Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
File:                     064a5eec-8029-3054-85ec-74c43a35dabf.roa (raw, json)
Hash identifier:          UDFA1pdWggbDLtOYVlwpEcVGIH6oRDMpjgnQmtEqisM=
Subject key identifier:   C5:FB:75:68:6A:7A:33:A6:45:53:01:D8:F1:C7:27:CF:6C:27:61:2D
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584D7B6A7D9704900C9E116B6640
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     20205
IP address blocks:        158.247.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7d:97:04:90:0c:9e:11:6b:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=d84a7981-d3d8-4276-8f57-396535adc1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:13:c0:62:a4:8c:8e:1c:e0:71:e2:f5:1c:
                    54:bd:5c:7f:2d:ba:c2:01:7c:34:eb:67:f1:96:79:
                    89:2f:de:e3:3a:7a:88:2e:07:08:b9:6a:09:f1:eb:
                    b4:c8:e7:46:54:8f:6a:97:b7:bb:a9:07:4c:e1:85:
                    bf:51:48:7f:e9:10:3e:b5:4c:b3:c2:6a:4d:16:09:
                    00:17:21:fc:db:99:e7:6c:ca:b9:0d:de:33:b6:61:
                    b3:10:08:b7:fe:bc:b6:de:3c:28:31:6c:b9:5d:77:
                    0f:72:0e:2a:c1:a0:e0:9c:de:6d:61:67:5a:12:98:
                    2a:97:a3:64:4a:70:84:06:cd:2e:e4:cf:fa:fa:08:
                    2c:d5:18:15:7b:8d:b5:89:8a:c4:f5:cc:85:ba:df:
                    ef:7e:ba:27:a6:c2:10:0c:27:d1:58:4f:d7:43:58:
                    fa:08:87:f6:b1:be:94:2b:06:44:42:a4:89:9a:76:
                    f3:cd:db:08:28:59:29:ee:1f:7a:55:64:76:41:aa:
                    60:92:16:25:a3:28:d2:8d:8a:4e:de:e0:bf:e4:13:
                    13:76:e1:ba:e9:eb:bd:c5:74:1b:57:00:ee:87:f1:
                    47:8a:77:7a:63:ef:d9:58:24:4f:a4:f0:48:a8:8a:
                    90:ae:cc:b1:07:9b:4a:06:a6:8c:ef:97:cf:cf:13:
                    d7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FB:75:68:6A:7A:33:A6:45:53:01:D8:F1:C7:27:CF:6C:27:61:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:55:29:bb:81:70:23:05:4a:86:c4:e9:2f:46:b7:e0:dd:
         81:08:0b:01:fe:53:70:19:ef:8f:f4:3a:eb:85:0d:35:04:56:
         8a:45:02:28:a2:8a:d6:f0:d0:2c:48:1f:f9:08:2e:c9:ec:93:
         89:cd:e5:5c:7b:df:bb:b8:9a:28:65:62:47:09:de:ef:f5:4c:
         24:44:05:da:f0:73:4b:0c:f2:1a:29:55:5a:4c:da:55:59:ca:
         4c:f5:bf:3a:fc:97:26:05:94:40:8e:e2:51:e7:87:72:e7:98:
         61:70:76:8d:85:13:9d:03:d1:91:0b:28:60:8c:b3:77:dc:39:
         92:b1:c1:38:3e:9f:4b:04:c9:15:6d:13:1b:39:ed:6b:d7:fe:
         c0:62:3a:f1:1c:59:79:35:e6:ed:3a:7c:cb:15:ea:12:d7:73:
         e3:80:b7:b6:69:03:cd:47:87:84:a3:2d:4e:f6:0f:06:a4:a8:
         eb:6a:dd:6b:57:85:e3:a1:e9:e1:a6:60:59:67:ad:6a:9b:52:
         d3:16:30:ad:4f:e7:c3:ed:5a:a0:c2:be:57:aa:5f:32:01:f1:
         36:b2:e0:99:7d:8e:60:b9:de:05:5d:0c:29:03:32:05:30:b1:
         87:81:f1:75:0f:97:48:14:9b:1d:41:a1:e8:46:a0:47:24:6e:
         1b:1f:26:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17an2XBJAMnhFrZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDg0YTc5ODEtZDNkOC00Mjc2LThmNTctMzk2NTM1YWRjMWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfYTwGKkjI4c4HHi9RxUvVx/LbrCAXw062fx
lnmJL97jOnqILgcIuWoJ8eu0yOdGVI9ql7e7qQdM4YW/UUh/6RA+tUyzwmpNFgkA
FyH825nnbMq5Dd4ztmGzEAi3/ry23jwoMWy5XXcPcg4qwaDgnN5tYWdaEpgql6Nk
SnCEBs0u5M/6+ggs1RgVe421iYrE9cyFut/vfronpsIQDCfRWE/XQ1j6CIf2sb6U
KwZEQqSJmnbzzdsIKFkp7h96VWR2QapgkhYloyjSjYpO3uC/5BMTduG66eu9xXQb
VwDuh/FHind6Y+/ZWCRPpPBIqIqQrsyxB5tKBqaM75fPzxPXcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMX7dWhqejOmRVMB2PHHJ89sJ2EtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMDY0YTVlZWMtODAyOS0z
MDU0LTg1ZWMtNzRjNDNhMzVkYWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnvdIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnTVSm7gXAjBUqGxOkvRrfg3YEICwH+U3AZ74/0OuuFDTUEVopFAiii
itbw0CxIH/kILsnsk4nN5Vx737u4mihlYkcJ3u/1TCREBdrwc0sM8hopVVpM2lVZ
ykz1vzr8lyYFlECO4lHnh3LnmGFwdo2FE50D0ZELKGCMs3fcOZKxwTg+n0sEyRVt
Exs57WvX/sBiOvEcWXk15u06fMsV6hLXc+OAt7ZpA81Hh4SjLU72DwakqOtq3WtX
heOh6eGmYFlnrWqbUtMWMK1P58PtWqDCvleqXzIB8Tay4Jl9jmC53gVdDCkDMgUw
sYeB8XUPl0gUmx1BoehGoEckbhsfJro=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:28 2026 by rpki-client