Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f06110aa-eaba-3c63-88f0-46e6edabefd2.roa
File:                     f06110aa-eaba-3c63-88f0-46e6edabefd2.roa (raw, json)
Hash identifier:          2cXEsaZTLChOrQZ1WBQDPUy9Uzj073biw9kqoEAigiM=
Subject key identifier:   51:09:E3:42:2B:95:C2:67:5B:D1:35:16:50:03:A0:E7:75:0F:91:DC
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E3FC46E20AF7C32BABDE51280
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f06110aa-eaba-3c63-88f0-46e6edabefd2.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     12025
IP address blocks:        174.128.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:6e:20:af:7c:32:ba:bd:e5:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=183b776f-c747-4162-835d-3ba6373124e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:54:01:d8:7c:40:09:e5:19:a5:0e:ee:3c:
                    6a:23:97:3b:34:e0:98:03:d5:90:f8:76:31:0e:3d:
                    a0:e0:50:e4:d6:11:10:8f:64:40:be:75:db:21:83:
                    ef:d9:63:d2:bb:ec:36:e8:fd:28:78:7f:1e:37:b1:
                    ce:ed:8f:9a:b7:c9:4e:0b:d1:91:5f:36:22:8d:4b:
                    b2:17:a3:db:f4:66:17:09:25:30:d9:12:11:1b:b1:
                    07:f1:6e:ae:a6:d7:71:b6:07:b1:71:f2:2c:a6:bc:
                    ef:21:78:e2:9a:17:cb:4a:d1:3b:2f:e5:2e:29:0d:
                    56:80:86:25:69:ca:ea:36:be:50:e2:92:99:09:a2:
                    a6:3c:89:ee:e9:d9:26:88:6f:54:c3:e8:3a:5f:c8:
                    99:f6:10:19:1a:03:3b:e0:ec:cf:87:f3:bd:05:6d:
                    a8:3c:08:ec:ae:cf:c7:31:54:a2:fb:ff:36:f0:4c:
                    d2:0e:e0:be:f2:39:f0:89:e5:c9:7b:fc:15:7d:6f:
                    cb:7f:da:be:35:34:9b:77:27:35:ad:6a:9b:a4:49:
                    aa:65:db:ba:fa:07:36:e4:83:17:7d:7b:57:88:60:
                    be:59:ff:5a:3d:fb:5a:de:37:67:eb:77:94:28:67:
                    8b:6d:55:8b:96:61:b6:9e:ca:d2:0a:df:29:a9:62:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:E3:42:2B:95:C2:67:5B:D1:35:16:50:03:A0:E7:75:0F:91:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/f06110aa-eaba-3c63-88f0-46e6edabefd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:76:eb:fe:ea:53:c4:3a:b4:85:d4:a4:14:2a:c0:43:62:
         ce:10:1b:7f:0a:84:35:f7:56:55:75:35:c6:0f:f0:13:6e:d0:
         5c:8f:a7:71:51:c6:98:d4:02:36:32:dc:dd:e4:4f:13:ff:b2:
         81:21:db:76:79:67:4c:b0:22:bd:fb:fb:ea:f8:d7:43:aa:5f:
         67:f4:60:b5:8b:e1:a2:b5:2a:7b:98:9c:bf:7b:b1:d4:50:7e:
         59:86:01:5a:e8:4f:9a:8b:d2:16:f9:b2:38:05:2f:a8:ea:b3:
         68:bf:69:08:4c:ee:2e:f4:7d:37:b9:82:43:bc:2a:b2:ce:89:
         b3:52:ec:40:42:02:56:6e:57:ae:04:e5:5d:bc:5f:ea:4d:78:
         92:d7:f4:7c:e9:ef:03:55:6d:aa:07:ec:eb:5e:90:8b:14:cb:
         78:00:56:39:27:72:2f:a5:92:f2:ac:38:36:9b:fd:2d:ef:93:
         ef:bb:80:92:58:12:31:04:03:d1:07:f6:d5:cb:e1:67:7e:03:
         5b:87:38:a1:f0:58:d5:81:08:7e:a8:84:ea:c1:ab:95:af:e4:
         30:76:78:d1:57:40:f2:51:1c:0e:2c:ab:19:46:fc:7b:e3:c1:
         84:ea:a9:22:d0:d3:13:ce:f9:b4:08:94:50:a6:c3:d9:ec:15:
         3a:5a:c4:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xG4gr3wyur3lEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
MTgzYjc3NmYtYzc0Ny00MTYyLTgzNWQtM2JhNjM3MzEyNGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut9UAdh8QAnlGaUO7jxqI5c7NOCYA9WQ+HYx
Dj2g4FDk1hEQj2RAvnXbIYPv2WPSu+w26P0oeH8eN7HO7Y+at8lOC9GRXzYijUuy
F6Pb9GYXCSUw2RIRG7EH8W6uptdxtgexcfIsprzvIXjimhfLStE7L+UuKQ1WgIYl
acrqNr5Q4pKZCaKmPInu6dkmiG9Uw+g6X8iZ9hAZGgM74OzPh/O9BW2oPAjsrs/H
MVSi+/828EzSDuC+8jnwieXJe/wVfW/Lf9q+NTSbdyc1rWqbpEmqZdu6+gc25IMX
fXtXiGC+Wf9aPfta3jdn63eUKGeLbVWLlmG2nsrSCt8pqWLLZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEJ40IrlcJnW9E1FlADoOd1D5HcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvZjA2MTEwYWEtZWFiYS0z
YzYzLTg4ZjAtNDZlNmVkYWJlZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFroAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7Tduv+6lPEOrSF1KQUKsBDYs4QG38KhDX3VlV1NcYP8BNu0FyPp3FR
xpjUAjYy3N3kTxP/soEh23Z5Z0ywIr37++r410OqX2f0YLWL4aK1KnuYnL97sdRQ
flmGAVroT5qL0hb5sjgFL6jqs2i/aQhM7i70fTe5gkO8KrLOibNS7EBCAlZuV64E
5V28X+pNeJLX9Hzp7wNVbaoH7OtekIsUy3gAVjknci+lkvKsODab/S3vk++7gJJY
EjEEA9EH9tXL4Wd+A1uHOKHwWNWBCH6ohOrBq5Wv5DB2eNFXQPJRHA4sqxlG/Hvj
wYTqqSLQ0xPO+bQIlFCmw9nsFTpaxEQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:49 2026 by rpki-client