Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662720ea-8fbe-3010-a932-97297d27ae73.roa
File:                     662720ea-8fbe-3010-a932-97297d27ae73.roa (raw, json)
Hash identifier:          fy7C4Tz/z/GE3yRUc1x38lF1b9RiQk+oMZdgKNxpvQE=
Subject key identifier:   4C:12:3B:95:CE:B0:C6:84:AC:63:DA:A8:2A:BD:8C:1A:04:16:AE:AD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F626CAC892EC33A7FEB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662720ea-8fbe-3010-a932-97297d27ae73.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     23222
IP address blocks:        192.62.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:62:6c:ac:89:2e:c3:3a:7f:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=7545617f-d26b-4110-8035-c5dd7815fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:1a:df:2f:79:e1:a2:62:dd:2c:41:f6:22:
                    01:d4:7b:b7:7b:50:03:0b:75:38:e1:a5:d4:55:92:
                    be:f4:1a:0a:3d:b1:24:7b:c7:14:8b:39:ea:1c:03:
                    9b:bd:d8:b9:38:1b:a3:aa:89:ac:07:9b:20:dc:04:
                    24:09:b1:b2:e5:f3:7b:c2:1e:25:04:cb:a2:28:77:
                    dc:d7:a4:a4:2d:f1:67:54:49:87:3a:d7:9b:ab:71:
                    95:bf:13:04:b8:3a:f1:ab:83:2e:63:b0:df:81:7c:
                    cf:b8:36:14:44:ad:a0:14:0e:c1:b8:75:5b:ff:a7:
                    0c:93:1a:33:65:af:d4:fa:46:92:f0:4d:32:93:e7:
                    9a:47:38:3c:87:6f:72:0b:2e:c3:e7:b3:d9:6e:6a:
                    eb:d1:af:a9:38:c3:d9:35:0d:ae:e0:3e:29:5e:6c:
                    dd:42:c5:cc:16:ad:d8:cf:37:ac:04:5c:e8:cb:b5:
                    1d:a0:62:a2:c8:e6:f1:18:6a:42:38:d8:f0:6b:54:
                    52:65:a1:cb:41:7b:d5:43:ef:6d:ac:80:79:9d:9d:
                    56:0d:17:2e:78:d5:81:34:5e:a1:e7:6a:ff:d6:58:
                    8a:2b:f7:62:a7:66:ca:f1:e8:39:86:48:91:ac:3d:
                    75:11:54:fa:0c:a4:b8:77:be:0e:fa:67:80:69:9b:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:3B:95:CE:B0:C6:84:AC:63:DA:A8:2A:BD:8C:1A:04:16:AE:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/662720ea-8fbe-3010-a932-97297d27ae73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:05:89:57:cb:68:e1:34:2a:1e:12:a2:10:41:20:51:71:f9:
         a3:31:d3:da:75:f5:29:04:34:c7:db:e2:ce:a2:b9:27:29:8d:
         2d:1b:20:62:46:c9:2b:7a:a1:cd:6a:ec:36:ca:7d:fe:4d:c2:
         b2:90:ca:24:bc:9a:78:21:24:41:7b:86:74:28:ef:75:5f:b2:
         57:89:fe:3c:11:db:37:d6:2a:e3:3b:5c:bf:45:39:22:10:a5:
         23:61:04:14:ab:db:5c:e2:c0:42:cc:49:84:ff:6b:61:46:0b:
         d7:b6:60:4b:04:d4:73:5e:7f:e3:b6:24:f0:63:93:83:86:9d:
         a2:e4:57:ce:ad:58:3b:9e:7d:39:4c:a6:75:51:df:07:6c:06:
         01:1d:62:b9:8a:24:8b:a2:26:18:2c:0b:3c:5c:e3:79:e0:21:
         e3:c1:4b:37:1d:1b:0c:b9:e5:c0:9d:53:7e:b5:3d:f5:fa:ef:
         75:2d:d2:7a:eb:dd:81:b6:36:81:48:1e:c2:61:a7:64:1e:60:
         3e:be:46:f6:1c:2f:81:1f:f0:ac:b4:d3:43:dd:4a:3c:4c:00:
         b0:f9:18:83:f6:d9:55:06:0d:10:e2:ab:1d:48:9b:90:1b:7a:
         2c:e5:24:19:89:3e:50:b5:d2:92:d9:c2:7b:6b:8f:ee:e9:1b:
         15:fc:2f:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD2JsrIkuwzp/6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk
NzU0NTYxN2YtZDI2Yi00MTEwLTgwMzUtYzVkZDc4MTVmZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuwa3y954aJi3SxB9iIB1Hu3e1ADC3U44aXU
VZK+9BoKPbEke8cUiznqHAObvdi5OBujqomsB5sg3AQkCbGy5fN7wh4lBMuiKHfc
16SkLfFnVEmHOtebq3GVvxMEuDrxq4MuY7DfgXzPuDYURK2gFA7BuHVb/6cMkxoz
Za/U+kaS8E0yk+eaRzg8h29yCy7D57PZbmrr0a+pOMPZNQ2u4D4pXmzdQsXMFq3Y
zzesBFzoy7UdoGKiyObxGGpCONjwa1RSZaHLQXvVQ+9trIB5nZ1WDRcueNWBNF6h
52r/1liKK/dip2bK8eg5hkiRrD11EVT6DKS4d74O+meAaZu6pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwSO5XOsMaErGPaqCq9jBoEFq6tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjYyNzIwZWEtOGZiZS0z
MDEwLWE5MzItOTcyOTdkMjdhZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwD6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAFiVfLaOE0Kh4SohBBIFFx+aMx09p19SkENMfb4s6iuScpjS0bIGJG
ySt6oc1q7DbKff5NwrKQyiS8mnghJEF7hnQo73VfsleJ/jwR2zfWKuM7XL9FOSIQ
pSNhBBSr21ziwELMSYT/a2FGC9e2YEsE1HNef+O2JPBjk4OGnaLkV86tWDuefTlM
pnVR3wdsBgEdYrmKJIuiJhgsCzxc43ngIePBSzcdGwy55cCdU361PfX673Ut0nrr
3YG2NoFIHsJhp2QeYD6+RvYcL4Ef8Ky000PdSjxMALD5GIP22VUGDRDiqx1Im5Ab
eizlJBmJPlC10pLZwntrj+7pGxX8L2I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:21 2026 by rpki-client