Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa
File:                     dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa (raw, json)
Hash identifier:          XkXrZ0aPUNDcLDADeknj+3+XzPEXT1b9dKhBB8oT5Bk=
Subject key identifier:   82:58:0C:FE:43:8C:6B:11:EA:B4:C2:D8:62:8E:CA:90:1F:45:B0:B6
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584DDFEB22FD99353A586EA73790
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        170.139.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:22:fd:99:35:3a:58:6e:a7:37:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=1c119951-89cd-48fe-a1af-c07a4f67a05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:3c:36:b4:3a:c1:70:93:15:9c:53:89:56:
                    34:be:da:f6:f4:a8:5b:5d:03:f7:f5:cb:c1:fc:e1:
                    87:f3:0f:40:69:64:84:0a:bb:bc:e3:5f:6b:ff:f3:
                    08:7e:21:ee:ef:dc:44:c0:72:16:98:5d:e9:53:35:
                    51:a3:7b:e3:3f:2f:39:0b:30:4a:1f:59:77:45:01:
                    90:dd:dc:17:46:63:ad:8e:6e:b4:7c:25:dc:d4:50:
                    0d:86:18:a8:ae:23:7c:14:00:b9:10:ca:eb:36:f9:
                    33:f0:ea:2b:0c:81:c2:e9:3d:b0:81:23:9a:b7:66:
                    52:55:13:ce:56:5f:6e:9e:db:28:4e:54:c4:ac:80:
                    bb:b7:1f:2f:74:6f:2a:3f:bf:5f:09:3a:c4:97:7e:
                    22:19:d2:27:40:fe:ae:f4:24:62:23:ee:00:19:ec:
                    e6:62:7d:bd:17:87:1e:56:26:a3:11:2e:14:dd:14:
                    d9:86:dc:ed:80:6e:c9:d3:5f:bb:31:00:c3:0a:64:
                    25:93:8d:94:95:a0:98:36:da:48:b2:23:f5:c3:32:
                    61:a5:b2:81:bc:e1:19:7b:c1:70:f9:35:92:94:1c:
                    ab:71:01:d8:76:c2:54:35:1d:14:6c:ea:09:cf:bd:
                    7c:0e:e4:0d:81:2d:8e:e7:49:31:d7:af:86:fb:4d:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:0C:FE:43:8C:6B:11:EA:B4:C2:D8:62:8E:CA:90:1F:45:B0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.139.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:f5:cb:89:3e:64:77:a5:f4:cc:c7:42:69:8b:35:02:40:
         80:48:46:62:49:3b:d4:8b:8a:25:42:6e:3c:f5:96:3e:71:af:
         ef:48:d7:a0:ab:78:bd:22:6a:ed:7c:ef:54:e5:8d:4c:dd:23:
         dc:b1:ab:2d:9d:b6:30:79:9f:c9:23:59:d9:94:ad:fd:4e:f2:
         7e:63:0d:fb:2d:a3:84:77:6d:e6:cc:96:25:07:0f:a7:a1:96:
         c8:1d:ec:52:60:de:82:55:28:c3:ba:54:69:57:91:c1:3e:cd:
         e3:a3:dd:53:3d:5e:77:e3:43:db:55:62:ac:ca:a9:27:81:e8:
         e2:a6:08:22:2a:71:9f:bc:47:00:10:e3:9d:60:05:55:65:ae:
         aa:46:84:8d:30:ea:59:20:2e:da:db:36:4d:79:1c:1f:83:ae:
         40:c7:5c:8f:6d:2a:d8:2f:f2:55:e7:f8:f0:5f:d1:0a:8a:77:
         23:6f:4e:10:3a:4a:42:eb:8f:16:18:e5:15:e1:b6:a9:f6:73:
         0e:45:ad:90:e5:fd:01:57:ab:2f:b2:13:46:6c:a6:a8:72:7e:
         81:4b:da:86:29:55:82:3d:3b:41:64:41:60:3e:31:55:52:e2:
         d6:2d:e5:e1:1e:b4:96:1b:2a:7d:ba:7d:1b:ee:83:07:26:dc:
         9b:7f:59:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3f6yL9mTU6WG6nN5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI2MDUxODEzMDAzMVoXDTI2MDgxNjEzMDAzMVowLzEtMCsGA1UEAxMk
MWMxMTk5NTEtODljZC00OGZlLWExYWYtYzA3YTRmNjdhMDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiig8NrQ6wXCTFZxTiVY0vtr29KhbXQP39cvB
/OGH8w9AaWSECru8419r//MIfiHu79xEwHIWmF3pUzVRo3vjPy85CzBKH1l3RQGQ
3dwXRmOtjm60fCXc1FANhhioriN8FAC5EMrrNvkz8OorDIHC6T2wgSOat2ZSVRPO
Vl9untsoTlTErIC7tx8vdG8qP79fCTrEl34iGdInQP6u9CRiI+4AGezmYn29F4ce
ViajES4U3RTZhtztgG7J01+7MQDDCmQlk42UlaCYNtpIsiP1wzJhpbKBvOEZe8Fw
+TWSlByrcQHYdsJUNR0UbOoJz718DuQNgS2O50kx16+G+01kfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJYDP5DjGsR6rTC2GKOypAfRbC2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGVhODQ0YTctYjBkYy0z
YTMzLWI3YzAtNmEzMjI2NmYxYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqosAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZs9cuJPmR3pfTMx0JpizUCQIBIRmJJO9SLiiVCbjz1lj5xr+9I16Cr
eL0iau1871TljUzdI9yxqy2dtjB5n8kjWdmUrf1O8n5jDfsto4R3bebMliUHD6eh
lsgd7FJg3oJVKMO6VGlXkcE+zeOj3VM9XnfjQ9tVYqzKqSeB6OKmCCIqcZ+8RwAQ
451gBVVlrqpGhI0w6lkgLtrbNk15HB+DrkDHXI9tKtgv8lXn+PBf0QqKdyNvThA6
SkLrjxYY5RXhtqn2cw5FrZDl/QFXqy+yE0ZspqhyfoFL2oYpVYI9O0FkQWA+MVVS
4tYt5eEetJYbKn26fRvugwcm3Jt/WbM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:52 2026 by rpki-client