Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
File:                     dfc21920-33d3-36af-9d3d-f32de48afd1f.roa (raw, json)
Hash identifier:          srU5hfvAq5njJghTfpn1z4MRLf4ZWejWK5UCiWwdBcU=
Subject key identifier:   A7:F2:18:C0:FF:D1:77:65:B7:E0:EF:EF:5B:20:90:12:A5:3C:AF:A4
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584EA2DFBDB79418C41BFFE698C0
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     138997
IP address blocks:        65.75.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:bd:b7:94:18:c4:1b:ff:e6:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=e7c260e3-f96f-4bf8-89e1-c33088de1648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:ce:af:b2:7c:aa:b8:e6:2d:64:04:4f:a6:
                    f8:30:ae:0e:55:68:8f:d3:00:96:90:dd:84:ea:f5:
                    12:ba:47:b7:15:ce:06:46:68:bb:3a:72:bb:e8:5f:
                    39:4b:a1:3d:10:80:63:2d:99:a3:10:7e:db:68:13:
                    14:98:3c:db:79:c5:cb:47:f3:a7:b9:06:ee:e1:6b:
                    38:a5:ff:54:f8:7f:a7:8c:61:25:44:99:2d:70:b3:
                    b2:01:da:23:29:5f:1f:f9:91:7b:c2:8d:be:9d:8d:
                    f6:41:e9:fe:40:7d:87:c4:11:8f:53:5b:62:28:71:
                    85:43:da:ca:35:43:c7:92:50:c0:d2:68:1d:c3:43:
                    8c:d8:cf:5f:46:f8:63:79:c3:07:8a:25:29:aa:81:
                    6c:72:a7:2b:4b:3d:52:be:06:80:8f:82:69:fc:31:
                    8b:7b:61:c9:3d:60:f4:a2:98:85:30:fc:ac:64:a5:
                    da:9e:87:dd:01:18:a6:82:10:0f:a6:c0:d9:8f:0b:
                    2e:2f:47:75:cc:7b:29:97:b0:1c:e4:60:f5:83:24:
                    dc:7c:ee:83:0f:15:b4:01:a3:03:fa:13:02:e7:db:
                    f9:da:3d:38:d3:67:c3:55:9b:61:ae:2c:66:c3:95:
                    e1:09:e4:08:7b:2a:34:c6:02:47:d1:33:71:a9:bc:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:18:C0:FF:D1:77:65:B7:E0:EF:EF:5B:20:90:12:A5:3C:AF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:67:5a:21:20:b3:b1:37:58:fc:a4:3a:c5:36:d4:26:36:20:
         a6:6f:e5:f3:39:f1:6b:2e:0d:c7:9b:86:83:2a:72:72:6f:03:
         54:77:c4:e0:ee:17:d6:95:a6:ec:6a:e4:c2:8e:ac:af:84:d0:
         22:04:f9:a3:68:a9:6b:f9:af:22:c2:cd:42:91:bf:aa:14:23:
         bc:3a:44:73:01:ff:45:79:4c:c9:86:2c:05:97:9e:e6:2c:72:
         ff:16:38:61:2b:e0:0a:15:ea:c1:a2:b8:aa:66:93:bb:26:da:
         02:12:57:4b:a1:b5:f8:5f:e9:9c:f0:1b:33:e8:dd:bb:86:3b:
         3e:03:c1:46:3a:12:b2:18:68:45:7f:2b:7b:18:28:be:ce:ee:
         49:85:76:e2:10:f4:6a:dc:28:0d:df:9f:a7:67:30:86:80:32:
         5c:d9:1d:6e:db:5a:0e:b0:96:fa:c9:74:97:51:d0:0f:34:f0:
         01:14:b2:2b:af:dc:64:d2:f7:15:37:3f:47:9c:91:6c:b0:70:
         f5:7f:87:eb:d0:27:9c:5e:ac:e2:5e:4a:8f:ba:c1:da:a2:a8:
         7b:d7:6c:fc:50:0b:7a:ac:0a:b6:ce:4e:b0:2f:1e:57:4a:ad:
         55:6b:4b:9e:65:24:90:b0:9a:bf:98:ed:af:31:39:f9:29:60:
         5d:6f:d1:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i3723lBjEG//mmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ5ODdiNjItOTgzOS00NTEyLWFhZDctOWY1YjljZTYw
MGM2MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZTdjMjYwZTMtZjk2Zi00YmY4LTg5ZTEtYzMzMDg4ZGUxNjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfHOr7J8qrjmLWQET6b4MK4OVWiP0wCWkN2E
6vUSuke3Fc4GRmi7OnK76F85S6E9EIBjLZmjEH7baBMUmDzbecXLR/OnuQbu4Ws4
pf9U+H+njGElRJktcLOyAdojKV8f+ZF7wo2+nY32Qen+QH2HxBGPU1tiKHGFQ9rK
NUPHklDA0mgdw0OM2M9fRvhjecMHiiUpqoFscqcrSz1SvgaAj4Jp/DGLe2HJPWD0
opiFMPysZKXanofdARimghAPpsDZjwsuL0d1zHspl7Ac5GD1gyTcfO6DDxW0AaMD
+hMC59v52j0402fDVZthrixmw5XhCeQIeyo0xgJH0TNxqbz85QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfyGMD/0Xdlt+Dv71sgkBKlPK+kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZDk4
N2I2Mi05ODM5LTQ1MTItYWFkNy05ZjViOWNlNjAwYzYvZGZjMjE5MjAtMzNkMy0z
NmFmLTlkM2QtZjMyZGU0OGFmZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWQ5ODdiNjItOTgzOS00NTEyLWFh
ZDctOWY1YjljZTYwMGM2LzlkOTg3YjYyLTk4MzktNDUxMi1hYWQ3LTlmNWI5Y2U2
MDBjNi5jcmwwHwYDVR0jBBgwFoAUVezLdIpXrFwbn/BP5E8oVeMP5BMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZDk4N2I2Mi05ODM5LTQ1MTItYWFkNy05ZjVi
OWNlNjAwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQUvcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElnWiEgs7E3WPykOsU21CY2IKZv5fM58WsuDcebhoMqcnJvA1R3xODu
F9aVpuxq5MKOrK+E0CIE+aNoqWv5ryLCzUKRv6oUI7w6RHMB/0V5TMmGLAWXnuYs
cv8WOGEr4AoV6sGiuKpmk7sm2gISV0uhtfhf6ZzwGzPo3buGOz4DwUY6ErIYaEV/
K3sYKL7O7kmFduIQ9GrcKA3fn6dnMIaAMlzZHW7bWg6wlvrJdJdR0A808AEUsiuv
3GTS9xU3P0eckWywcPV/h+vQJ5xerOJeSo+6wdqiqHvXbPxQC3qsCrbOTrAvHldK
rVVrS55lJJCwmr+Y7a8xOfkpYF1v0b8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:37 2026 by rpki-client