Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa
File:                     be1b1e98-e9da-3e25-958c-00742b2232fb.roa (raw, json)
Hash identifier:          ng4cr+3wEXURG85beC5NYqvYdYqQEh6fYMfBOwWBwrY=
Subject key identifier:   51:31:61:4A:9F:7A:3A:72:6E:42:5E:8B:AA:14:50:90:5F:3C:E3:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DCC606A1CF4C19B19CE459B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     0
IP address blocks:        67.104.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6a:1c:f4:c1:9b:19:ce:45:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=f177bc0b-54fe-44f1-85df-63caf5d4107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ac:3d:d5:8d:62:36:4d:10:52:5c:aa:fa:
                    4f:5f:25:f1:13:ca:3e:33:9f:6d:1a:bf:b6:e7:e2:
                    6a:c6:79:20:40:9a:62:ff:19:fb:13:15:39:94:d3:
                    df:fd:df:11:f1:de:03:74:16:c0:60:94:87:35:df:
                    62:8c:69:af:9a:aa:97:4e:65:1b:22:54:c3:cf:6e:
                    6b:73:a0:e8:78:55:cd:68:c2:0c:9c:64:aa:a7:f6:
                    a4:83:d9:a6:b2:5e:7a:24:f7:d1:dc:02:c5:54:0d:
                    15:95:5d:1a:00:2b:ae:50:16:98:29:18:da:cb:c3:
                    b2:81:b5:87:96:fe:a8:fb:1b:bc:05:97:5b:e7:e2:
                    61:2b:dd:92:6a:92:2a:df:8c:2b:7d:33:55:ed:9d:
                    dc:8f:96:67:f9:20:90:25:e0:0b:f9:fc:a7:0b:b8:
                    b5:df:0c:8d:d8:1b:c6:6f:21:ca:fb:57:8e:02:40:
                    41:67:98:89:a3:75:3b:58:73:8a:c7:2d:0d:d3:05:
                    07:bd:41:87:55:9a:a8:a7:7f:01:31:3d:11:a5:a3:
                    b7:a1:4e:94:0c:c9:ce:7f:c9:4d:c5:d1:14:7f:2b:
                    30:32:85:6f:35:3b:89:21:b4:8f:f1:87:14:ef:55:
                    72:c0:db:c8:b6:af:52:79:c3:4f:df:ac:cf:a7:cb:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:61:4A:9F:7A:3A:72:6E:42:5E:8B:AA:14:50:90:5F:3C:E3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be1b1e98-e9da-3e25-958c-00742b2232fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.104.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:53:09:e4:6c:f3:e9:0b:ad:d7:e9:f7:a3:da:67:3e:bf:35:
         bb:42:54:49:70:6e:09:3d:31:c2:1d:e1:94:65:4a:9a:01:1e:
         74:47:5a:e9:1f:2f:11:9b:ae:68:87:2e:37:16:09:11:24:4d:
         92:3b:84:e7:92:0a:77:0d:a6:ba:66:85:04:64:df:56:b1:98:
         2b:d6:66:be:8d:99:48:ba:e7:7b:82:49:38:0b:77:23:69:6b:
         89:d0:36:a7:e2:35:58:66:7b:28:ff:72:b9:f8:88:e1:34:be:
         f4:71:cb:73:19:40:99:53:5c:f1:58:75:b7:78:45:be:63:60:
         8e:dc:99:66:df:5a:07:3d:41:39:da:7b:3b:69:c2:0b:18:cb:
         43:2f:6e:bf:62:c0:50:cc:96:ba:90:cd:fe:11:ff:7a:61:2b:
         00:e3:a9:8c:64:47:6d:03:5a:fd:4e:07:e3:06:52:b8:19:cf:
         9d:98:f5:e7:ca:b1:13:2a:a5:3a:47:77:ca:1d:c5:52:ba:e5:
         f9:d6:e1:f9:3b:da:9d:7b:aa:7d:43:0b:a5:3e:09:ed:49:02:
         86:8a:1c:6e:84:b4:24:4f:35:25:32:00:89:a5:60:bb:11:a2:
         f2:e1:76:76:be:cb:d8:ac:87:fd:51:7e:96:e2:05:3e:6d:db:
         0f:b2:74:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGoc9MGbGc5Fm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
ZjE3N2JjMGItNTRmZS00NGYxLTg1ZGYtNjNjYWY1ZDQxMDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtisPdWNYjZNEFJcqvpPXyXxE8o+M59tGr+2
5+JqxnkgQJpi/xn7ExU5lNPf/d8R8d4DdBbAYJSHNd9ijGmvmqqXTmUbIlTDz25r
c6DoeFXNaMIMnGSqp/akg9mmsl56JPfR3ALFVA0VlV0aACuuUBaYKRjay8OygbWH
lv6o+xu8BZdb5+JhK92SapIq34wrfTNV7Z3cj5Zn+SCQJeAL+fynC7i13wyN2BvG
byHK+1eOAkBBZ5iJo3U7WHOKxy0N0wUHvUGHVZqop38BMT0RpaO3oU6UDMnOf8lN
xdEUfyswMoVvNTuJIbSP8YcU71VywNvItq9SecNP36zPp8sYYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFExYUqfejpybkJei6oUUJBfPONkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmUxYjFlOTgtZTlkYS0z
ZTI1LTk1OGMtMDA3NDJiMjIzMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ2gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFTCeRs8+kLrdfp96PaZz6/NbtCVElwbgk9McId4ZRlSpoBHnRHWukf
LxGbrmiHLjcWCREkTZI7hOeSCncNprpmhQRk31axmCvWZr6NmUi653uCSTgLdyNp
a4nQNqfiNVhmeyj/crn4iOE0vvRxy3MZQJlTXPFYdbd4Rb5jYI7cmWbfWgc9QTna
eztpwgsYy0Mvbr9iwFDMlrqQzf4R/3phKwDjqYxkR20DWv1OB+MGUrgZz52Y9efK
sRMqpTpHd8odxVK65fnW4fk72p17qn1DC6U+Ce1JAoaKHG6EtCRPNSUyAImlYLsR
ovLhdna+y9ish/1RfpbiBT5t2w+ydDI=
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:42 2026 by rpki-client