Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/c6d34bdc-d7a7-3320-be32-a9a9706bfe22.roa
File:                     c6d34bdc-d7a7-3320-be32-a9a9706bfe22.roa (raw, json)
Hash identifier:          U30cbxFMzq8lAYWB9rq+wNrqlc2Scjax7T8+aK/nwdg=
Subject key identifier:   43:60:76:C6:0C:EA:15:86:2D:83:CD:44:49:E4:56:F4:9C:E4:E7:62
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584E9B705EDAC37D923C5D256C70
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/c6d34bdc-d7a7-3320-be32-a9a9706bfe22.roa
Signing time:             Fri 24 Jul 2026 17:05:13 +0000
ROA not before:           Fri 24 Jul 2026 17:05:13 +0000
ROA not after:            Thu 22 Oct 2026 17:05:13 +0000
asID:                     62645
IP address blocks:        209.237.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:70:5e:da:c3:7d:92:3c:5d:25:6c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Jul 24 17:05:13 2026 GMT
            Not After : Oct 22 17:05:13 2026 GMT
        Subject: CN=19753e31-697f-40d0-ba7e-7f8d8ce62b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:14:a4:81:94:dd:2c:f4:98:0d:36:52:df:
                    0c:cf:f2:8f:58:28:79:6f:67:e6:85:dc:f6:e0:ce:
                    d8:2c:b5:98:41:72:47:d9:3d:15:30:b0:c9:a3:4c:
                    10:ab:22:81:b0:6f:80:3d:7b:a1:db:4b:06:1e:49:
                    b5:db:61:7b:6e:47:c1:81:0c:2f:67:2d:fa:01:25:
                    77:05:a6:88:27:93:ad:6b:49:63:06:d1:b9:7d:e7:
                    62:41:df:05:a7:f9:81:83:c5:66:b6:a8:e9:59:1f:
                    27:b5:06:e4:60:6d:4f:39:e7:ad:92:a2:61:28:6c:
                    da:63:43:13:f5:65:52:bf:22:5e:3d:80:5f:5b:c7:
                    4f:ba:5d:8e:c2:91:16:5f:e5:d3:3f:a8:2a:e1:76:
                    d1:03:c2:c2:0a:11:5a:3f:77:b3:f7:63:59:9e:70:
                    a7:5f:57:91:8d:ff:1d:e2:b1:09:23:02:71:5a:77:
                    2d:7d:80:a6:f8:21:09:64:bd:b1:f4:10:f2:cd:46:
                    a3:10:af:ec:32:3b:84:1c:5b:19:e6:1a:bc:af:3b:
                    25:4c:20:b6:12:f8:74:15:5d:be:97:2a:ea:00:31:
                    ad:07:f2:7f:50:0b:51:ec:a8:1d:e0:65:a8:9d:a4:
                    50:56:50:a9:3a:d7:14:31:af:9b:97:45:7f:2f:30:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:76:C6:0C:EA:15:86:2D:83:CD:44:49:E4:56:F4:9C:E4:E7:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/c6d34bdc-d7a7-3320-be32-a9a9706bfe22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:71:62:f2:09:dd:a5:53:f5:27:e6:f9:53:97:66:0a:24:
         d7:6b:ee:e6:b3:1f:50:97:a7:bd:80:f2:28:88:ca:0c:ba:42:
         fe:a4:dd:18:9e:05:f7:b1:3c:f2:b7:01:ab:1c:53:3e:90:78:
         ba:cf:ea:a1:84:30:6f:37:c2:d1:3f:b9:fa:d6:7c:97:98:85:
         65:bc:e1:b8:a1:32:b5:a3:67:fd:44:a6:03:b4:55:a5:7b:dd:
         43:48:90:a5:37:e6:e5:d7:b6:8b:d7:35:f2:ba:c1:39:3e:bd:
         be:df:f5:85:96:fd:cf:99:97:1e:bd:19:38:73:90:c8:c2:b7:
         f2:1e:a8:26:f9:34:3a:d0:a5:6f:d1:3a:c2:45:eb:de:8e:12:
         c0:aa:7d:63:53:70:65:48:5c:c5:13:7b:6f:e8:99:f2:31:6a:
         03:30:25:a6:08:cb:97:7d:99:cf:58:cd:e3:63:bc:f2:a8:cc:
         68:ee:9b:ac:5e:d2:c1:6d:21:10:59:0e:09:75:ae:58:08:fc:
         c7:f2:da:9e:6a:17:b2:3e:0a:8e:d8:d9:02:ad:4c:4f:69:69:
         7a:bb:f6:2c:06:6c:e2:24:c9:76:d3:e1:12:0c:5b:b1:83:62:
         ea:e1:5b:15:ee:a9:2f:94:60:ae:d1:68:dd:01:2d:7b:34:b4:
         fd:16:72:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6bcF7aw32SPF0lbHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0
YmNiMB4XDTI2MDcyNDE3MDUxM1oXDTI2MTAyMjE3MDUxM1owLzEtMCsGA1UEAxMk
MTk3NTNlMzEtNjk3Zi00MGQwLWJhN2UtN2Y4ZDhjZTYyYjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl8UpIGU3Sz0mA02Ut8Mz/KPWCh5b2fmhdz2
4M7YLLWYQXJH2T0VMLDJo0wQqyKBsG+APXuh20sGHkm122F7bkfBgQwvZy36ASV3
BaaIJ5Ota0ljBtG5fediQd8Fp/mBg8VmtqjpWR8ntQbkYG1POeetkqJhKGzaY0MT
9WVSvyJePYBfW8dPul2OwpEWX+XTP6gq4XbRA8LCChFaP3ez92NZnnCnX1eRjf8d
4rEJIwJxWnctfYCm+CEJZL2x9BDyzUajEK/sMjuEHFsZ5hq8rzslTCC2Evh0FV2+
lyrqADGtB/J/UAtR7Kgd4GWonaRQVlCpOtcUMa+bl0V/LzD2MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENgdsYM6hWGLYPNREnkVvSc5OdiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJk
NGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvYzZkMzRiZGMtZDdhNy0z
MzIwLWJlMzItYTlhOTcwNmJmZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzMyZDRjMWMtNjhmZC00NmJhLTk0
NTAtODQ2OTdmYmU0YmNiLzMzMmQ0YzFjLTY4ZmQtNDZiYS05NDUwLTg0Njk3ZmJl
NGJjYi5jcmwwHwYDVR0jBBgwFoAUBNJQfOBV9FoaAnDShIJDzDB5ccYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5
N2ZiZTRiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0e2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFW7cWLyCd2lU/Un5vlTl2YKJNdr7uazH1CXp72A8iiIygy6Qv6k3Rie
BfexPPK3AascUz6QeLrP6qGEMG83wtE/ufrWfJeYhWW84bihMrWjZ/1EpgO0VaV7
3UNIkKU35uXXtovXNfK6wTk+vb7f9YWW/c+Zlx69GThzkMjCt/IeqCb5NDrQpW/R
OsJF696OEsCqfWNTcGVIXMUTe2/omfIxagMwJaYIy5d9mc9YzeNjvPKozGjum6xe
0sFtIRBZDgl1rlgI/Mfy2p5qF7I+Co7Y2QKtTE9paXq79iwGbOIkyXbT4RIMW7GD
YurhWxXuqS+UYK7RaN0BLXs0tP0Wcos=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:15:59 2026 by rpki-client