Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa
File:                     1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa (raw, json)
Hash identifier:          tKZ1BTLzFKxD/gqH5C1cbK3xwea+knfJgpl/fhQ/tpI=
Subject key identifier:   6E:18:4B:BE:F0:CF:1F:8B:49:B6:61:94:1D:CF:81:87:62:8D:FD:1C
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584F19FCF40A3DE9100062649C00
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     21547
IP address blocks:        64.140.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f4:0a:3d:e9:10:00:62:64:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=0f04724b-01f8-48c5-8dc0-3e11a42a5896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:a6:fa:1f:58:e3:3f:ed:ee:08:75:75:85:
                    f9:14:12:18:2e:ab:b5:31:08:e1:a2:3f:14:ec:01:
                    1d:8f:fd:61:0f:12:74:68:b6:56:43:a4:3a:63:1f:
                    f1:ff:dd:69:cd:a6:43:c5:57:25:a4:52:13:cb:e4:
                    c8:c1:18:63:15:a0:0f:41:dc:f8:19:3a:5a:95:40:
                    19:3c:88:01:fe:7a:b1:3a:33:1c:5b:16:7f:f7:2d:
                    3d:7d:94:95:68:cd:e7:8b:c0:e4:92:4c:9f:4c:24:
                    50:1f:ff:77:92:39:69:26:c1:3a:c9:2a:53:1e:48:
                    67:12:20:52:26:e6:60:74:db:be:e4:00:06:43:16:
                    50:ce:14:9a:ff:85:43:48:95:c3:82:0e:b8:82:1b:
                    67:c6:14:c5:af:f2:51:11:f8:74:62:02:f2:ea:6f:
                    ff:b7:eb:0e:2d:ed:1c:bf:2f:de:0f:60:ca:e3:98:
                    84:a5:02:5a:fb:07:be:9a:e5:57:e2:a7:a2:04:cc:
                    1e:53:ec:a0:42:84:dc:11:af:ce:74:1c:1a:69:8e:
                    bb:09:73:78:dd:77:94:c1:ee:b5:1b:54:15:7d:cb:
                    92:25:1f:13:9e:83:cd:f5:34:9b:a3:5c:91:0b:b7:
                    21:5c:35:1c:ea:35:a4:80:fc:a1:50:c1:b6:94:fb:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:4B:BE:F0:CF:1F:8B:49:B6:61:94:1D:CF:81:87:62:8D:FD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/1e25a7f6-eabd-3b5e-b3c3-4c12f832117a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.140.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:49:92:ac:a7:b5:4c:e2:46:c5:ef:cc:9f:a8:79:f0:c6:dd:
         2e:76:c4:67:2e:40:24:07:03:58:7b:ef:42:62:05:cb:a4:92:
         dc:4d:30:c4:34:19:f7:df:d4:53:bf:31:24:65:a8:47:cf:31:
         96:2f:d7:4b:df:1f:03:a6:6f:3a:27:b9:f8:d3:7c:46:c4:ff:
         e7:19:7b:f5:c5:74:d2:44:b0:14:cd:50:23:19:e9:2d:d2:39:
         cc:2a:ff:83:1f:14:eb:9b:b9:cc:c6:f5:17:6a:62:11:02:b6:
         b7:64:d3:5a:c6:aa:94:bd:76:e5:ce:53:1a:0d:52:ed:72:2a:
         f1:4f:3f:4f:83:86:36:fa:e9:fe:9a:83:ae:5f:ab:da:ce:3f:
         32:c6:b6:ef:31:e4:d6:09:01:c3:f4:15:d0:e4:df:26:62:c6:
         71:38:bd:78:1d:17:4f:64:e2:71:b0:ae:8e:1c:76:c0:af:82:
         83:03:d0:18:a1:00:15:11:91:40:58:53:75:39:f1:f9:e8:af:
         26:df:83:56:0e:37:04:7c:b8:eb:a6:0f:31:47:25:2d:0e:f5:
         90:1d:23:59:05:bc:d6:dc:6e:6f:dd:64:cc:65:b1:96:1b:d4:
         a8:0a:17:de:af:52:46:a7:0f:dc:64:72:9f:f1:fa:4f:e0:48:
         b0:d0:c1:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PQKPekQAGJknAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3
OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
MGYwNDcyNGItMDFmOC00OGM1LThkYzAtM2UxMWE0MmE1ODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFym+h9Y4z/t7gh1dYX5FBIYLqu1MQjhoj8U
7AEdj/1hDxJ0aLZWQ6Q6Yx/x/91pzaZDxVclpFITy+TIwRhjFaAPQdz4GTpalUAZ
PIgB/nqxOjMcWxZ/9y09fZSVaM3ni8DkkkyfTCRQH/93kjlpJsE6ySpTHkhnEiBS
JuZgdNu+5AAGQxZQzhSa/4VDSJXDgg64ghtnxhTFr/JREfh0YgLy6m//t+sOLe0c
vy/eD2DK45iEpQJa+we+muVX4qeiBMweU+ygQoTcEa/OdBwaaY67CXN43XeUwe61
G1QVfcuSJR8TnoPN9TSbo1yRC7chXDUc6jWkgPyhUMG2lPs0JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4YS77wzx+LSbZhlB3PgYdijf0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5
NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMWUyNWE3ZjYtZWFiZC0z
YjVlLWIzYzMtNGMxMmY4MzIxMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx
ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0
NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy
MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQIzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABJkqyntUziRsXvzJ+oefDG3S52xGcuQCQHA1h770JiBcukktxNMMQ0
Gfff1FO/MSRlqEfPMZYv10vfHwOmbzonufjTfEbE/+cZe/XFdNJEsBTNUCMZ6S3S
Ocwq/4MfFOubuczG9RdqYhECtrdk01rGqpS9duXOUxoNUu1yKvFPP0+Dhjb66f6a
g65fq9rOPzLGtu8x5NYJAcP0FdDk3yZixnE4vXgdF09k4nGwro4cdsCvgoMD0Bih
ABURkUBYU3U58fnorybfg1YONwR8uOumDzFHJS0O9ZAdI1kFvNbcbm/dZMxlsZYb
1KgKF96vUkanD9xkcp/x+k/gSLDQwco=
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:08:35 2026 by rpki-client