Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa
File:                     37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa (raw, json)
Hash identifier:          QAYa1pavGATTkxO/EZU4W4EVpshUTwYQmkfO1HQtob8=
Subject key identifier:   5D:E5:30:69:63:75:62:34:CA:63:7E:AA:AB:49:08:06:76:B0:26:0A
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584E86F4F9383CF1BB05A5453400
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     399412
IP address blocks:        208.81.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f9:38:3c:f1:bb:05:a5:45:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=719e9544-5c68-452f-a307-ac9dabb9e159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:98:ea:9a:a8:58:50:46:91:93:df:a6:04:
                    8c:bb:e3:e6:11:34:66:3b:e7:d1:82:33:96:07:27:
                    f6:60:7e:5d:92:db:d9:6e:6f:a0:e3:11:dd:32:e8:
                    8e:ff:b1:9a:c9:78:68:f6:ae:de:5c:9c:df:06:11:
                    1e:c5:69:45:8b:df:9f:d6:a2:04:01:14:02:17:46:
                    30:42:9e:9b:82:6e:d5:62:2b:2a:13:97:f6:92:3b:
                    10:13:a2:6a:ca:f2:e5:47:6a:1b:8f:bf:8a:dd:71:
                    c1:d5:8d:8c:f1:fb:86:3e:9d:7d:cd:f0:48:ec:17:
                    ce:6e:70:78:50:f0:22:89:94:d3:32:b7:10:ad:12:
                    02:13:74:0a:39:cf:fa:d3:ed:67:99:60:00:63:c6:
                    60:b6:41:ab:94:6e:85:fe:b9:71:e5:84:eb:2c:e8:
                    e2:ee:63:69:76:88:49:5f:3b:d5:bf:cb:b1:9b:8b:
                    d8:e0:bc:15:d9:3e:98:52:c7:0e:21:5e:f4:af:32:
                    67:b2:62:d4:f5:30:6a:a6:7a:44:90:3b:9b:9a:dc:
                    b4:e3:ae:79:69:20:10:c5:5c:18:41:05:87:19:e8:
                    67:30:7e:72:69:52:3d:1e:94:41:2b:6e:c6:b7:45:
                    a6:c5:54:4e:4e:11:5e:73:e3:42:30:18:f0:7c:88:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E5:30:69:63:75:62:34:CA:63:7E:AA:AB:49:08:06:76:B0:26:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:bb:bc:bd:c7:03:e5:ad:29:b7:ca:ab:6e:f2:d6:11:93:
         df:2f:07:a0:5c:6c:e0:36:2c:99:2e:e0:ea:ff:d0:0a:23:4f:
         e7:98:af:de:98:21:84:d0:d1:0c:ea:84:ee:24:70:62:d8:76:
         ca:b8:3f:b7:44:e0:e6:fa:51:56:e3:d0:64:6b:2a:ba:9f:2f:
         ef:bf:7f:3f:f5:04:11:a0:d9:47:72:5d:67:a2:2b:77:88:50:
         65:c3:50:04:ca:51:07:69:53:4a:49:31:91:60:9e:a8:98:d1:
         5f:3d:cf:e6:bb:03:6c:92:aa:75:e3:c0:1d:4e:f2:c2:b5:68:
         b1:36:49:a8:a7:02:dc:47:b3:66:a0:ea:cb:2c:6d:ca:96:e7:
         11:86:86:11:b9:94:de:50:c6:12:e3:60:60:6e:56:83:f0:a0:
         14:93:c1:a5:ad:d3:1e:50:2e:a4:09:8a:80:88:82:20:7d:ab:
         ed:04:d5:a9:7d:f6:5e:86:90:39:77:a1:6a:0c:e4:d7:60:b0:
         38:d5:a1:e5:3d:90:02:c2:fe:0f:b4:89:a5:44:04:6a:d6:fd:
         9c:ee:94:7b:13:75:12:9b:d1:90:8b:d3:93:8e:23:94:b2:f9:
         4b:f8:f6:19:f6:25:82:07:00:73:8d:d1:2a:ab:7d:c4:be:b0:
         a2:16:2d:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9Pk4PPG7BaVFNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
NzE5ZTk1NDQtNWM2OC00NTJmLWEzMDctYWM5ZGFiYjllMTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ayY6pqoWFBGkZPfpgSMu+PmETRmO+fRgjOW
Byf2YH5dktvZbm+g4xHdMuiO/7GayXho9q7eXJzfBhEexWlFi9+f1qIEARQCF0Yw
Qp6bgm7VYisqE5f2kjsQE6JqyvLlR2obj7+K3XHB1Y2M8fuGPp19zfBI7BfObnB4
UPAiiZTTMrcQrRICE3QKOc/60+1nmWAAY8ZgtkGrlG6F/rlx5YTrLOji7mNpdohJ
XzvVv8uxm4vY4LwV2T6YUscOIV70rzJnsmLU9TBqpnpEkDubmty04655aSAQxVwY
QQWHGehnMH5yaVI9HpRBK27Gt0WmxVROThFec+NCMBjwfIivwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3lMGljdWI0ymN+qqtJCAZ2sCYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvMzc3MDNhZmMtYmEzZC0z
YjYzLWFiYTktM2ZmOGQxZWI5ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FE6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5uu7y9xwPlrSm3yqtu8tYRk98vB6BcbOA2LJku4Or/0AojT+eYr96Y
IYTQ0QzqhO4kcGLYdsq4P7dE4Ob6UVbj0GRrKrqfL++/fz/1BBGg2UdyXWeiK3eI
UGXDUATKUQdpU0pJMZFgnqiY0V89z+a7A2ySqnXjwB1O8sK1aLE2SainAtxHs2ag
6sssbcqW5xGGhhG5lN5QxhLjYGBuVoPwoBSTwaWt0x5QLqQJioCIgiB9q+0E1al9
9l6GkDl3oWoM5NdgsDjVoeU9kALC/g+0iaVEBGrW/ZzulHsTdRKb0ZCL05OOI5Sy
+Uv49hn2JYIHAHON0SqrfcS+sKIWLfE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:30 2026 by rpki-client