Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa
File:                     f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa (raw, json)
Hash identifier:          9WaGgILoffbpU2seOpvjvrN51iXXvH0RZdJkoBvWlHE=
Subject key identifier:   E4:C7:99:4D:AE:C1:20:B4:0F:AC:F7:68:11:14:EB:2F:86:05:95:34
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584EA79E904C92F9903763042280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        208.65.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:90:4c:92:f9:90:37:63:04:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=77f0d530-01a5-4c7d-bbe2-3a51146ef294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:08:fd:97:5f:6a:4b:b7:c6:22:af:2c:0a:
                    e8:52:da:a2:78:df:f2:66:e7:9e:9a:59:9b:5b:03:
                    a9:98:3b:87:b0:c5:bf:d0:01:77:25:df:2b:1a:f0:
                    f9:c4:2f:ff:7c:8a:0d:61:c5:b7:ae:23:4a:a9:36:
                    0a:b3:56:04:7c:07:a3:46:58:f3:b7:f8:9b:10:cb:
                    0d:62:ef:76:46:ff:fa:e0:26:fc:d9:fd:97:5a:40:
                    42:a6:93:2a:ee:f2:5a:db:77:75:ec:56:06:1e:48:
                    4f:5c:eb:16:d3:a0:cb:b0:b3:4b:bd:9b:8c:79:03:
                    bb:a3:fe:5f:0b:fa:67:56:b6:ed:2d:ab:8c:db:28:
                    b6:76:1b:0b:b5:56:81:30:8e:31:32:d5:c8:f3:32:
                    91:e7:0f:36:c0:cd:14:40:99:00:e0:19:6d:80:21:
                    36:c2:a0:94:ff:4e:fb:fb:e0:ae:65:c8:03:40:dd:
                    f4:58:c6:6a:da:71:50:da:18:8c:d5:70:5c:2a:19:
                    69:94:65:25:6d:9a:4b:3d:7e:0b:ff:70:39:56:69:
                    d0:17:6a:59:65:7d:fa:d4:39:c3:f7:4e:20:d6:09:
                    e1:81:94:66:eb:6e:0b:8e:c2:30:29:ea:01:94:39:
                    39:3e:3d:bc:25:df:6b:13:b2:eb:3d:79:39:b1:94:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:99:4D:AE:C1:20:B4:0F:AC:F7:68:11:14:EB:2F:86:05:95:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:39:a8:9d:a8:86:89:ac:88:6f:1b:bc:30:2d:68:cb:42:
         a5:25:1c:2f:00:4e:4d:23:b7:52:ae:3e:72:e4:5a:4c:77:b8:
         e5:34:b4:c0:8d:41:84:6f:f4:d3:49:b7:78:0d:08:ef:02:df:
         b5:9c:50:cc:47:74:31:d8:ae:68:9d:3a:83:a1:15:8b:bc:f7:
         4b:34:3e:6e:bb:28:d4:48:ac:2b:61:9f:0b:ca:1c:96:66:97:
         a2:ba:5a:69:a6:05:55:4e:18:ff:46:1e:f8:1c:cd:62:69:74:
         57:97:6e:53:bf:fc:5f:cb:8d:dc:b3:5d:d9:ae:a9:d7:35:b5:
         e9:d1:65:10:2a:84:97:0a:a3:e0:c0:71:92:35:2a:a7:38:0e:
         a8:57:fd:7b:ef:ec:4c:07:a2:2a:ad:3c:a1:a0:d5:63:32:1f:
         1a:c8:3a:07:65:3a:74:7a:d5:12:08:30:fd:60:2e:8b:05:8e:
         e9:0c:f6:8e:13:b9:13:ad:63:7d:a2:ff:fd:52:7a:7f:53:96:
         67:47:a9:a7:47:64:3d:b0:da:1d:60:db:8f:29:c9:2c:89:c7:
         8d:24:63:6c:c3:e8:91:85:d6:cf:84:44:08:33:10:96:df:af:
         b9:df:57:2a:f2:e4:86:53:6b:f6:6c:50:ab:72:4e:6d:b7:04:
         c8:fe:1a:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnpBMkvmQN2MEIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzdmMGQ1MzAtMDFhNS00YzdkLWJiZTItM2E1MTE0NmVmMjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKAI/Zdfaku3xiKvLAroUtqieN/yZueemlmb
WwOpmDuHsMW/0AF3Jd8rGvD5xC//fIoNYcW3riNKqTYKs1YEfAejRljzt/ibEMsN
Yu92Rv/64Cb82f2XWkBCppMq7vJa23d17FYGHkhPXOsW06DLsLNLvZuMeQO7o/5f
C/pnVrbtLauM2yi2dhsLtVaBMI4xMtXI8zKR5w82wM0UQJkA4BltgCE2wqCU/077
++CuZcgDQN30WMZq2nFQ2hiM1XBcKhlplGUlbZpLPX4L/3A5VmnQF2pZZX361DnD
904g1gnhgZRm624LjsIwKeoBlDk5Pj28Jd9rE7LrPXk5sZSwowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTHmU2uwSC0D6z3aBEU6y+GBZU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZjk2NTcxYTktY2I4ZC0z
NDliLWFhYTAtMzc4ZjBiY2YwNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALuFOaidqIaJrIhvG7wwLWjLQqUlHC8ATk0jt1KuPnLkWkx3uOU0tMCN
QYRv9NNJt3gNCO8C37WcUMxHdDHYrmidOoOhFYu890s0Pm67KNRIrCthnwvKHJZm
l6K6WmmmBVVOGP9GHvgczWJpdFeXblO//F/LjdyzXdmuqdc1tenRZRAqhJcKo+DA
cZI1Kqc4DqhX/Xvv7EwHoiqtPKGg1WMyHxrIOgdlOnR61RIIMP1gLosFjukM9o4T
uROtY32i//1Sen9TlmdHqadHZD2w2h1g248pySyJx40kY2zD6JGF1s+ERAgzEJbf
r7nfVyry5IZTa/ZsUKtyTm23BMj+GqQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:05 2026 by rpki-client