Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa
File:                     956684d0-4ee8-376e-8434-580d51955390.roa (raw, json)
Hash identifier:          rAO2XbqsDaxRUdRERxJW06wAsprv2LClGm8KphFl2sM=
Subject key identifier:   FF:C1:D1:65:B7:8F:57:91:43:CD:9E:5E:C9:F5:E0:08:BA:30:2A:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D20AF5381FC8B3AB515413000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     63949
IP address blocks:        172.237.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:53:81:fc:8b:3a:b5:15:41:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=fa555b88-9852-4f54-a400-793d5046f19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:61:f3:7a:10:d8:3d:2a:c8:b7:ed:39:9c:
                    38:14:d3:c5:a2:46:74:43:21:a1:4e:d2:a8:57:41:
                    35:a8:f9:a1:97:ea:b9:4c:94:a5:95:34:d1:1b:3a:
                    80:a3:46:b1:e2:7f:51:de:36:88:16:42:f8:bb:0a:
                    28:c1:22:37:1e:91:e6:00:f4:21:06:82:6a:42:87:
                    fe:12:e1:60:02:e9:c0:f6:c2:ad:86:17:54:9b:cf:
                    7f:07:a7:00:a3:b2:4e:1f:5d:19:c6:60:b6:f6:2c:
                    59:8c:65:41:49:82:eb:54:d4:3e:f5:dd:d4:97:7d:
                    c8:95:5e:0a:68:fd:05:a1:7c:be:b9:f2:9d:64:65:
                    8d:c4:96:7b:52:66:ba:7e:5f:29:43:b1:71:22:52:
                    57:89:d9:ec:b1:30:db:ba:93:fa:da:8a:06:1d:a9:
                    ce:b2:a1:60:b5:33:16:24:80:3f:6a:1e:84:ab:5d:
                    53:75:5d:fd:23:ae:1e:5a:40:20:c5:78:41:93:79:
                    75:29:78:82:29:86:ad:85:20:27:56:3c:a0:f0:f5:
                    14:64:01:f3:69:af:b1:d7:a4:c4:bb:80:b7:73:b1:
                    5f:0a:9f:41:b9:9e:bb:01:c1:38:1b:80:37:59:49:
                    5c:2f:7e:ad:87:17:e6:2c:7c:69:a7:d7:c0:cb:fd:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C1:D1:65:B7:8F:57:91:43:CD:9E:5E:C9:F5:E0:08:BA:30:2A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.237.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:45:c7:26:c4:19:f4:8e:4a:f0:3c:c6:18:de:71:19:d4:
         9a:4d:08:9f:d4:9b:72:97:e4:45:2a:e7:ae:93:f3:a8:53:fc:
         63:5e:23:f3:fc:b6:c2:78:8f:e6:e1:4a:ad:0d:56:c8:c2:a2:
         f2:a3:61:66:c6:d4:e3:01:a4:73:28:3a:0a:30:f8:58:9d:8f:
         d8:eb:77:74:ee:10:84:64:ab:16:75:25:ed:77:59:7f:3d:e1:
         22:d2:e0:5d:08:01:f7:c8:89:8b:c0:0d:e8:95:65:2b:3d:09:
         88:f3:e6:d7:05:b9:7f:8d:09:a9:78:9a:eb:50:2e:1b:c2:8c:
         66:27:4b:06:11:26:80:92:7f:df:93:77:b1:1e:81:df:e4:06:
         ee:28:84:9a:5b:11:d8:27:f8:57:81:49:ec:3d:98:9f:34:80:
         0f:95:21:b6:57:f5:61:9b:8f:ea:9e:44:24:c6:47:26:0f:6f:
         70:ed:4e:6e:7f:64:69:3a:31:03:b6:51:fc:f2:5d:6d:4c:6d:
         e4:20:5e:89:7f:34:67:59:84:66:a8:84:cd:c3:fc:36:aa:c7:
         03:dc:f5:06:8d:e5:07:3e:48:c9:75:ac:dc:bd:68:a0:61:58:
         92:8d:e9:89:9a:22:eb:b5:9a:01:c0:15:70:05:9d:3f:1e:3c:
         bb:14:84:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1OB/Is6tRVBMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZmE1NTViODgtOTg1Mi00ZjU0LWE0MDAtNzkzZDUwNDZmMTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Bh83oQ2D0qyLftOZw4FNPFokZ0QyGhTtKo
V0E1qPmhl+q5TJSllTTRGzqAo0ax4n9R3jaIFkL4uwoowSI3HpHmAPQhBoJqQof+
EuFgAunA9sKthhdUm89/B6cAo7JOH10ZxmC29ixZjGVBSYLrVNQ+9d3Ul33IlV4K
aP0FoXy+ufKdZGWNxJZ7Uma6fl8pQ7FxIlJXidnssTDbupP62ooGHanOsqFgtTMW
JIA/ah6Eq11TdV39I64eWkAgxXhBk3l1KXiCKYathSAnVjyg8PUUZAHzaa+x16TE
u4C3c7FfCp9BuZ67AcE4G4A3WUlcL36thxfmLHxpp9fAy/2zhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/B0WW3j1eRQ82eXsn14Ai6MCq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU2Njg0ZDAtNGVlOC0z
NzZlLTg0MzQtNTgwZDUxOTU1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqXRccmxBn0jkrwPMYY3nEZ1JpNCJ/Um3KX5EUq566T86hT/GNeI/P8
tsJ4j+bhSq0NVsjCovKjYWbG1OMBpHMoOgow+Fidj9jrd3TuEIRkqxZ1Je13WX89
4SLS4F0IAffIiYvADeiVZSs9CYjz5tcFuX+NCal4mutQLhvCjGYnSwYRJoCSf9+T
d7Eegd/kBu4ohJpbEdgn+FeBSew9mJ80gA+VIbZX9WGbj+qeRCTGRyYPb3DtTm5/
ZGk6MQO2UfzyXW1MbeQgXol/NGdZhGaohM3D/DaqxwPc9QaN5Qc+SMl1rNy9aKBh
WJKN6YmaIuu1mgHAFXAFnT8ePLsUhPU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:59 2026 by rpki-client