Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
File:                     8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json)
Hash identifier:          KP385JcM7bAGn1tlT8wa+QAHMX50H32eS+WA9FDWIRc=
Subject key identifier:   EB:A7:50:6C:3C:BC:44:1B:2A:8D:B5:8C:E7:0D:38:03:E9:BE:ED:D8
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F4328584DFA7080BE1F304C698B75F500
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     16509
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:80:be:1f:30:4c:69:8b:75:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=dada5846-55bb-4a46-b1f9-ca58c1551829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:9a:a4:fe:c3:39:b1:65:46:39:d6:f8:28:
                    a7:14:58:80:83:43:34:74:83:37:b9:72:7b:b2:d8:
                    98:4e:d7:68:df:2b:10:c6:98:c7:05:44:33:7d:f5:
                    c5:33:e8:b7:4a:40:b7:17:ee:30:51:87:1a:3e:58:
                    dc:46:ff:9d:58:e6:b9:3a:c8:3c:91:a0:47:ac:77:
                    2f:89:4b:e7:e6:ab:5f:19:0b:d1:9d:2c:64:cc:7a:
                    45:c6:cf:13:91:e8:28:c1:b9:09:bf:4a:d8:f7:a9:
                    d1:31:95:c1:2f:7a:5c:2c:39:9e:61:3f:00:95:b8:
                    15:19:f0:38:9f:27:1f:75:46:17:6b:97:26:4c:1d:
                    94:2f:da:ca:aa:fc:46:58:ee:95:6e:dd:93:3c:79:
                    a5:9e:cd:f0:28:a3:29:33:94:93:bb:60:c5:be:eb:
                    55:fa:e8:7f:e7:e1:b3:4d:65:c1:d9:77:e4:4d:75:
                    eb:1d:da:db:a6:a3:07:30:3c:6d:39:9c:38:ca:9b:
                    95:f5:2c:6b:56:8d:4e:f3:2c:6c:cf:47:7b:67:a7:
                    ab:0f:a0:10:e7:ca:27:49:69:20:46:f0:64:dc:38:
                    78:51:4e:7a:e2:9e:6c:77:ce:b8:dd:37:db:18:de:
                    93:a5:1b:0e:9f:f0:b5:f3:59:c6:8b:13:73:95:b4:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A7:50:6C:3C:BC:44:1B:2A:8D:B5:8C:E7:0D:38:03:E9:BE:ED:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ee:9b:a8:5e:88:b7:6a:92:3b:01:46:29:f8:c8:25:17:85:08:
         8d:50:9a:45:1d:ab:13:6c:57:56:fc:1c:6d:68:d4:18:3b:c2:
         b1:ee:66:f9:f0:f8:46:40:b4:70:5c:d7:9c:47:11:64:20:17:
         71:c1:5f:7b:95:9c:62:13:9e:ec:bf:00:b2:49:ac:83:fa:60:
         b7:3e:80:ee:80:26:16:82:db:b2:b7:c5:cb:2e:d3:3e:29:e8:
         d4:43:a7:73:e4:2f:65:cb:79:d7:26:e9:f8:5b:83:c1:64:22:
         11:2f:90:19:69:22:c1:5f:e1:89:e2:c2:0a:84:43:5f:ed:52:
         8f:dc:0f:04:ca:6a:6b:0e:70:94:9d:8e:aa:81:ee:42:1c:16:
         a4:95:a6:74:65:3b:20:ce:3a:07:e7:01:11:cc:62:0a:15:d6:
         e1:e0:be:de:30:50:e9:c8:6b:f5:cc:11:e9:ef:3b:bb:db:0e:
         f4:bc:f7:3c:8e:2a:f5:2b:ad:00:07:6b:1d:81:a1:c8:ec:95:
         a2:9c:7d:eb:08:a3:b9:55:3f:fe:6d:33:64:a7:83:96:28:d4:
         8d:4c:68:01:30:66:b6:e2:ea:2a:a7:a9:b8:89:1e:fb:c8:4c:
         98:38:94:43:bd:36:96:a2:94:8b:65:1b:c0:68:df:66:d3:aa:
         58:82:6b:48
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE36cIC+HzBMaYt19QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh
ZGM0MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
ZGFkYTU4NDYtNTViYi00YTQ2LWIxZjktY2E1OGMxNTUxODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2KapP7DObFlRjnW+CinFFiAg0M0dIM3uXJ7
stiYTtdo3ysQxpjHBUQzffXFM+i3SkC3F+4wUYcaPljcRv+dWOa5Osg8kaBHrHcv
iUvn5qtfGQvRnSxkzHpFxs8TkegowbkJv0rY96nRMZXBL3pcLDmeYT8AlbgVGfA4
nycfdUYXa5cmTB2UL9rKqvxGWO6Vbt2TPHmlns3wKKMpM5STu2DFvutV+uh/5+Gz
TWXB2XfkTXXrHdrbpqMHMDxtOZw4ypuV9SxrVo1O8yxsz0d7Z6erD6AQ58onSWkg
RvBk3Dh4UU564p5sd8643TfbGN6TpRsOn/C181nGixNzlbQTgwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOunUGw8vEQbKo21jOcNOAPpvu3YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi
NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvOGY5OTc3YjQtYmYzZC0z
ODg2LTg2ZDItMmU1NzRmZjE2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2
MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz
YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz
OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA
xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAO6bqF6It2qSOwFGKfjIJReFCI1QmkUdqxNsV1b8HG1o1Bg7
wrHuZvnw+EZAtHBc15xHEWQgF3HBX3uVnGITnuy/ALJJrIP6YLc+gO6AJhaC27K3
xcsu0z4p6NRDp3PkL2XLedcm6fhbg8FkIhEvkBlpIsFf4YniwgqEQ1/tUo/cDwTK
amsOcJSdjqqB7kIcFqSVpnRlOyDOOgfnARHMYgoV1uHgvt4wUOnIa/XMEenvO7vb
DvS89zyOKvUrrQAHax2BocjslaKcfesIo7lVP/5tM2Sng5Yo1I1MaAEwZrbi6iqn
qbiJHvvITJg4lEO9NpailItlG8Bo32bTqliCa0g=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:37 2026 by rpki-client