Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa
File:                     b228ff65-076b-350a-9bd4-34c24e093669.roa (raw, json)
Hash identifier:          3mlwxCoLSNVJsLxYA9WWUZ+kmdNY0BatTSi+EnPZ+b0=
Subject key identifier:   09:06:90:2F:66:5B:4E:36:5F:4B:6F:78:BD:6C:CE:18:04:A5:D4:50
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC46E03F76F07F0F80D7E80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        174.128.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:6e:03:f7:6f:07:f0:f8:0d:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=1776aa3c-58da-4e52-8648-2160d9639acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:f3:e3:7f:fc:8d:7d:35:63:cc:66:99:08:
                    5c:2c:99:8e:22:b7:45:31:be:95:53:b7:5d:c1:21:
                    fc:06:88:6a:dc:7a:11:dc:54:a7:05:a8:12:b4:f5:
                    0e:10:f0:53:0b:16:6d:fe:cf:f1:10:44:79:ef:ce:
                    be:0e:cf:ca:43:4d:eb:56:1b:fd:f4:6b:a5:b2:9e:
                    71:ef:ec:9d:67:a2:58:03:0e:d5:ea:63:c0:af:9b:
                    12:03:48:da:df:f7:aa:66:e7:78:7d:a7:01:02:05:
                    95:1b:cd:bd:39:ee:ae:51:6b:0d:50:94:f0:f0:7c:
                    f4:3f:62:3e:43:9c:3f:0e:b4:be:9e:6a:b8:e5:f4:
                    72:c7:1a:1d:45:3c:fc:67:0a:0b:1b:71:c5:8d:c9:
                    ca:99:82:6f:25:67:bd:93:cb:d8:5e:01:e8:49:a3:
                    89:3d:af:85:5a:31:90:ef:9a:1f:68:c3:db:9b:12:
                    17:56:4c:fb:75:10:30:9b:ca:77:3a:a5:26:60:33:
                    67:52:3c:99:a0:4b:70:be:a3:2c:41:94:6f:43:6f:
                    ae:d3:85:d5:60:0c:7b:65:8f:45:43:df:14:90:64:
                    3a:b9:d8:66:b4:6a:99:20:90:88:c0:e7:a3:9d:bd:
                    f0:50:06:a7:1f:e3:ce:78:dc:3d:fd:c2:3b:0b:15:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:90:2F:66:5B:4E:36:5F:4B:6F:78:BD:6C:CE:18:04:A5:D4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b228ff65-076b-350a-9bd4-34c24e093669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:72:ae:df:cf:8c:dc:e8:3a:77:a5:1d:5b:1d:05:57:bf:
         17:68:07:d8:36:8c:fe:77:56:42:51:b3:88:b2:10:09:2b:ba:
         0e:9a:b1:22:4d:8c:25:e4:3c:77:c5:a8:c4:8e:51:82:2f:9d:
         85:48:a4:57:19:99:da:b9:b2:97:8b:ea:53:80:2a:e1:18:48:
         03:ac:b6:cf:7e:f7:33:cf:a1:e4:8f:35:80:41:f3:58:13:5f:
         fb:72:96:52:b2:f8:1e:13:f3:56:a9:ac:56:b5:28:b3:72:47:
         43:1b:5b:cb:e2:63:39:a2:84:ec:f2:c4:e8:13:3c:a2:66:ff:
         5d:d9:c7:00:79:4e:1e:1b:3b:a7:ab:d4:ea:2b:9c:9e:69:c6:
         16:bb:59:79:78:42:f0:3c:ab:df:4e:5c:a4:b1:15:ce:f0:34:
         4a:c3:75:64:56:13:5d:59:fe:79:3d:59:a2:df:cf:db:8e:f7:
         71:c0:f8:e2:81:18:6b:74:b3:4b:7a:a4:2e:27:99:15:58:0e:
         03:e6:b9:cb:69:ad:06:e4:29:43:62:3d:06:dd:56:9c:e5:26:
         00:03:a4:bb:1d:3c:df:b4:38:bf:6b:a3:bb:b4:c7:5b:d7:0b:
         f1:01:c8:ff:7e:0b:c7:14:c3:7b:d6:27:7e:a1:0c:8b:cd:3f:
         81:5f:07:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xG4D928H8PgNfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
MTc3NmFhM2MtNThkYS00ZTUyLTg2NDgtMjE2MGQ5NjM5YWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9nz43/8jX01Y8xmmQhcLJmOIrdFMb6VU7dd
wSH8Bohq3HoR3FSnBagStPUOEPBTCxZt/s/xEER5786+Ds/KQ03rVhv99Gulsp5x
7+ydZ6JYAw7V6mPAr5sSA0ja3/eqZud4facBAgWVG829Oe6uUWsNUJTw8Hz0P2I+
Q5w/DrS+nmq45fRyxxodRTz8ZwoLG3HFjcnKmYJvJWe9k8vYXgHoSaOJPa+FWjGQ
75ofaMPbmxIXVkz7dRAwm8p3OqUmYDNnUjyZoEtwvqMsQZRvQ2+u04XVYAx7ZY9F
Q98UkGQ6udhmtGqZIJCIwOejnb3wUAanH+POeNw9/cI7CxVwPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkGkC9mW042X0tveL1szhgEpdRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvYjIyOGZmNjUtMDc2Yi0z
NTBhLTliZDQtMzRjMjRlMDkzNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroASMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1Acq7fz4zc6Dp3pR1bHQVXvxdoB9g2jP53VkJRs4iyEAkrug6asSJN
jCXkPHfFqMSOUYIvnYVIpFcZmdq5speL6lOAKuEYSAOsts9+9zPPoeSPNYBB81gT
X/tyllKy+B4T81aprFa1KLNyR0MbW8viYzmihOzyxOgTPKJm/13ZxwB5Th4bO6er
1OornJ5pxha7WXl4QvA8q99OXKSxFc7wNErDdWRWE11Z/nk9WaLfz9uO93HA+OKB
GGt0s0t6pC4nmRVYDgPmuctprQbkKUNiPQbdVpzlJgADpLsdPN+0OL9ro7u0x1vX
C/EByP9+C8cUw3vWJ36hDIvNP4FfB1Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:34 2026 by rpki-client