Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa
File:                     7c86a747-0c09-3aea-b1e5-eabbe5686568.roa (raw, json)
Hash identifier:          /LTtjUop7a/rnjv/IfiMxxyd5mu3lf94DI2G+69z+cA=
Subject key identifier:   7D:D2:17:83:4D:E9:93:CB:F1:0D:5D:FE:C9:6D:BB:CA:34:30:66:E1
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584EA5AA6A8D068D6E2E68CCEE00
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     3756
IP address blocks:        199.109.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6a:8d:06:8d:6e:2e:68:cc:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=0e95b723-d335-41e0-aca8-716addeb843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:9f:25:91:b2:1a:fb:53:f2:f2:8c:0e:87:
                    1a:61:3b:ac:05:78:d8:d1:1e:27:7a:fb:90:b7:5d:
                    b9:9e:59:ec:ec:a7:fe:52:8f:ea:ef:c5:72:95:22:
                    d4:28:61:a8:8c:fd:5f:4e:90:93:dc:06:b5:33:4d:
                    40:a9:67:61:8c:f5:12:64:b7:61:5c:f5:32:28:d5:
                    b8:dd:84:31:aa:17:a2:c9:36:c6:d4:20:98:b3:58:
                    ea:a1:5a:0c:b7:29:6d:95:dd:a2:a9:90:90:d6:86:
                    5e:73:3e:66:7f:48:c0:4a:9e:f5:17:19:d4:5f:8e:
                    76:03:04:73:8f:d7:76:68:12:95:a5:80:67:38:b4:
                    cf:34:90:44:83:2c:2a:db:f8:40:1b:7c:cb:76:d1:
                    d9:7d:a8:c6:1a:26:42:b2:e3:cb:c7:70:5d:7a:b4:
                    b1:87:4f:fb:ba:6f:89:7f:d1:b5:ea:5d:dc:b5:8c:
                    52:c3:3f:8a:da:2c:1e:52:99:ad:e4:0b:f6:e3:9a:
                    3a:32:fe:75:27:36:5b:73:e3:8f:e1:7b:a3:71:30:
                    48:1b:b9:2f:8b:37:b8:ea:a1:b4:cf:76:27:c1:ab:
                    e3:76:1f:47:6a:54:59:86:07:ad:f0:90:c8:3e:a1:
                    f9:9f:21:a2:06:e2:31:17:93:4c:bb:d0:b1:20:47:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:17:83:4D:E9:93:CB:F1:0D:5D:FE:C9:6D:BB:CA:34:30:66:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/7c86a747-0c09-3aea-b1e5-eabbe5686568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:6d:47:2b:ac:82:75:b7:90:8b:33:b8:0a:da:f2:63:88:
         6c:7e:0b:34:a1:1a:8e:cb:fe:11:1e:3f:a8:0c:43:93:d8:f3:
         7d:11:5f:f2:61:be:61:a3:5f:50:37:7b:a2:a1:df:cd:a9:cb:
         14:f8:af:99:5f:d9:33:24:8f:2f:5c:0d:f7:ca:53:2a:b8:ae:
         93:19:30:39:d3:dd:61:cb:aa:1c:9e:90:a2:74:a7:93:86:38:
         2b:40:30:6d:06:b3:56:46:99:dd:68:f0:1c:da:28:1b:0e:ab:
         33:4d:df:70:24:d4:21:7d:7c:7c:04:a0:67:47:f5:f3:4a:b1:
         e7:32:08:85:e6:28:ac:1b:ef:25:c5:cd:07:06:22:84:9e:bb:
         b0:cb:65:93:e6:ab:b5:f3:95:ce:49:02:e1:3d:26:d7:6d:94:
         6c:9c:34:b5:1f:a8:a6:bc:22:b1:12:6d:16:70:58:72:4d:fb:
         34:96:ec:a5:3e:33:48:78:64:0a:00:5b:7b:fb:c3:25:15:51:
         18:97:48:65:e7:dc:c3:bb:0c:b6:bc:ee:bf:53:7f:a0:41:1f:
         d0:d4:0c:77:05:bf:3b:c5:08:62:bf:02:c8:9e:75:5e:1b:9f:
         ba:fc:aa:7e:c8:9b:4f:d9:58:86:76:e3:60:f4:a6:4a:ac:f0:
         48:f3:22:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmqNBo1uLmjM7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz
ODdjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
MGU5NWI3MjMtZDMzNS00MWUwLWFjYTgtNzE2YWRkZWI4NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaSfJZGyGvtT8vKMDocaYTusBXjY0R4nevuQ
t125nlns7Kf+Uo/q78VylSLUKGGojP1fTpCT3Aa1M01AqWdhjPUSZLdhXPUyKNW4
3YQxqheiyTbG1CCYs1jqoVoMtyltld2iqZCQ1oZecz5mf0jASp71FxnUX452AwRz
j9d2aBKVpYBnOLTPNJBEgywq2/hAG3zLdtHZfajGGiZCsuPLx3BderSxh0/7um+J
f9G16l3ctYxSwz+K2iweUpmt5Av245o6Mv51JzZbc+OP4XujcTBIG7kvize46qG0
z3Ynwavjdh9HalRZhget8JDIPqH5nyGiBuIxF5NMu9CxIEfBSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3SF4NN6ZPL8Q1d/sltu8o0MGbhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm
NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvN2M4NmE3NDctMGMwOS0z
YWVhLWIxZTUtZWFiYmU1Njg2NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0
ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4
Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy
OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx20QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4KbUcrrIJ1t5CLM7gK2vJjiGx+CzShGo7L/hEeP6gMQ5PY830RX/Jh
vmGjX1A3e6Kh382pyxT4r5lf2TMkjy9cDffKUyq4rpMZMDnT3WHLqhyekKJ0p5OG
OCtAMG0Gs1ZGmd1o8BzaKBsOqzNN33Ak1CF9fHwEoGdH9fNKsecyCIXmKKwb7yXF
zQcGIoSeu7DLZZPmq7Xzlc5JAuE9JtdtlGycNLUfqKa8IrESbRZwWHJN+zSW7KU+
M0h4ZAoAW3v7wyUVURiXSGXn3MO7DLa87r9Tf6BBH9DUDHcFvzvFCGK/AsiedV4b
n7r8qn7Im0/ZWIZ242D0pkqs8EjzIrw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:32 2026 by rpki-client