Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa
File:                     d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa (raw, json)
Hash identifier:          qE7vY1h280cLjo5tpahMpkrJP3XShx0K3dMry3snlMk=
Subject key identifier:   64:23:B4:95:5B:53:97:59:CE:CB:DE:74:25:57:19:B7:1E:45:CB:54
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584DCAFAFAF3C05D347B86C78500
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     394840
IP address blocks:        67.219.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fa:f3:c0:5d:34:7b:86:c7:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=d8462047-0008-4f90-9129-79cd965c6401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:ec:08:cd:94:8c:ca:0e:19:28:d5:2a:1e:
                    12:df:15:ee:b9:2f:37:47:1a:db:1d:39:8d:52:b8:
                    83:e9:57:dd:d5:68:de:24:37:6b:06:99:c5:52:f7:
                    35:94:1c:35:4c:16:72:5f:de:8e:7f:43:27:ba:eb:
                    0d:3a:30:16:42:e9:d4:33:ab:4e:7e:c3:ee:c0:91:
                    17:e3:26:ed:6d:7d:9e:99:c8:e0:9d:ef:4b:86:31:
                    cf:97:ef:ac:30:c4:a2:a9:c6:c9:8c:57:53:fb:bd:
                    e1:8a:b0:a2:99:c9:a1:43:3b:4e:b4:88:4e:95:ad:
                    bb:15:0e:ad:b6:92:ba:8c:25:e4:5f:6a:39:69:62:
                    84:6c:59:94:1c:f5:3f:23:d4:73:f5:db:1b:9c:7f:
                    3d:00:a1:ba:5e:f1:6f:a6:9e:b9:46:54:36:6e:8c:
                    97:19:06:3f:b1:e3:d8:15:88:6a:17:f7:c2:a4:cc:
                    ae:76:07:c2:6b:6e:2f:c2:71:27:0c:ac:77:ce:00:
                    d9:9f:46:f9:69:17:70:b9:aa:73:5f:46:9a:ec:b2:
                    c6:73:4b:e7:b1:22:6f:6b:51:05:a4:87:4f:30:e6:
                    ba:55:28:c9:1e:c7:a2:48:a2:75:cc:e9:8e:6d:cf:
                    3f:5e:57:b1:07:d7:9f:6c:a1:a4:0d:ca:e7:7f:30:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:B4:95:5B:53:97:59:CE:CB:DE:74:25:57:19:B7:1E:45:CB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:eb:d8:4f:ac:95:ac:40:99:d2:a8:98:b6:b4:0e:84:df:
         dd:50:74:c9:0c:88:94:91:25:cd:13:3e:79:63:6d:26:15:e7:
         e5:19:5b:23:69:c9:1f:79:b5:1d:e4:de:18:07:12:27:bc:41:
         bf:89:e5:fd:6f:bb:17:d7:c2:14:8f:f8:02:96:24:f2:27:c5:
         d6:0d:f8:c2:6e:47:c9:e4:e8:a4:09:0f:f4:03:9b:b4:eb:a3:
         d1:0a:c0:51:f4:9b:b1:f8:ce:5d:b1:b7:b9:97:2e:f1:3d:29:
         f7:a0:14:1b:a5:5f:14:fe:ba:5a:12:95:5d:6c:47:8b:e1:d9:
         df:47:c3:f5:8e:82:3a:f7:03:35:38:b8:e9:ef:67:f5:3e:4a:
         53:d1:76:1b:aa:47:a0:e2:a1:50:a7:5a:40:52:3b:64:8e:84:
         18:5e:08:23:f1:70:82:f6:47:44:5f:29:4c:45:d8:99:55:08:
         9d:3e:38:9c:ff:28:9e:90:be:88:56:ea:31:c3:92:d4:be:86:
         77:ce:08:b0:72:4a:ca:24:e5:4d:8d:62:29:4c:fb:92:1f:3b:
         d8:8c:7d:82:68:c8:9a:d5:74:7f:90:61:a6:ff:26:8f:cc:c8:
         35:35:3a:1c:83:5d:82:f9:96:7d:45:f1:f3:61:9f:e4:f1:ba:
         40:40:99:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vrzwF00e4bHhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1
OGIwMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZDg0NjIwNDctMDAwOC00ZjkwLTkxMjktNzljZDk2NWM2NDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TzsCM2UjMoOGSjVKh4S3xXuuS83RxrbHTmN
UriD6Vfd1WjeJDdrBpnFUvc1lBw1TBZyX96Of0MnuusNOjAWQunUM6tOfsPuwJEX
4ybtbX2emcjgne9LhjHPl++sMMSiqcbJjFdT+73hirCimcmhQztOtIhOla27FQ6t
tpK6jCXkX2o5aWKEbFmUHPU/I9Rz9dsbnH89AKG6XvFvpp65RlQ2boyXGQY/sePY
FYhqF/fCpMyudgfCa24vwnEnDKx3zgDZn0b5aRdwuapzX0aa7LLGc0vnsSJva1EF
pIdPMOa6VSjJHseiSKJ1zOmObc8/XlexB9efbKGkDcrnfzCyxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQjtJVbU5dZzsvedCVXGbceRctUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0
OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvZDJkM2EzZDAtNDVjMC0z
ODJmLWI0ZjctZTllOTdjMjAxODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy
MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl
NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4
YzM2ZTU4YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9u9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvs69hPrJWsQJnSqJi2tA6E391QdMkMiJSRJc0TPnljbSYV5+UZWyNp
yR95tR3k3hgHEie8Qb+J5f1vuxfXwhSP+AKWJPInxdYN+MJuR8nk6KQJD/QDm7Tr
o9EKwFH0m7H4zl2xt7mXLvE9KfegFBulXxT+uloSlV1sR4vh2d9Hw/WOgjr3AzU4
uOnvZ/U+SlPRdhuqR6DioVCnWkBSO2SOhBheCCPxcIL2R0RfKUxF2JlVCJ0+OJz/
KJ6QvohW6jHDktS+hnfOCLBySsok5U2NYilM+5IfO9iMfYJoyJrVdH+QYab/Jo/M
yDU1OhyDXYL5ln1F8fNhn+TxukBAmeM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:49:38 2026 by rpki-client