Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c4e4731-0a92-3642-9b80-62ff1b5cbc84.roa
File:                     6c4e4731-0a92-3642-9b80-62ff1b5cbc84.roa (raw, json)
Hash identifier:          DXj/9MAqJC8adCNGWDDry6/6onOmn+Pq6OsQ4nE9afY=
Subject key identifier:   09:43:BE:DB:57:75:3F:66:E3:E3:9E:43:E6:6B:80:BD:2C:30:9E:70
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8DEF97629E4693E58E9C4FE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c4e4731-0a92-3642-9b80-62ff1b5cbc84.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     399955
IP address blocks:        65.86.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:97:62:9e:46:93:e5:8e:9c:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=b03805fb-cf18-4d4a-8d1d-b1918906847f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:72:41:3f:0e:e8:fa:56:81:6f:65:e0:9a:
                    77:24:95:fc:51:5b:f8:04:d4:d9:73:84:d1:1e:1b:
                    1e:f7:bc:5f:28:e9:7f:68:37:24:05:81:cd:96:2d:
                    36:f2:73:af:70:5e:7c:6a:f2:ae:c2:aa:52:93:ff:
                    85:e5:8d:b1:82:45:0c:36:ea:3e:f3:e2:e5:e5:8e:
                    fc:49:b3:65:09:ee:1a:b5:ec:b6:e1:d0:53:b0:e8:
                    42:a2:a3:d1:22:18:19:24:3b:02:35:fd:56:b3:19:
                    68:d1:52:37:35:b6:5d:20:87:45:89:ca:5d:4a:b7:
                    45:55:b1:08:72:42:4f:2e:f1:d9:a2:46:99:d6:43:
                    28:dc:ce:1e:61:75:a4:f0:fb:50:ed:0c:52:cd:e7:
                    96:e4:de:ae:a8:7d:1d:3f:3e:a3:9d:5e:09:a2:c3:
                    5c:74:ec:e4:5e:06:47:ad:dc:e4:09:7a:0f:de:4f:
                    4a:55:7a:bb:80:fe:1d:88:d4:6e:a8:01:61:dd:37:
                    46:22:bd:cc:75:cd:46:56:1e:4b:42:df:fc:19:2d:
                    07:04:67:d4:2b:ae:5a:54:9b:cb:4e:38:b6:78:a6:
                    ec:25:c8:8c:fc:40:33:46:44:ac:cd:fb:27:b4:c3:
                    a8:d5:52:86:75:7c:bf:ab:17:45:0a:0d:0f:9a:12:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:BE:DB:57:75:3F:66:E3:E3:9E:43:E6:6B:80:BD:2C:30:9E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6c4e4731-0a92-3642-9b80-62ff1b5cbc84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:db:f3:41:68:98:2a:27:b1:96:b6:3b:11:e1:47:f2:d3:
         78:f0:88:45:88:23:8d:d6:2a:9a:6b:eb:1d:9c:3b:5f:ac:ef:
         75:f0:03:5d:00:2e:3d:6b:c1:9c:72:43:5f:5d:2c:a1:76:cb:
         85:d6:ca:fb:f0:29:ea:02:85:5c:6d:bb:ae:37:8c:26:c6:aa:
         5b:79:f5:73:1f:1d:e8:31:d6:0a:4c:2d:bc:80:52:ef:18:8f:
         e0:6f:63:63:3e:36:93:37:f8:ea:95:5a:8f:0c:b6:f4:ec:4e:
         f5:c5:fb:82:81:f8:b3:33:cd:2f:54:27:df:33:17:5b:9e:5b:
         b6:f8:4b:0e:49:22:6a:85:cb:5a:8a:9a:28:af:50:6e:a8:2c:
         39:1d:78:4e:c6:ea:2d:51:89:bb:56:4c:ad:17:d0:44:d9:53:
         71:e0:27:c3:da:c6:44:74:11:b6:e1:20:3d:b4:b1:3d:4c:b8:
         f7:c8:e2:03:dc:25:7c:2b:7f:40:28:99:a4:ba:85:7e:d9:08:
         2e:43:bb:57:55:d3:5e:53:a8:f3:59:9e:44:b2:28:12:17:47:
         f7:14:da:b0:af:12:fd:56:e8:21:21:be:3a:72:e5:0d:a5:9e:
         b0:05:70:b3:e2:f8:64:e8:2e:ee:cb:d8:7b:bb:06:16:c1:03:
         95:82:58:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N75dinkaT5Y6cT+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
YjAzODA1ZmItY2YxOC00ZDRhLThkMWQtYjE5MTg5MDY4NDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuJyQT8O6PpWgW9l4Jp3JJX8UVv4BNTZc4TR
Hhse97xfKOl/aDckBYHNli028nOvcF58avKuwqpSk/+F5Y2xgkUMNuo+8+Ll5Y78
SbNlCe4atey24dBTsOhCoqPRIhgZJDsCNf1Wsxlo0VI3NbZdIIdFicpdSrdFVbEI
ckJPLvHZokaZ1kMo3M4eYXWk8PtQ7QxSzeeW5N6uqH0dPz6jnV4JosNcdOzkXgZH
rdzkCXoP3k9KVXq7gP4diNRuqAFh3TdGIr3Mdc1GVh5LQt/8GS0HBGfUK65aVJvL
Tji2eKbsJciM/EAzRkSszfsntMOo1VKGdXy/qxdFCg0PmhITbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlDvttXdT9m4+OeQ+ZrgL0sMJ5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmM0ZTQ3MzEtMGE5Mi0z
NjQyLTliODAtNjJmZjFiNWNiYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIL22/NBaJgqJ7GWtjsR4Ufy03jwiEWII43WKppr6x2cO1+s73XwA10A
Lj1rwZxyQ19dLKF2y4XWyvvwKeoChVxtu643jCbGqlt59XMfHegx1gpMLbyAUu8Y
j+BvY2M+NpM3+OqVWo8MtvTsTvXF+4KB+LMzzS9UJ98zF1ueW7b4Sw5JImqFy1qK
miivUG6oLDkdeE7G6i1RibtWTK0X0ETZU3HgJ8PaxkR0EbbhID20sT1MuPfI4gPc
JXwrf0AomaS6hX7ZCC5Du1dV015TqPNZnkSyKBIXR/cU2rCvEv1W6CEhvjpy5Q2l
nrAFcLPi+GToLu7L2Hu7BhbBA5WCWPA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:57 2026 by rpki-client