Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
File:                     4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa (raw, json)
Hash identifier:          vegkJU7t4a9KrE7pRFGglUWc3p3ZLKP5ZUkzBU7g4wA=
Subject key identifier:   89:1A:0A:CD:C3:EC:67:18:7A:C1:C1:7C:23:D8:7F:8C:84:4D:8A:E1
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584EA788512C6DD4011FE4343280
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62610
IP address blocks:        107.151.208.0/24 maxlen: 24
                          107.151.209.0/24 maxlen: 24
                          107.151.214.0/24 maxlen: 24
                          107.151.215.0/24 maxlen: 24
                          107.151.218.0/24 maxlen: 24
                          107.151.219.0/24 maxlen: 24
                          107.151.222.0/24 maxlen: 24
                          107.151.223.0/24 maxlen: 24
                          198.44.188.0/24 maxlen: 24
                          198.44.189.0/24 maxlen: 24
                          198.44.190.0/24 maxlen: 24
                          198.44.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:51:2c:6d:d4:01:1f:e4:34:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=600de3c2-c4c4-40b4-8174-4b8a491fab37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:b7:ea:0d:50:07:02:e7:8b:a2:c8:5c:20:
                    ad:22:3b:ce:c3:a6:2b:50:75:e9:a0:25:01:30:fe:
                    ab:2e:43:1c:54:49:d8:f3:cc:4e:ef:fd:e0:63:87:
                    33:49:4b:17:71:e3:f6:c0:71:0f:17:4a:8b:c1:c5:
                    29:92:63:ea:3f:18:3a:36:b1:80:a1:7a:2d:b7:de:
                    11:7e:29:c3:64:f3:7c:89:91:ff:3f:d8:9e:06:78:
                    2c:63:15:13:20:77:ac:2c:17:f4:5e:79:b8:8a:12:
                    29:84:98:a5:ef:30:49:76:5d:13:80:b2:2a:7f:1b:
                    bb:35:25:5f:0e:91:2c:a8:19:15:1d:38:80:9c:35:
                    a9:8a:00:d2:1a:cf:e7:53:61:ad:64:3a:1c:10:c7:
                    83:72:8d:18:81:50:f7:28:f4:3f:7e:d6:21:9c:de:
                    59:d4:21:81:0d:c7:3a:5b:01:5d:48:9d:6a:24:37:
                    74:82:54:72:ac:83:64:ab:d2:89:09:7c:38:5d:3b:
                    fe:f4:0f:14:ed:3d:a3:23:1e:80:0f:35:1e:f2:22:
                    d7:36:58:41:2f:dd:44:bf:0e:a0:eb:cf:05:2b:5a:
                    4c:35:aa:97:12:06:4f:89:be:de:71:d9:e1:0a:fe:
                    9f:d4:cd:d6:aa:22:46:60:55:c5:86:95:e4:e9:13:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1A:0A:CD:C3:EC:67:18:7A:C1:C1:7C:23:D8:7F:8C:84:4D:8A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e98488e-bfa1-330d-9751-3b5cc2e9b85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.208.0/23
                  107.151.214.0/23
                  107.151.218.0/23
                  107.151.222.0/23
                  198.44.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:b8:13:d1:33:05:7f:f8:db:eb:bc:34:18:a0:a7:bf:14:
         16:35:81:e7:03:6b:ee:7c:13:5a:97:24:c4:b9:ca:3f:f8:77:
         de:8a:eb:61:6d:42:50:9d:21:41:6c:89:e6:e3:02:b0:3d:a4:
         d6:42:86:8f:2c:a5:52:00:ee:fe:0d:c7:80:ee:72:90:84:8a:
         2c:90:91:e9:08:d3:c0:d6:1f:35:41:2c:ed:ef:8d:6a:41:f2:
         a5:38:d9:ec:7e:bf:c8:a2:d5:c5:a4:f8:ce:13:3d:27:f5:85:
         19:20:7c:62:f7:df:25:64:e8:d8:12:83:f3:3a:f3:7d:3f:a4:
         f6:ba:1c:8a:e9:a5:6b:c5:c8:16:6c:d8:70:fc:3f:3d:10:19:
         82:5b:68:7a:e1:ce:46:1a:42:37:93:40:01:6c:ee:f2:e0:10:
         78:cc:04:32:07:db:93:e4:cf:5f:ec:1c:bf:c4:0c:8c:0f:50:
         e2:bc:08:f0:dc:fb:0e:93:17:fe:48:25:00:7f:0c:6e:f4:62:
         7d:0a:bf:67:de:ae:50:31:c1:9c:e9:2b:ad:0d:f1:c4:70:d5:
         3f:d6:cd:82:fa:49:a1:1d:c7:75:fe:3e:e6:b0:72:3d:68:df:
         ed:8a:ba:ae:bb:cc:01:a7:5c:e4:6a:fe:03:4b:75:af:b3:0e:
         d1:8f:b5:ca
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE6niFEsbdQBH+Q0MoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjAwZGUzYzItYzRjNC00MGI0LTgxNzQtNGI4YTQ5MWZhYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVi36g1QBwLni6LIXCCtIjvOw6YrUHXpoCUB
MP6rLkMcVEnY88xO7/3gY4czSUsXceP2wHEPF0qLwcUpkmPqPxg6NrGAoXott94R
finDZPN8iZH/P9ieBngsYxUTIHesLBf0Xnm4ihIphJil7zBJdl0TgLIqfxu7NSVf
DpEsqBkVHTiAnDWpigDSGs/nU2GtZDocEMeDco0YgVD3KPQ/ftYhnN5Z1CGBDcc6
WwFdSJ1qJDd0glRyrINkq9KJCXw4XTv+9A8U7T2jIx6ADzUe8iLXNlhBL91Evw6g
688FK1pMNaqXEgZPib7ecdnhCv6f1M3WqiJGYFXFhpXk6RPZTQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFIkaCs3D7GcYesHBfCPYf4yETYrhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGU5ODQ4OGUtYmZhMS0z
MzBkLTk3NTEtM2I1Y2MyZTliODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBa5fQAwQB
a5fWAwQBa5faAwQBa5feAwQCxiy8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGTKuBPRMwV/+NvrvDQYoKe/
FBY1gecDa+58E1qXJMS5yj/4d96K62FtQlCdIUFsiebjArA9pNZCho8spVIA7v4N
x4DucpCEiiyQkekI08DWHzVBLO3vjWpB8qU42ex+v8ii1cWk+M4TPSf1hRkgfGL3
3yVk6NgSg/M6830/pPa6HIrppWvFyBZs2HD8Pz0QGYJbaHrhzkYaQjeTQAFs7vLg
EHjMBDIH25Pkz1/sHL/EDIwPUOK8CPDc+w6TF/5IJQB/DG70Yn0Kv2ferlAxwZzp
K60N8cRw1T/WzYL6SaEdx3X+Puawcj1o3+2Kuq67zAGnXORq/gNLda+zDtGPtco=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:21 2026 by rpki-client