Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa
File:                     8686edcf-c148-33af-9805-e27c3ce4abca.roa (raw, json)
Hash identifier:          OODosZxselkpM7ciVGjT5S8GIOv/Ic39AUUpRtDDr08=
Subject key identifier:   F3:8A:1A:D5:99:42:BB:C8:4B:21:32:28:25:30:CB:43:2C:F3:94:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78CE81F59768FCDD6D829A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33650
IP address blocks:        96.66.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:e8:1f:59:76:8f:cd:d6:d8:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e343ed24-122b-47b9-8100-2509d3f4ec5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:d4:d6:84:a8:14:1c:70:59:81:94:8e:91:
                    7a:99:23:15:50:82:60:d9:d2:43:e1:4f:08:95:a4:
                    5c:28:91:22:1f:63:eb:bb:2b:fc:26:24:44:0a:20:
                    07:7e:79:4c:97:14:5f:38:43:b5:75:83:f1:dd:a2:
                    3b:a0:22:53:09:37:fb:34:e4:d2:49:c2:99:55:cd:
                    15:92:77:06:47:8d:25:a5:2c:a3:bc:24:4b:db:a1:
                    6c:e6:02:7b:8e:5c:00:c4:03:7d:d5:da:b4:a4:ec:
                    18:e2:ef:bd:d6:95:16:ab:a6:0d:10:dd:04:4b:84:
                    de:3d:38:57:b5:f1:72:e1:e4:02:15:ff:2d:d7:9a:
                    16:3b:f1:84:46:82:10:5f:d5:8f:74:7c:d4:f1:44:
                    54:d0:40:31:c2:e2:3e:7a:6f:fb:f1:84:71:2f:56:
                    4e:ea:20:c9:61:e0:90:f3:ed:79:fc:79:67:df:7c:
                    ec:44:0b:c8:c1:67:83:b1:75:87:14:d4:53:5f:27:
                    ad:11:a5:63:1b:6f:8b:b5:08:17:1e:6c:53:3b:3c:
                    2c:f7:fb:c4:ff:16:06:29:e8:de:13:34:95:01:f6:
                    9b:83:18:fd:f2:b7:f9:29:f8:18:89:a3:05:5b:a8:
                    96:67:7a:d8:bc:f1:98:1a:b1:1a:74:11:9b:d0:27:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:1A:D5:99:42:BB:C8:4B:21:32:28:25:30:CB:43:2C:F3:94:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.66.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:77:36:7c:41:31:ab:16:a5:a7:b8:8f:9f:da:64:72:e1:
         d7:f7:e0:1c:f6:42:2f:d8:56:83:1d:7e:ed:73:bf:dd:3b:7e:
         ca:6e:b6:a9:d3:b4:df:79:3f:b9:d1:9a:72:60:12:07:d9:3b:
         20:52:a9:29:d8:0d:40:12:9b:4d:9c:28:69:a8:eb:3c:a8:8c:
         83:18:7a:a3:4e:86:b4:52:f4:45:18:d4:b2:a4:0e:02:45:d4:
         3d:f3:9b:12:5e:75:88:de:22:40:d4:df:41:ff:b9:7c:72:9c:
         cd:db:69:f0:39:2f:32:22:7b:f8:7a:46:10:40:17:e0:25:a1:
         23:82:70:04:80:8d:83:cc:1c:b5:2b:53:92:df:16:f0:e9:b1:
         70:db:c6:9d:29:36:9e:0d:c3:01:14:33:51:4d:12:b5:40:e5:
         cd:cc:73:3d:ea:7b:ae:5d:6e:ef:8d:9d:e2:59:ea:45:57:87:
         5f:14:33:3a:19:42:82:44:07:91:cf:3f:ee:6f:f4:6c:7d:94:
         6b:21:2b:ab:45:6a:ed:cd:35:26:a3:01:eb:66:e0:57:f9:51:
         b6:b4:87:3b:b6:c7:ff:1c:57:76:40:00:c2:8a:c2:71:e6:ae:
         57:f3:2d:0f:19:96:1a:db:62:a3:0b:bd:50:eb:f0:9c:f4:ee:
         ea:cf:06:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njOgfWXaPzdbYKaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTM0M2VkMjQtMTIyYi00N2I5LTgxMDAtMjUwOWQzZjRlYzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuXU1oSoFBxwWYGUjpF6mSMVUIJg2dJD4U8I
laRcKJEiH2Pruyv8JiRECiAHfnlMlxRfOEO1dYPx3aI7oCJTCTf7NOTSScKZVc0V
kncGR40lpSyjvCRL26Fs5gJ7jlwAxAN91dq0pOwY4u+91pUWq6YNEN0ES4TePThX
tfFy4eQCFf8t15oWO/GERoIQX9WPdHzU8URU0EAxwuI+em/78YRxL1ZO6iDJYeCQ
8+15/Hln33zsRAvIwWeDsXWHFNRTXyetEaVjG2+LtQgXHmxTOzws9/vE/xYGKeje
EzSVAfabgxj98rf5KfgYiaMFW6iWZ3rYvPGYGrEadBGb0CeZVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOKGtWZQrvISyEyKCUwy0Ms85QXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY4NmVkY2YtYzE0OC0z
M2FmLTk4MDUtZTI3YzNjZTRhYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYELgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUvdzZ8QTGrFqWnuI+f2mRy4df34Bz2Qi/YVoMdfu1zv907fsputqnT
tN95P7nRmnJgEgfZOyBSqSnYDUASm02cKGmo6zyojIMYeqNOhrRS9EUY1LKkDgJF
1D3zmxJedYjeIkDU30H/uXxynM3bafA5LzIie/h6RhBAF+AloSOCcASAjYPMHLUr
U5LfFvDpsXDbxp0pNp4NwwEUM1FNErVA5c3Mcz3qe65dbu+NneJZ6kVXh18UMzoZ
QoJEB5HPP+5v9Gx9lGshK6tFau3NNSajAetm4Ff5Uba0hzu2x/8cV3ZAAMKKwnHm
rlfzLQ8ZlhrbYqMLvVDr8Jz07urPBgo=
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:43:44 2026 by rpki-client