Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          W3nRXczZnY2l10ruUMGqkeCwihDX2B9UkHRfq81JzD4=
Subject key identifier:   99:D5:33:77:75:98:ED:08:22:E2:5F:A2:BC:DC:0D:D3:FF:5A:46:18
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F4328584DDA55C859D70D17519C59EE8C
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c8:59:d7:0d:17:51:9c:59:ee:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=3f3d0a7c-ffcd-4ab3-afe9-e27b2073cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:53:ce:ad:d1:c5:ba:c7:83:67:df:e3:78:
                    8c:48:65:3b:ff:50:0a:a9:a9:16:59:d2:76:d5:fc:
                    e7:66:ef:dc:21:90:7d:27:e4:b6:a7:7c:ab:42:dd:
                    df:d0:67:19:5d:27:64:9c:e5:d3:95:0c:0a:37:08:
                    43:eb:90:9a:f6:04:08:63:8e:f3:e9:93:e9:4c:e7:
                    51:6c:bd:77:51:61:ab:ae:61:9d:4b:42:62:1c:0d:
                    78:dd:92:48:be:ea:44:e3:df:8d:90:1f:ec:33:7d:
                    b0:f4:97:42:86:78:ef:57:4a:85:28:78:63:ff:9d:
                    60:69:1e:8f:43:f9:96:86:09:c3:e5:88:6f:42:56:
                    a6:6d:26:e0:85:8c:cf:64:bf:8b:c3:d2:03:bc:e3:
                    a6:5b:ad:74:ff:60:1c:10:22:dd:ef:4b:e7:d7:05:
                    d0:d9:46:54:57:8c:78:5d:17:4e:71:30:22:f7:31:
                    69:a4:f9:b9:5e:fe:6e:34:c2:4e:34:a6:1a:80:b2:
                    45:27:24:6b:99:b6:15:1a:07:c0:81:82:ee:b8:d4:
                    8f:09:fb:73:bd:a7:10:8a:31:75:a9:39:f8:4f:f3:
                    3f:18:a9:b1:49:ad:29:39:2f:34:e3:12:8f:09:92:
                    bc:63:ce:7f:1a:ae:d3:e5:e6:2e:5b:7a:9a:3b:84:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:33:77:75:98:ED:08:22:E2:5F:A2:BC:DC:0D:D3:FF:5A:46:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:81:8a:dd:b4:6c:42:03:ed:14:9f:17:37:08:c3:88:dd:f8:
         8d:b8:01:9d:16:a2:64:30:fa:a2:e4:c5:09:bb:f4:f9:0b:b1:
         b8:fd:49:bd:20:3d:97:c3:10:39:48:e9:81:43:f1:0b:83:8d:
         d7:d4:79:43:63:f0:a6:a7:09:59:11:6b:ee:d8:47:02:8e:e9:
         79:d2:ee:83:be:cb:68:74:3f:bd:8b:f8:fe:a1:6d:df:46:f3:
         01:1b:33:6a:1d:ea:c5:81:89:f8:fb:b4:5c:6a:24:ec:c3:53:
         d5:87:35:9d:e9:f1:50:a6:b0:b4:b8:30:3f:61:5e:a9:44:43:
         a8:64:8e:89:02:aa:36:73:d9:64:c0:5e:92:7c:60:9a:a7:92:
         f3:20:e8:6c:8b:40:d3:03:b0:37:1c:61:a2:11:09:ff:7b:00:
         0a:12:76:f4:9c:f5:bd:a5:a4:b3:72:d7:d9:fa:32:b7:43:97:
         7a:e9:ba:62:ff:67:86:3c:ad:78:ce:44:23:e8:09:ac:88:41:
         88:4a:7f:e6:02:bc:37:27:09:6d:4b:02:fa:8e:bb:d6:32:62:
         a1:bd:34:5a:06:fa:ad:ab:34:d5:b3:49:b1:c9:55:da:f3:ce:
         a7:aa:32:09:1d:8b:1a:6e:b7:43:b5:d3:57:b0:dc:6e:13:9a:
         f8:da:34:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVchZ1w0XUZxZ7owwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk
ZjNmMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
M2YzZDBhN2MtZmZjZC00YWIzLWFmZTktZTI3YjIwNzNjYWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHFTzq3RxbrHg2ff43iMSGU7/1AKqakWWdJ2
1fznZu/cIZB9J+S2p3yrQt3f0GcZXSdknOXTlQwKNwhD65Ca9gQIY47z6ZPpTOdR
bL13UWGrrmGdS0JiHA143ZJIvupE49+NkB/sM32w9JdChnjvV0qFKHhj/51gaR6P
Q/mWhgnD5YhvQlambSbghYzPZL+Lw9IDvOOmW610/2AcECLd70vn1wXQ2UZUV4x4
XRdOcTAi9zFppPm5Xv5uNMJONKYagLJFJyRrmbYVGgfAgYLuuNSPCftzvacQijF1
qTn4T/M/GKmxSa0pOS804xKPCZK8Y85/Gq7T5eYuW3qaO4T36QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnVM3d1mO0IIuJforzcDdP/WkYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi
ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvZmM2MDFiZGEtNmRkMC0z
YzY2LWJjNjQtNjgyYzljMGRmZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz
MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2
ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx
MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKBit20bEID7RSfFzcIw4jd+I24AZ0WomQw+qLkxQm79PkLsbj9Sb0g
PZfDEDlI6YFD8QuDjdfUeUNj8KanCVkRa+7YRwKO6XnS7oO+y2h0P72L+P6hbd9G
8wEbM2od6sWBifj7tFxqJOzDU9WHNZ3p8VCmsLS4MD9hXqlEQ6hkjokCqjZz2WTA
XpJ8YJqnkvMg6GyLQNMDsDccYaIRCf97AAoSdvSc9b2lpLNy19n6MrdDl3rpumL/
Z4Y8rXjORCPoCayIQYhKf+YCvDcnCW1LAvqOu9YyYqG9NFoG+q2rNNWzSbHJVdrz
zqeqMgkdixput0O101ew3G4TmvjaNDo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:15 2026 by rpki-client