Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ada49c-b1d9-37c8-b7a0-c276a0b03e64.roa
File:                     e6ada49c-b1d9-37c8-b7a0-c276a0b03e64.roa (raw, json)
Hash identifier:          sWR1UDUhf/fNfbwf92dFylQGqJkWrK2QQqJPrRQgf6M=
Subject key identifier:   19:F9:46:83:CB:2F:E3:9E:8F:AB:8F:BA:AB:2D:EF:1C:09:FB:22:34
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9B17E9DAAC5BC4EC4B980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ada49c-b1d9-37c8-b7a0-c276a0b03e64.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396599
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b1:7e:9d:aa:c5:bc:4e:c4:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=30807a2c-f199-4d16-8e9c-5c271f829a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:87:b4:5c:cf:12:4a:2e:38:3d:95:0b:c2:
                    d4:cc:fb:6c:23:22:dd:bd:95:4d:c0:f3:b0:f3:60:
                    be:ab:8a:2f:af:c4:26:69:61:72:68:ea:40:77:80:
                    63:21:e5:8e:05:8a:b7:3d:79:40:9d:35:93:49:e2:
                    be:13:c9:13:6d:2a:98:24:e2:42:59:1b:c8:b7:3d:
                    d4:21:c6:e1:f0:83:4a:76:e6:fb:73:db:a3:73:27:
                    9e:5c:81:5e:25:26:74:93:b7:9a:4e:17:e2:3d:72:
                    f2:5c:9b:b6:e2:86:cd:0b:ce:45:8a:66:5a:51:73:
                    8d:35:ee:87:6d:d8:d8:21:1a:08:c8:a4:19:59:49:
                    81:9e:fa:0d:c1:ba:43:68:b4:42:7c:fa:2d:f5:ea:
                    8e:24:1a:e0:12:82:56:cc:97:3c:49:fd:91:62:2a:
                    ab:02:08:18:b4:80:8b:35:0a:4c:a0:ce:ac:2c:b6:
                    a1:e8:91:6b:96:66:c1:27:c9:cf:c9:92:1c:0f:f3:
                    1c:cc:f0:d2:48:85:40:74:6c:73:2d:ef:d4:a0:76:
                    55:a8:b8:31:50:3e:f4:8b:89:1f:1c:e2:a2:83:04:
                    87:da:b7:d4:57:16:56:c5:f3:4f:86:5b:51:43:19:
                    b9:bb:6a:27:a9:83:08:bb:72:a4:c6:19:75:44:2b:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:46:83:CB:2F:E3:9E:8F:AB:8F:BA:AB:2D:EF:1C:09:FB:22:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ada49c-b1d9-37c8-b7a0-c276a0b03e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:e8:36:61:de:86:31:98:72:be:1d:b2:ff:6a:25:f9:cb:
         3b:e2:f3:9c:01:aa:ab:66:59:4b:d3:38:7c:df:23:da:04:4b:
         16:14:5e:3f:c5:14:73:a5:e2:72:22:f2:87:d9:a3:cd:97:37:
         06:14:73:3f:45:6c:d1:b8:b6:8a:3f:b7:d2:12:0c:f2:1f:bd:
         1d:54:f9:65:dc:8b:b3:ed:8b:63:0b:3a:01:ec:d5:33:dd:b4:
         38:e8:5e:7f:1d:e9:fa:a7:39:a5:9b:ec:6e:13:61:40:7e:85:
         d5:73:56:09:28:44:7e:95:ae:ce:cc:cc:c3:bd:79:59:81:4c:
         74:8a:07:5f:b0:90:52:97:28:1e:47:78:bf:1b:b2:14:bb:5b:
         0d:08:30:5a:86:00:18:89:ae:6e:6e:7e:1b:09:7b:9e:fb:40:
         70:7c:94:2e:6b:cc:da:ab:8c:64:83:fc:11:eb:3e:b6:71:50:
         8a:8b:6c:b1:34:f7:0d:f1:5d:c5:88:44:c2:5a:9b:68:ca:c8:
         34:77:1b:9f:d5:95:fb:3b:b1:a0:f7:b3:15:c7:ce:24:35:ab:
         01:e0:28:eb:1c:00:67:c4:cb:a6:a7:21:ff:12:43:63:13:1e:
         86:99:4b:9e:86:50:fa:46:ac:9f:e7:4f:33:08:da:55:d5:72:
         4b:15:31:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4fqbF+narFvE7EuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
MzA4MDdhMmMtZjE5OS00ZDE2LThlOWMtNWMyNzFmODI5YTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc6HtFzPEkouOD2VC8LUzPtsIyLdvZVNwPOw
82C+q4ovr8QmaWFyaOpAd4BjIeWOBYq3PXlAnTWTSeK+E8kTbSqYJOJCWRvItz3U
Icbh8INKdub7c9ujcyeeXIFeJSZ0k7eaThfiPXLyXJu24obNC85FimZaUXONNe6H
bdjYIRoIyKQZWUmBnvoNwbpDaLRCfPot9eqOJBrgEoJWzJc8Sf2RYiqrAggYtICL
NQpMoM6sLLah6JFrlmbBJ8nPyZIcD/MczPDSSIVAdGxzLe/UoHZVqLgxUD70i4kf
HOKigwSH2rfUVxZWxfNPhltRQxm5u2onqYMIu3Kkxhl1RCug0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBn5RoPLL+Oej6uPuqst7xwJ+yI0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTZhZGE0OWMtYjFkOS0z
N2M4LWI3YTAtYzI3NmEwYjAzZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNmeg2Yd6GMZhyvh2y/2ol+cs74vOcAaqrZllL0zh83yPaBEsWFF4/
xRRzpeJyIvKH2aPNlzcGFHM/RWzRuLaKP7fSEgzyH70dVPll3Iuz7YtjCzoB7NUz
3bQ46F5/Hen6pzmlm+xuE2FAfoXVc1YJKER+la7OzMzDvXlZgUx0igdfsJBSlyge
R3i/G7IUu1sNCDBahgAYia5ubn4bCXue+0BwfJQua8zaq4xkg/wR6z62cVCKi2yx
NPcN8V3FiETCWptoysg0dxuf1ZX7O7Gg97MVx84kNasB4CjrHABnxMumpyH/EkNj
Ex6GmUuehlD6Rqyf508zCNpV1XJLFTFD
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:25 2026 by rpki-client