Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa
File:                     814ea5e9-f753-336f-a0ba-035609394f31.roa (raw, json)
Hash identifier:          jZ8T5MizAMty1++s8xPUeE+l/RPw3NAAy0BYOXHxhqk=
Subject key identifier:   62:65:39:7A:5B:F3:89:76:C9:22:3C:06:7C:D6:52:24:58:F9:08:95
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E94EA520E45E0CAFA98CF3E80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     19795
IP address blocks:        208.95.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:52:0e:45:e0:ca:fa:98:cf:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=062157cc-f69f-42c5-ae87-cc002384679c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:0a:09:52:6b:38:d0:75:e9:e6:ac:f7:8d:
                    64:a4:be:e2:b4:4b:3e:67:72:3a:07:17:5f:9c:c7:
                    54:b6:d7:58:36:72:1e:ee:08:3b:21:9e:c3:26:32:
                    e8:9c:24:f5:f5:df:a1:2d:2f:dd:71:bb:38:b3:79:
                    be:43:e1:57:5a:7d:2e:e8:8f:34:5e:c4:9d:ba:4f:
                    bc:5a:95:9f:72:db:f9:88:80:fc:62:6a:bd:67:19:
                    46:6d:f1:57:c8:04:ad:34:18:06:11:7d:81:cc:bc:
                    5f:ca:ee:9c:16:b7:de:24:86:1b:a2:0e:0d:9b:6b:
                    69:12:7b:c6:68:38:dd:63:c8:41:be:8b:a8:1f:27:
                    32:c2:03:5d:3c:96:fe:51:db:13:93:b6:a9:37:36:
                    8d:1d:dc:b6:dd:ec:44:e7:8d:fe:fc:2d:b0:22:01:
                    bf:72:fd:f8:13:43:24:95:17:9b:6d:06:11:34:3d:
                    09:93:97:a8:f1:57:6d:e9:de:67:07:39:52:b9:a6:
                    8b:bb:ac:1b:d6:fb:68:6a:ba:14:9e:76:96:89:c1:
                    c0:f5:c2:fe:b9:ac:2b:00:fe:e3:2a:82:cf:2d:64:
                    18:08:8b:0d:92:b1:cd:3c:51:08:ee:b3:52:d3:59:
                    69:44:c5:6f:db:39:dc:b2:e5:1e:f2:6a:2b:5a:d5:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:39:7A:5B:F3:89:76:C9:22:3C:06:7C:D6:52:24:58:F9:08:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:76:07:a3:52:40:11:d6:65:09:be:16:75:c7:9c:3d:86:
         60:0e:3e:ac:94:8a:f4:5f:81:a1:18:4a:06:09:64:d3:c7:35:
         a4:5f:8c:43:49:c1:99:2b:bb:91:7e:1a:20:e6:1e:52:7f:54:
         33:06:4a:cf:44:2d:33:a2:f0:9e:0d:39:8f:3a:e3:03:07:c9:
         6a:72:61:57:d9:27:4a:86:14:44:c4:cf:d3:77:ec:c5:4d:cb:
         90:b5:bb:55:64:66:34:a1:2d:0b:3d:43:88:2f:3b:6c:67:64:
         fc:5a:0e:a0:f8:8f:4b:4a:6d:32:31:3a:d3:dd:da:0e:82:60:
         f1:be:f0:c3:ad:70:ae:dc:50:49:bd:de:fa:dd:43:c1:2d:22:
         48:c9:dc:62:14:0d:33:00:bc:3d:73:47:f1:60:cd:20:b2:c8:
         1b:db:1b:3b:bc:ec:21:82:d8:10:6b:9a:f9:7d:8f:98:13:27:
         6b:65:79:c4:af:08:db:a3:e1:b1:c5:14:15:5f:a6:bd:3c:00:
         53:91:27:25:38:b9:2c:97:fd:b9:03:ec:9b:74:7d:ad:15:45:
         af:6e:7c:c3:c2:95:f7:0a:d0:9f:59:cd:0a:d8:0b:24:d7:32:
         ec:78:14:27:c4:02:3e:26:38:bb:3e:f9:46:54:7a:e5:6c:f2:
         7a:2e:23:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lIOReDK+pjPPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MDYyMTU3Y2MtZjY5Zi00MmM1LWFlODctY2MwMDIzODQ2NzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg0KCVJrONB16eas941kpL7itEs+Z3I6Bxdf
nMdUttdYNnIe7gg7IZ7DJjLonCT19d+hLS/dcbs4s3m+Q+FXWn0u6I80XsSduk+8
WpWfctv5iID8Ymq9ZxlGbfFXyAStNBgGEX2BzLxfyu6cFrfeJIYbog4Nm2tpEnvG
aDjdY8hBvouoHycywgNdPJb+UdsTk7apNzaNHdy23exE543+/C2wIgG/cv34E0Mk
lRebbQYRND0Jk5eo8Vdt6d5nBzlSuaaLu6wb1vtoaroUnnaWicHA9cL+uawrAP7j
KoLPLWQYCIsNkrHNPFEI7rNS01lpRMVv2zncsuUe8morWtU88QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJlOXpb84l2ySI8BnzWUiRY+QiVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODE0ZWE1ZTktZjc1My0z
MzZmLWEwYmEtMDM1NjA5Mzk0ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUqdgejUkAR1mUJvhZ1x5w9hmAOPqyUivRfgaEYSgYJZNPHNaRfjENJ
wZkru5F+GiDmHlJ/VDMGSs9ELTOi8J4NOY864wMHyWpyYVfZJ0qGFETEz9N37MVN
y5C1u1VkZjShLQs9Q4gvO2xnZPxaDqD4j0tKbTIxOtPd2g6CYPG+8MOtcK7cUEm9
3vrdQ8EtIkjJ3GIUDTMAvD1zR/FgzSCyyBvbGzu87CGC2BBrmvl9j5gTJ2tlecSv
CNuj4bHFFBVfpr08AFORJyU4uSyX/bkD7Jt0fa0VRa9ufMPClfcK0J9ZzQrYCyTX
Mux4FCfEAj4mOLs++UZUeuVs8nouI9w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:42 2026 by rpki-client