Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
File:                     4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa (raw, json)
Hash identifier:          U8PmPBwgIK0fDClEpWn+OLuOqFHIeb9vMHbyMyCifYA=
Subject key identifier:   2D:27:87:C8:3C:CA:5A:73:DD:18:B1:B0:01:72:F9:BD:24:77:D6:14
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F4328584E210EF53EBA46681BADC32280
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        216.99.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f5:3e:ba:46:68:1b:ad:c3:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=6672a9a4-807a-4952-b747-d465a176b3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:56:eb:c2:61:50:95:d9:ba:29:f0:7e:3e:
                    d1:ca:44:45:ec:1b:93:e8:d7:97:a1:c7:2f:f7:ee:
                    98:ae:5f:b0:67:88:17:0d:c9:2c:88:a8:bb:a8:fd:
                    fc:70:bc:6e:1c:83:c1:30:5c:2f:53:34:d8:87:ac:
                    d6:8a:46:f4:f3:67:81:cf:bb:d6:a7:93:46:0c:d3:
                    21:b6:c2:f7:6d:6d:a8:69:d7:5a:37:1e:2f:51:1a:
                    ba:b9:b4:a4:46:cc:e7:4d:1f:7f:44:e7:f2:e6:51:
                    b2:95:f1:30:43:1c:ba:52:fa:c3:8e:9a:04:9a:b3:
                    0d:09:58:65:d3:37:88:28:08:04:a3:cc:67:59:cb:
                    8f:8a:c5:30:47:8b:73:34:87:0c:00:be:b6:4b:1c:
                    54:3d:82:e2:26:af:08:f6:d8:11:fe:f6:58:07:3a:
                    d1:16:8b:66:0c:14:f3:a6:9e:a7:75:49:48:5a:68:
                    7e:94:4c:e9:b3:bf:b4:8a:8d:d4:e1:8f:20:1c:c2:
                    0d:fd:3c:6e:f3:8a:94:a4:20:e8:9e:3d:1c:ab:9e:
                    ff:67:de:f4:7a:ae:31:be:f1:10:0c:10:e7:1f:dc:
                    ec:db:81:73:1d:42:d5:06:80:f3:58:26:af:d2:6f:
                    dd:d6:e4:77:ee:65:41:8a:8f:bc:ab:c0:68:51:af:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:87:C8:3C:CA:5A:73:DD:18:B1:B0:01:72:F9:BD:24:77:D6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:5d:39:32:91:b5:c8:e9:e7:58:ad:d1:a8:65:37:18:e0:
         a9:b7:2c:a2:bb:68:e1:c7:fb:cd:f1:cf:44:ec:52:b0:c9:a7:
         a3:71:68:ee:5d:72:2e:f1:a6:fa:8f:8c:af:b3:c1:88:e4:6d:
         e2:5e:be:6f:a8:e7:8a:d1:f9:04:b9:a9:22:e2:5f:3b:07:60:
         f0:f4:c3:9b:f8:80:83:32:4c:b3:ff:ec:c1:32:a1:13:45:6e:
         15:3d:2f:a9:c8:57:48:c6:a8:86:b5:1a:fa:d4:3e:d1:58:7d:
         f1:7f:d0:3d:2b:bd:1a:9c:61:80:6c:f4:69:f6:fd:35:ef:52:
         93:26:1c:32:12:53:4c:20:4c:b6:91:3e:df:72:68:9d:16:4e:
         b2:3e:6c:29:9c:84:35:23:39:b4:eb:ce:92:c5:04:f2:81:7d:
         0a:be:6c:22:80:20:a9:8f:c1:65:41:b0:0d:ae:1c:67:c7:4c:
         68:dc:31:b9:4f:8e:f9:d2:99:01:10:1b:0c:95:e0:1e:d4:3f:
         cf:be:cc:a4:c5:3d:86:e9:4f:17:b9:cd:84:a0:90:9f:ac:fb:
         41:9e:12:ad:53:38:4c:9c:ad:d7:77:b2:41:d2:63:6e:10:c8:
         ee:20:0f:b6:c3:c5:a7:21:ef:1c:13:45:11:db:f7:c9:a1:2f:
         7f:51:92:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDvU+ukZoG63DIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3
MzU5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
NjY3MmE5YTQtODA3YS00OTUyLWI3NDctZDQ2NWExNzZiM2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBBW68JhUJXZuinwfj7RykRF7BuT6NeXoccv
9+6Yrl+wZ4gXDcksiKi7qP38cLxuHIPBMFwvUzTYh6zWikb082eBz7vWp5NGDNMh
tsL3bW2oaddaNx4vURq6ubSkRsznTR9/ROfy5lGylfEwQxy6UvrDjpoEmrMNCVhl
0zeIKAgEo8xnWcuPisUwR4tzNIcMAL62SxxUPYLiJq8I9tgR/vZYBzrRFotmDBTz
pp6ndUlIWmh+lEzps7+0io3U4Y8gHMIN/Txu84qUpCDonj0cq57/Z970eq4xvvEQ
DBDnH9zs24FzHULVBoDzWCav0m/d1uR37mVBio+8q8BoUa8+DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0nh8g8ylpz3RixsAFy+b0kd9YUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw
NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvNGQ4MzY3ZDQtMTg5OC0z
MjBjLWIzZWItNGFhMGUzY2JkY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3
MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi
NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3
ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZvXTkykbXI6edYrdGoZTcY4Km3LKK7aOHH+83xz0TsUrDJp6NxaO5d
ci7xpvqPjK+zwYjkbeJevm+o54rR+QS5qSLiXzsHYPD0w5v4gIMyTLP/7MEyoRNF
bhU9L6nIV0jGqIa1GvrUPtFYffF/0D0rvRqcYYBs9Gn2/TXvUpMmHDISU0wgTLaR
Pt9yaJ0WTrI+bCmchDUjObTrzpLFBPKBfQq+bCKAIKmPwWVBsA2uHGfHTGjcMblP
jvnSmQEQGwyV4B7UP8++zKTFPYbpTxe5zYSgkJ+s+0GeEq1TOEycrdd3skHSY24Q
yO4gD7bDxach7xwTRRHb98mhL39Rkgs=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:23 2026 by rpki-client