Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa
File:                     505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json)
Hash identifier:          VjBnIhutOaZ/2NEjNi1UnyoSnwovJ9CwKiihL+owjlQ=
Subject key identifier:   35:EE:DD:6B:66:E5:ED:3C:F8:6B:D6:3D:53:9C:F4:14:6E:DF:89:E8
Certificate issuer:       /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc
Certificate serial:       010D0C9F4328584EA794827D6B5E45181BA87680
Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30144
IP address blocks:        208.85.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:82:7d:6b:5e:45:18:1b:a8:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=658347b9-274d-4d5c-ac6e-1330f5ea5880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:1f:9a:66:c9:2f:09:b8:e0:0f:b6:25:f0:
                    d6:13:6a:fd:fe:f6:c3:70:d1:c2:c3:ee:33:dd:f5:
                    2a:f6:d8:39:da:b3:07:5d:93:d2:56:db:63:14:31:
                    e0:8f:1a:d8:b7:1b:72:43:35:e3:89:79:9f:0e:42:
                    86:8b:50:3e:ec:1b:64:26:e6:28:f6:dd:59:b1:33:
                    db:ac:61:bb:8b:f9:4e:10:d8:d6:87:5b:d3:16:bf:
                    6a:20:49:d1:12:ff:01:63:2e:c5:49:69:a6:70:4f:
                    97:da:80:f5:d5:e4:1d:74:26:0a:81:9a:2d:e7:2c:
                    ad:1c:76:82:f0:60:8d:f2:d9:25:aa:1e:9c:05:42:
                    f4:a5:3a:d7:62:8d:4e:d4:39:fa:1c:c7:23:c9:2a:
                    e0:99:a9:89:f8:52:a0:3f:55:35:aa:97:16:23:02:
                    b5:4e:05:57:c5:8c:df:50:d8:9a:ae:1a:82:93:46:
                    6a:1c:c0:8c:1e:0d:7c:43:c8:e4:73:08:65:aa:0a:
                    fc:f5:0d:59:67:e3:9a:6c:f4:fa:af:c1:c2:c5:28:
                    af:50:4d:8d:ff:86:eb:cd:3a:4d:97:ee:37:b6:f9:
                    ba:77:21:a5:61:9d:70:13:ac:a8:46:d3:33:30:7a:
                    80:28:f1:76:30:4b:b6:6d:8c:02:fd:da:32:1f:27:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:DD:6B:66:E5:ED:3C:F8:6B:D6:3D:53:9C:F4:14:6E:DF:89:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl

            X509v3 Authority Key Identifier:
                keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:40:ac:b8:14:84:e9:5b:95:e8:49:dc:2f:1b:4e:65:ce:9e:
         fb:b2:f4:69:ca:02:36:81:8d:b7:54:80:21:2c:a5:dc:47:2e:
         33:0d:31:bc:d4:80:7d:b5:ed:84:fc:c0:1e:8e:b1:9f:ef:02:
         94:f7:ba:9e:7c:c5:ae:b6:03:09:fd:dd:ce:84:68:e8:f3:ab:
         df:4f:5f:07:b8:94:3a:7f:48:c1:0c:3b:86:9d:ca:75:cc:d1:
         0a:c4:15:58:9e:5d:96:89:11:35:60:d1:0f:ea:7f:5f:40:27:
         ed:f1:84:80:e4:51:37:cc:19:2d:cc:fa:cd:85:b7:83:a3:02:
         2a:27:ac:39:2a:60:76:75:1e:0d:52:01:ab:8d:98:83:37:ac:
         d8:fe:37:d8:48:fe:6b:64:a5:3f:15:32:c3:89:85:af:e3:f1:
         60:cd:1a:5e:e3:44:13:eb:96:ad:39:83:51:02:bf:a6:79:a4:
         06:88:0c:20:c4:9f:5f:d5:19:fe:db:0d:66:7d:c4:ef:be:d5:
         ec:df:00:26:99:6a:c0:03:fe:ad:53:b0:43:ee:1d:b7:74:67:
         07:01:2e:09:2b:c6:a1:d1:1d:8e:8a:dc:06:80:28:54:b4:17:
         cb:64:de:0a:e2:12:96:96:96:b6:a6:22:c7:cf:78:fc:96:25:
         34:f1:a8:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlIJ9a15FGBuodoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2
MmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjU4MzQ3YjktMjc0ZC00ZDVjLWFjNmUtMTMzMGY1ZWE1ODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb0fmmbJLwm44A+2JfDWE2r9/vbDcNHCw+4z
3fUq9tg52rMHXZPSVttjFDHgjxrYtxtyQzXjiXmfDkKGi1A+7BtkJuYo9t1ZsTPb
rGG7i/lOENjWh1vTFr9qIEnREv8BYy7FSWmmcE+X2oD11eQddCYKgZot5yytHHaC
8GCN8tklqh6cBUL0pTrXYo1O1Dn6HMcjySrgmamJ+FKgP1U1qpcWIwK1TgVXxYzf
UNiarhqCk0ZqHMCMHg18Q8jkcwhlqgr89Q1ZZ+OabPT6r8HCxSivUE2N/4brzTpN
l+43tvm6dyGlYZ1wE6yoRtMzMHqAKPF2MEu2bYwC/doyHycUSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXu3Wtm5e08+GvWPVOc9BRu34noMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz
ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z
ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4
NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh
NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll
YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdArLgUhOlblehJ3C8bTmXOnvuy9GnKAjaBjbdUgCEspdxHLjMNMbzU
gH217YT8wB6OsZ/vApT3up58xa62Awn93c6EaOjzq99PXwe4lDp/SMEMO4adynXM
0QrEFVieXZaJETVg0Q/qf19AJ+3xhIDkUTfMGS3M+s2Ft4OjAionrDkqYHZ1Hg1S
AauNmIM3rNj+N9hI/mtkpT8VMsOJha/j8WDNGl7jRBPrlq05g1ECv6Z5pAaIDCDE
n1/VGf7bDWZ9xO++1ezfACaZasAD/q1TsEPuHbd0ZwcBLgkrxqHRHY6K3AaAKFS0
F8tk3griEpaWlramIsfPePyWJTTxqNg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:03 2026 by rpki-client