Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa
File:                     0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa (raw, json)
Hash identifier:          NiTv8WIASkEgKHzeUpu1ncSlUlmVc4uJT39lQPPpHhU=
Subject key identifier:   F1:63:2F:5C:03:16:8F:96:6B:60:9A:4D:97:A4:6B:8A:43:55:4B:7B
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E15E459B724D93859BA40E7C0
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22079
IP address blocks:        64.136.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:59:b7:24:d9:38:59:ba:40:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=55adf129-32c9-4ba9-bd3b-cf05314e86e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:fd:26:38:2f:78:41:f3:af:ec:31:e4:00:
                    a8:f7:74:e3:0a:e3:cc:37:50:70:f0:47:ca:1b:9d:
                    9f:52:85:0c:8a:a6:6a:81:a0:c8:de:2d:a0:5d:6e:
                    03:e0:f4:c7:4a:ff:90:86:7c:2f:73:7f:36:ca:c1:
                    c1:d9:3f:32:ed:c2:ca:91:8a:ab:e2:36:fc:af:8d:
                    52:84:b9:0e:a4:53:38:bc:96:b6:94:76:83:44:13:
                    2c:5a:fb:0a:ae:44:83:27:0e:59:75:51:c1:41:da:
                    b0:28:d7:39:a0:0f:72:df:8b:31:c7:54:53:b2:4b:
                    59:a0:0b:9a:1f:d6:d1:df:5e:28:16:56:50:4c:72:
                    8f:34:d3:24:b9:e3:3c:1a:f1:ac:df:5e:b4:f5:99:
                    23:cb:d8:b1:70:ba:ea:82:db:cf:64:1a:47:89:67:
                    ac:9a:62:f1:37:20:c8:eb:a3:e6:1e:bd:17:40:51:
                    3d:13:42:45:fd:8e:e6:64:ee:08:59:09:3c:31:a5:
                    6b:33:3b:38:57:79:b8:61:e1:8a:35:3f:05:af:af:
                    1b:a8:1f:cf:4e:66:f8:46:90:94:1d:01:35:0c:d7:
                    bb:7b:28:98:a7:7e:ef:ce:4f:c0:b2:b3:bd:fc:0d:
                    28:84:b8:76:50:04:9f:f3:e7:18:e4:34:02:ca:f0:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:2F:5C:03:16:8F:96:6B:60:9A:4D:97:A4:6B:8A:43:55:4B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:ec:87:4a:9e:13:89:d2:19:23:70:bd:6a:d4:2d:69:fb:
         a6:44:ec:0d:d9:1d:c0:99:f0:52:f0:e0:12:48:83:e2:23:10:
         24:b0:df:e1:1a:99:70:b8:08:cd:41:c7:f8:66:71:e9:a4:a6:
         5a:24:0e:ad:5e:f3:3a:da:a9:6d:ab:c2:23:12:7e:56:5d:b6:
         6f:b1:53:89:20:01:76:a5:dc:1b:81:e3:2f:33:18:f8:a0:6c:
         c2:8c:fe:e6:0b:12:02:fe:2c:dd:b0:82:94:80:14:66:6c:1b:
         8e:f6:64:ec:bd:47:b3:54:fa:f1:bc:0b:bf:f4:97:01:ad:97:
         99:b9:95:3b:d3:22:33:a0:c7:61:df:6a:f3:00:cb:2e:63:65:
         0a:e1:78:71:45:6b:f1:6e:f6:d6:bd:48:da:dc:b9:0a:41:94:
         16:89:e6:fc:dd:83:8f:35:20:ce:25:63:95:a9:7b:0b:55:7f:
         01:05:f8:9b:fa:7c:24:8a:ee:7a:aa:c0:ce:da:9e:8a:11:9c:
         07:35:c4:3f:70:42:0f:d9:28:c9:09:6f:9d:c9:32:c9:47:ce:
         31:63:c6:c2:47:3e:ce:f9:ec:7e:08:4f:66:48:de:c3:87:c5:
         82:8f:b0:81:3b:ee:5b:1f:d5:f3:6a:12:b2:5f:99:21:06:08:
         1d:12:3a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5Fm3JNk4WbpA58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz
MmFmMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
NTVhZGYxMjktMzJjOS00YmE5LWJkM2ItY2YwNTMxNGU4NmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/9JjgveEHzr+wx5ACo93TjCuPMN1Bw8EfK
G52fUoUMiqZqgaDI3i2gXW4D4PTHSv+Qhnwvc382ysHB2T8y7cLKkYqr4jb8r41S
hLkOpFM4vJa2lHaDRBMsWvsKrkSDJw5ZdVHBQdqwKNc5oA9y34sxx1RTsktZoAua
H9bR314oFlZQTHKPNNMkueM8GvGs31609Zkjy9ixcLrqgtvPZBpHiWesmmLxNyDI
66PmHr0XQFE9E0JF/Y7mZO4IWQk8MaVrMzs4V3m4YeGKNT8Fr68bqB/PTmb4RpCU
HQE1DNe7eyiYp37vzk/AsrO9/A0ohLh2UASf8+cY5DQCyvD8ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFjL1wDFo+Wa2CaTZeka4pDVUt7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5
N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMGNjNGQ4N2UtODc3Yi0z
YjFhLTgzMjMtYjE5YTFjOWM2YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy
NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk
MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2
NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIhuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt/7IdKnhOJ0hkjcL1q1C1p+6ZE7A3ZHcCZ8FLw4BJIg+IjECSw3+Ea
mXC4CM1Bx/hmcemkplokDq1e8zraqW2rwiMSflZdtm+xU4kgAXal3BuB4y8zGPig
bMKM/uYLEgL+LN2wgpSAFGZsG472ZOy9R7NU+vG8C7/0lwGtl5m5lTvTIjOgx2Hf
avMAyy5jZQrheHFFa/Fu9ta9SNrcuQpBlBaJ5vzdg481IM4lY5WpewtVfwEF+Jv6
fCSK7nqqwM7anooRnAc1xD9wQg/ZKMkJb53JMslHzjFjxsJHPs757H4IT2ZI3sOH
xYKPsIE77lsf1fNqErJfmSEGCB0SOmg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:50:22 2026 by rpki-client