Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa
File:                     e73ff965-f86a-3edd-ab37-915c097c74e3.roa (raw, json)
Hash identifier:          s+mZndq5ZH+Jb3rEQuvN6il52ypzeoAEC7C55CrLePo=
Subject key identifier:   A8:59:99:56:5E:AB:E1:76:3E:4A:3C:4F:5F:A7:42:43:76:2E:D5:02
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D91C01B879CA2499C3A9AF200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     11059
IP address blocks:        216.132.200.0/23 maxlen: 24
                          216.132.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1b:87:9c:a2:49:9c:3a:9a:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=221d844e-9247-4118-aac2-2be215807c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:e6:c7:78:9e:fd:da:14:82:d3:61:e9:01:
                    6a:20:1e:e3:a9:a6:01:76:5a:f5:52:58:82:01:83:
                    03:81:bd:d7:0f:91:28:ad:c6:6f:b6:90:01:23:b8:
                    8d:0f:70:f6:e5:60:c5:b0:44:2c:73:3b:a4:93:91:
                    c8:5d:1c:46:e7:c5:bc:37:b1:c9:bc:aa:98:92:8e:
                    f9:ce:d0:fb:8b:0a:b2:9f:a8:3c:df:83:e2:9e:25:
                    64:c9:8a:7b:f2:99:c7:91:85:e5:12:2f:cc:5a:b1:
                    4d:8d:a5:13:0b:2f:e7:73:a4:19:b4:ea:d9:49:1d:
                    07:c1:ef:14:89:12:ea:1d:32:31:81:c0:5d:3a:aa:
                    02:5f:77:b6:07:38:65:1c:40:42:3f:f5:ba:bf:fd:
                    eb:84:65:07:3e:86:0e:a2:ba:fc:4b:a1:72:ab:64:
                    2f:3e:25:bf:35:4f:24:92:1c:be:f7:9b:b2:db:f3:
                    5e:98:d0:28:99:74:de:45:60:ab:eb:37:1b:c8:57:
                    b5:2d:52:87:a7:dc:0c:f4:c0:b1:52:ae:37:79:ef:
                    dc:36:4d:c3:19:69:d1:64:b9:c0:0c:78:ba:47:42:
                    12:df:df:5d:2e:6d:62:16:cf:6d:10:49:9e:43:4a:
                    d8:f3:27:32:b6:83:b7:19:1b:02:d6:5b:32:d0:10:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:59:99:56:5E:AB:E1:76:3E:4A:3C:4F:5F:A7:42:43:76:2E:D5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e73ff965-f86a-3edd-ab37-915c097c74e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:68:17:6b:63:39:d9:ae:a8:3d:fe:7b:7d:21:07:03:74:73:
         b3:54:fe:94:19:c7:61:7e:ba:e8:41:0c:55:72:23:4a:f6:ac:
         2b:b7:64:2b:d0:5f:01:13:b8:4a:1c:86:3d:3f:f2:89:f8:70:
         47:99:68:c0:7d:c7:55:ff:6d:ad:8f:00:b5:5a:60:4f:f9:66:
         a6:e7:ee:ff:dc:40:a6:61:12:f7:55:46:c8:fd:2f:47:c6:9c:
         98:96:2a:90:c1:40:4b:42:25:43:f6:1d:ae:ec:26:f3:ed:7c:
         50:7d:be:e7:f8:c4:4e:ed:1a:6d:83:64:af:21:b0:97:7c:82:
         12:29:7c:ca:83:a0:f6:18:24:84:2c:5a:6d:10:0f:0c:ea:3c:
         99:40:8b:3c:57:01:31:82:15:f0:3a:1f:98:54:23:1d:38:72:
         fa:72:19:dd:47:b2:7a:9d:c3:27:f1:0c:e7:c6:83:86:c1:ce:
         0a:17:56:6c:5d:41:85:27:d5:11:57:c6:49:c7:23:8e:26:a6:
         51:44:22:17:32:ac:c4:19:0e:65:08:9c:fc:20:4c:d3:ad:71:
         f7:ff:a9:92:12:c7:d0:a2:b2:d4:91:cf:86:cc:06:79:ef:2a:
         10:a5:6e:b3:00:39:7f:c7:98:9e:12:94:7a:9e:8c:6a:27:b3:
         85:0f:54:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBuHnKJJnDqa8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
MjIxZDg0NGUtOTI0Ny00MTE4LWFhYzItMmJlMjE1ODA3YzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHLmx3ie/doUgtNh6QFqIB7jqaYBdlr1UliC
AYMDgb3XD5EorcZvtpABI7iND3D25WDFsEQsczukk5HIXRxG58W8N7HJvKqYko75
ztD7iwqyn6g834PiniVkyYp78pnHkYXlEi/MWrFNjaUTCy/nc6QZtOrZSR0Hwe8U
iRLqHTIxgcBdOqoCX3e2BzhlHEBCP/W6v/3rhGUHPoYOorr8S6Fyq2QvPiW/NU8k
khy+95uy2/NemNAomXTeRWCr6zcbyFe1LVKHp9wM9MCxUq43ee/cNk3DGWnRZLnA
DHi6R0IS399dLm1iFs9tEEmeQ0rY8ycytoO3GRsC1lsy0BATaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhZmVZeq+F2Pko8T1+nQkN2LtUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTczZmY5NjUtZjg2YS0z
ZWRkLWFiMzctOTE1YzA5N2M3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ITIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJoF2tjOdmuqD3+e30hBwN0c7NU/pQZx2F+uuhBDFVyI0r2rCu3ZCvQ
XwETuEochj0/8on4cEeZaMB9x1X/ba2PALVaYE/5Zqbn7v/cQKZhEvdVRsj9L0fG
nJiWKpDBQEtCJUP2Ha7sJvPtfFB9vuf4xE7tGm2DZK8hsJd8ghIpfMqDoPYYJIQs
Wm0QDwzqPJlAizxXATGCFfA6H5hUIx04cvpyGd1HsnqdwyfxDOfGg4bBzgoXVmxd
QYUn1RFXxknHI44mplFEIhcyrMQZDmUInPwgTNOtcff/qZISx9CistSRz4bMBnnv
KhClbrMAOX/HmJ4SlHqejGons4UPVGs=
-----END CERTIFICATE-----
Generated at Wed May 13 16:32:24 2026 by rpki-client