:
         66:ed:68:48:76:2f:d8:0e:ac:b5:72:5e:50:3e:b3:18:d8:29:
         89:42:18:bb:61:c0:35:75:2c:e3:53:aa:53:21:9e:80:0a:25:
         bc:9d:b5:6d:bc:03:69:c3:00:80:fe:8b:3c:27:e2:bc:2b:39:
         40:ba:b5:d4:8e:5a:7f:8f:2e:fe:fb:b3:dd:32:e2:58:98:79:
         b0:d5:c7:1d:54:7f:27:33:c1:e6:f6:8f:47:9f:82:c9:5d:81:
         91:1a:9a:6b:17:54:f7:44:a3:e7:a7:8a:b7:63:e5:6e:1d:d0:
         ab:da:45:4a:85:e0:d3:2b:c7:eb:44:b8:ff:7c:2f:ae:94:f3:
         bb:82:7b:e9:62:2f:47:0a:1b:80:50:4c:76:55:f5:0f:0e:25:
         d6:71:66:04:9f:84:fc:73:43:5c:0b:78:3c:59:30:fe:51:39:
         3d:b6:b6:08:56:c7:a9:84:9d:f5:f4:78:f3:e9:00:38:fc:72:
         a2:17:c8:04:bd:6c:9f:b1:a9:92:3e:68:2f:35:86:4e:50:20:
         4e:74:83:6f:1a:71:fc:0d:8d:63:72:bf:8f:0b:c6:ef:36:3f:
         fb:33:77:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNxALlSZkWuBuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
NjA3YjBkZGQtZjhiZi00NDJiLTgwYWItYWQ3YzdmNWMyYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt84OVTz0IrIxX0hmBI/UzwpPIRZHjYLwFa6I
2Wd2e0ujWjoUn87rXOIB8h6dWQi8jP6VSlB7ukXTac41CUxTDKX+41EG4c/rSYD+
sKppVgSM6DuFoTPBGcFaVj8u4blb0v07uLaScZHDKQmR6SqxohRHNUrjaqdJ/uTT
JPnrM5onPmwB4UZOSpXbZuXlhoJ6j7prN91c/MfNrI2I6ZLUwg//jtULIKm7eB70
XpMWsyifG0ffjF/Qsd/zkwMn/J1trk51zx1WxbNgcpl2Bc9R/cjF+WLkAqW01F9x
IR0ZpRKgjBgKwGnqRYQSjp8D70H/cl95IPTeReDBw/D3ty9J1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8mLiXxS9CSj/MO3Qc9LXIswuWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNDNhZjQzMWUtN2IwMy0z
ZWM2LWJlMzItNmY5MDJmYzU1YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABthOXY9Zq6b9fyZbPmM7uMP5CREYh1WVDJpstZgv4WD1KDKPWbtaEh2
L9gOrLVyXlA+sxjYKYlCGLthwDV1LONTqlMhnoAKJbydtW28A2nDAID+izwn4rwr
OUC6tdSOWn+PLv77s90y4liYebDVxx1Ufyczweb2j0efgsldgZEammsXVPdEo+en
irdj5W4d0KvaRUqF4NMrx+tEuP98L66U87uCe+liL0cKG4BQTHZV9Q8OJdZxZgSf
hPxzQ1wLeDxZMP5ROT22tghWx6mEnfX0ePPpADj8cqIXyAS9bJ+xqZI+aC81hk5Q
IE50g28acfwNjWNyv48Lxu82P/szd6Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:35 2026 by rpki-client