Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
File:                     547db2f7-b235-3247-a2f5-f5afd418ff69.roa (raw, json)
Hash identifier:          oqtdPtSmwaCMZho/2gn3O3yj6eFEHmZ3c/bdCCp6r9w=
Subject key identifier:   AB:3F:27:A5:3D:A9:CA:5C:61:63:FC:7A:CF:64:D3:AE:D1:FB:CF:B7
Certificate issuer:       /CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
Certificate serial:       010D0C9F4328584DAF101A9EFE3FB7F4267D9044
Authority key identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     30027
IP address blocks:        68.232.48.0/20 maxlen: 24
                          192.160.54.0/24 maxlen: 24
                          207.195.128.0/19 maxlen: 24
                          208.84.76.0/22 maxlen: 24
                          216.144.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1a:9e:fe:3f:b7:f4:26:7d:90:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=06161fd8-d45b-40cc-a114-7577dabedd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:ae:95:d9:5c:6f:f0:2f:5e:2f:0c:5d:43:
                    99:f6:93:61:8c:18:38:57:d7:41:e5:8c:91:4d:50:
                    7a:c8:93:b3:d8:ef:06:c1:39:cc:a3:44:66:00:92:
                    8b:cd:1b:4e:c3:2a:39:70:e1:7f:92:eb:7a:95:e6:
                    f5:1d:a0:0e:66:8e:2e:cf:d7:83:fa:2e:11:a0:c3:
                    95:d8:21:11:a5:52:6e:77:1e:2c:35:64:58:a6:ae:
                    c4:59:af:27:cc:d6:0a:98:5d:45:df:44:4c:61:17:
                    4f:46:ca:1a:fd:b0:73:ce:ec:81:f3:57:a9:ff:e5:
                    63:1f:16:0b:9b:99:23:b9:1a:a7:a1:f7:ae:f5:ea:
                    03:37:d7:74:34:53:77:6a:f3:21:40:9c:07:e7:71:
                    59:d4:03:94:47:7c:aa:7f:d4:dd:66:37:2d:9b:38:
                    34:1a:a3:55:83:31:b4:96:41:4a:a1:8d:be:e9:84:
                    c2:6c:b4:79:14:f4:1b:d0:5e:f2:33:13:64:b8:60:
                    9a:23:00:74:6b:15:89:ff:09:03:ac:55:50:f2:14:
                    e8:4a:eb:b8:40:15:62:ca:2d:69:fd:54:82:bb:1b:
                    a4:67:2c:97:e3:2f:c6:c1:e9:f2:3d:2b:c0:e2:cb:
                    8e:83:2e:d0:d9:77:25:5b:4c:fd:1b:a1:88:d5:7c:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3F:27:A5:3D:A9:CA:5C:61:63:FC:7A:CF:64:D3:AE:D1:FB:CF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl

            X509v3 Authority Key Identifier:
                keyid:B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.48.0/20
                  192.160.54.0/24
                  207.195.128.0/19
                  208.84.76.0/22
                  216.144.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:45:ef:99:71:c2:cf:8c:c2:bf:09:d3:24:57:99:b3:17:
         78:1b:3b:c8:98:69:e7:5b:0b:a1:8c:04:26:f5:45:ee:01:99:
         2d:83:41:82:de:ea:d0:54:da:b3:41:b3:6c:38:f0:5d:db:5f:
         f4:30:26:71:91:25:30:58:61:21:a7:2c:7b:46:60:2f:62:41:
         1c:16:10:51:bb:47:96:26:76:e1:d3:97:ad:ed:ec:e6:63:40:
         c5:09:2f:ab:3d:52:0e:53:f5:8a:d6:20:4c:c9:4e:ae:00:23:
         c0:ff:ac:a7:05:eb:da:62:98:6c:7a:31:f8:8f:84:68:ae:a7:
         dd:2e:b5:4b:c0:5f:42:2c:0d:c1:5e:eb:52:be:b5:01:1f:78:
         43:f7:62:b5:52:82:2a:0b:73:c5:4f:24:ba:a8:70:4c:dc:f2:
         c1:80:c4:9f:f2:f3:a2:21:95:ed:2e:75:b4:9f:4c:cb:d6:ea:
         c4:e9:68:b7:b3:44:91:3a:28:bf:71:3d:03:55:32:47:ad:67:
         e0:3e:f4:c8:a8:db:a0:50:24:67:bd:ed:4a:0e:16:5b:08:6a:
         83:f4:ad:b0:76:a3:77:00:40:66:00:fa:4c:5e:ef:2a:81:39:
         de:5d:2b:b6:6e:6d:f6:d2:08:b9:d3:b9:d2:c0:80:ce:bf:17:
         fc:67:a0:da
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE2vEBqe/j+39CZ9kEQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk0OGFmYmMtMDE2OC00M2VkLThlNGItYTBjYzVkMGUx
NTA0MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDYxNjFmZDgtZDQ1Yi00MGNjLWExMTQtNzU3N2RhYmVkZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIquldlcb/AvXi8MXUOZ9pNhjBg4V9dB5YyR
TVB6yJOz2O8GwTnMo0RmAJKLzRtOwyo5cOF/kut6leb1HaAOZo4uz9eD+i4RoMOV
2CERpVJudx4sNWRYpq7EWa8nzNYKmF1F30RMYRdPRsoa/bBzzuyB81ep/+VjHxYL
m5kjuRqnofeu9eoDN9d0NFN3avMhQJwH53FZ1AOUR3yqf9TdZjctmzg0GqNVgzG0
lkFKoY2+6YTCbLR5FPQb0F7yMxNkuGCaIwB0axWJ/wkDrFVQ8hToSuu4QBViyi1p
/VSCuxukZyyX4y/GwenyPSvA4suOgy7Q2XclW0z9G6GI1XxAhQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFKs/J6U9qcpcYWP8es9k067R+8+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iOTQ4
YWZiYy0wMTY4LTQzZWQtOGU0Yi1hMGNjNWQwZTE1MDQvNTQ3ZGIyZjctYjIzNS0z
MjQ3LWEyZjUtZjVhZmQ0MThmZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjk0OGFmYmMtMDE2OC00M2VkLThl
NGItYTBjYzVkMGUxNTA0L2I5NDhhZmJjLTAxNjgtNDNlZC04ZTRiLWEwY2M1ZDBl
MTUwNC5jcmwwHwYDVR0jBBgwFoAUs5ZTQHBrqrLE6HzQ5QCqsu15/nkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iOTQ4YWZiYy0wMTY4LTQzZWQtOGU0Yi1hMGNj
NWQwZTE1MDQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEROgwAwQA
wKA2AwQFz8OAAwQC0FRMAwQE2JBgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6GRe+ZccLPjMK/CdMkV5mz
F3gbO8iYaedbC6GMBCb1Re4BmS2DQYLe6tBU2rNBs2w48F3bX/QwJnGRJTBYYSGn
LHtGYC9iQRwWEFG7R5YmduHTl63t7OZjQMUJL6s9Ug5T9YrWIEzJTq4AI8D/rKcF
69pimGx6MfiPhGiup90utUvAX0IsDcFe61K+tQEfeEP3YrVSgioLc8VPJLqocEzc
8sGAxJ/y86Ihle0udbSfTMvW6sTpaLezRJE6KL9xPQNVMketZ+A+9Mio26BQJGe9
7UoOFlsIaoP0rbB2o3cAQGYA+kxe7yqBOd5dK7ZubfbSCLnTudLAgM6/F/xnoNo=
-----END CERTIFICATE-----
Generated at Wed May 13 14:20:16 2026 by rpki-client