Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa
File:                     537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa (raw, json)
Hash identifier:          0cdXzbxBRnOYyJ7QoHrfqRNdVg6lG+DIjvjmIZZNzVM=
Subject key identifier:   6E:66:B2:F4:44:F7:9D:3F:20:9A:B9:27:AA:6F:D9:CA:C4:3A:F2:88
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F4328584D492A5C5F4E55DCF6A4F73F80
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     32425
IP address blocks:        208.73.136.0/21 maxlen: 24
                          2620:a8:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:5c:5f:4e:55:dc:f6:a4:f7:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=bdcad53a-989b-4118-a884-f98070c7a2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:ad:bb:b8:5a:fb:25:4d:5f:49:e7:12:7b:
                    f1:d6:0f:af:51:37:b6:6c:e4:b9:8e:6e:34:ad:2c:
                    ad:30:77:29:18:3b:4b:6d:cb:49:40:c7:a6:1b:72:
                    f7:34:05:dd:f9:61:52:22:5d:37:a7:b0:ca:b5:b7:
                    2f:83:db:fd:6d:43:6c:ae:ae:b8:bd:d0:c6:fd:3f:
                    49:02:e7:b2:66:2f:73:4e:a8:9f:1d:a6:57:c0:c9:
                    c0:ed:f3:36:d5:a7:cf:b1:ae:15:79:b9:ee:b4:7b:
                    32:df:13:99:13:a1:99:ec:20:17:5c:e3:0d:46:da:
                    7b:94:8a:50:94:28:e2:88:d2:8f:88:e4:be:b1:6a:
                    a1:f2:22:36:00:cf:d3:78:86:bb:30:0c:81:67:60:
                    db:cf:79:0a:f0:91:86:f1:95:ee:4d:44:5f:7e:b8:
                    90:8f:0d:31:c2:ca:c8:74:d8:8f:d6:2a:dc:87:e7:
                    91:f9:ab:3b:08:d2:46:e8:02:17:66:a8:28:f3:83:
                    b1:6f:da:96:2a:9e:af:43:62:24:ad:c9:82:8b:29:
                    a2:d2:70:e4:fb:35:90:70:3c:c4:4c:7b:46:85:36:
                    06:70:6f:81:4d:53:66:15:7b:3e:84:87:ad:9d:79:
                    a5:ce:f0:73:6b:86:8e:b1:2b:94:76:d7:4a:28:05:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:66:B2:F4:44:F7:9D:3F:20:9A:B9:27:AA:6F:D9:CA:C4:3A:F2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.136.0/21
                IPv6:
                  2620:a8:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:c1:65:70:b9:e1:91:fc:26:a9:02:1e:50:8d:3c:80:36:
         c1:37:ea:3d:72:7c:4f:dc:73:58:99:cd:b7:b1:21:7e:d0:73:
         3b:3e:ac:26:a8:b9:4d:12:e1:66:2f:05:2c:28:5c:bd:b8:a6:
         d4:2d:77:a7:a5:2e:42:0c:0c:6a:13:bc:19:a3:df:e9:65:8b:
         2e:73:7d:29:98:ba:e3:00:60:5a:6f:51:bb:30:f3:cf:33:40:
         bf:37:de:ea:b3:a5:9d:9b:7c:52:e6:74:c1:0a:07:b3:ca:a0:
         fa:32:9c:8c:98:6f:81:a9:b6:9d:44:29:90:50:13:09:50:9e:
         c1:4e:c5:a4:a3:52:15:19:6c:08:64:06:f2:f9:6e:dc:b0:a6:
         49:8e:54:ac:7d:0a:79:32:86:fe:1a:7f:6c:43:f8:de:d0:85:
         6c:0f:7e:50:4f:26:df:09:c7:89:aa:6a:4b:56:c3:ef:a7:5c:
         fb:08:9a:5f:fa:ec:da:d0:83:63:0a:63:12:22:d3:d6:c0:c7:
         0f:eb:29:c9:3e:61:58:29:51:8d:52:e9:bc:e9:3a:2f:4f:5e:
         02:e9:64:7b:fb:1d:8f:13:3c:57:bf:86:09:10:da:7b:c4:f8:
         c3:90:c3:50:82:eb:b2:04:f1:bf:ee:af:cd:35:70:2e:2e:5b:
         c6:ba:e4:b2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1JKlxfTlXc9qT3P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm
ZDk0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
YmRjYWQ1M2EtOTg5Yi00MTE4LWE4ODQtZjk4MDcwYzdhMmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKtu7ha+yVNX0nnEnvx1g+vUTe2bOS5jm40
rSytMHcpGDtLbctJQMemG3L3NAXd+WFSIl03p7DKtbcvg9v9bUNsrq64vdDG/T9J
AueyZi9zTqifHaZXwMnA7fM21afPsa4VebnutHsy3xOZE6GZ7CAXXOMNRtp7lIpQ
lCjiiNKPiOS+sWqh8iI2AM/TeIa7MAyBZ2Dbz3kK8JGG8ZXuTURffriQjw0xwsrI
dNiP1irch+eR+as7CNJG6AIXZqgo84Oxb9qWKp6vQ2IkrcmCiymi0nDk+zWQcDzE
THtGhTYGcG+BTVNmFXs+hIetnXmlzvBza4aOsSuUdtdKKAVE+QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFG5msvRE950/IJq5J6pv2crEOvKIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy
OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvNTM3YmQzYjItZmUzNi0z
NmI0LWI1YjItZmZhNTlkZTM0ZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw
NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2
ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0
YjM2NmZkOTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQD0EmIMA8E
AgACMAkDBwAmIACowAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZzrBZXC54ZH8JqkCHlCNPIA2wTfqPXJ8
T9xzWJnNt7EhftBzOz6sJqi5TRLhZi8FLChcvbim1C13p6UuQgwMahO8GaPf6WWL
LnN9KZi64wBgWm9RuzDzzzNAvzfe6rOlnZt8UuZ0wQoHs8qg+jKcjJhvgam2nUQp
kFATCVCewU7FpKNSFRlsCGQG8vlu3LCmSY5UrH0KeTKG/hp/bEP43tCFbA9+UE8m
3wnHiapqS1bD76dc+wiaX/rs2tCDYwpjEiLT1sDHD+spyT5hWClRjVLpvOk6L09e
Aulke/sdjxM8V7+GCRDae8T4w5DDUILrsgTxv+6vzTVwLi5bxrrksg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:05:54 2026 by rpki-client