Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File:                     f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier:          NC7x9VnGHE2CztneBhbioCyZKdWYMZxJ3eWsQk9rGL8=
Subject key identifier:   73:45:85:73:B2:1E:68:01:25:57:23:AA:CA:5A:9A:D6:DB:5F:5F:31
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584EA786F9DE76B70D9D394F4C80
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     210110
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f9:de:76:b7:0d:9d:39:4f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1fc8cace-2e65-402c-95b3-d72d34ae50da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:8e:a7:94:2d:cf:bd:69:f6:86:3f:12:29:
                    93:a9:e9:8f:2d:74:0e:d9:b5:54:0f:e2:18:ce:e8:
                    6b:b8:a2:a0:e3:8e:18:00:a7:f4:7f:82:ff:0f:db:
                    01:e2:23:9d:7c:f4:2b:a2:f4:45:1a:09:5c:3b:70:
                    db:79:2b:d9:89:59:40:ec:9a:82:46:6a:4f:93:0f:
                    e3:a1:4a:01:88:65:dd:e8:c9:d4:b3:f3:0d:b0:50:
                    08:0c:ae:1e:55:91:85:53:94:7a:c9:9c:b1:ac:cb:
                    1f:9c:ef:ec:56:ce:4c:2f:d8:cd:c7:73:35:da:e2:
                    64:53:1b:e7:a7:66:a2:3a:45:a9:3d:ea:6b:2e:d5:
                    11:f8:b1:20:da:63:69:ed:97:50:e5:8b:61:66:7f:
                    b1:70:f8:fc:09:1b:aa:d5:5f:09:9d:8f:b3:b7:d4:
                    b1:e8:5c:f8:91:01:b9:e8:08:35:35:87:43:9b:1b:
                    58:05:bf:19:84:09:a9:48:02:d9:ed:c7:70:0b:7c:
                    7c:ba:fd:89:f1:72:8e:72:c6:14:dc:e1:2d:ed:2a:
                    c5:86:dc:d5:94:84:f2:a1:49:9f:e7:66:1a:8f:f6:
                    c4:af:a5:b6:8c:46:89:af:88:88:ef:88:4b:4b:b9:
                    2e:c2:f1:7d:89:cc:12:55:b1:10:a2:00:9a:88:ed:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:45:85:73:B2:1E:68:01:25:57:23:AA:CA:5A:9A:D6:DB:5F:5F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:ce:e9:94:93:38:d2:02:a0:b9:f0:00:50:21:d1:da:be:
         c2:e2:32:e4:1c:05:c2:36:1f:0a:70:67:32:d1:e5:25:5d:f9:
         50:1d:2b:71:50:9f:72:eb:3f:9f:dc:c1:11:fa:0b:24:20:3d:
         1a:a8:26:ef:82:4e:88:de:3d:42:cf:52:64:a4:8f:bc:91:fe:
         fb:df:aa:29:23:86:ab:97:e5:c3:71:40:36:88:f0:02:40:7a:
         cc:fd:42:d1:00:79:ac:3e:8b:75:4e:01:1f:92:55:8a:43:6c:
         6c:1b:7d:5e:30:35:d7:e9:07:40:d1:7f:d5:cf:11:a9:b0:4b:
         f6:a6:cb:77:6d:11:9c:e2:c6:ca:ac:2d:9b:29:2b:cb:2a:63:
         a3:17:8d:b7:d6:a1:f9:e6:3d:da:72:d9:b0:4e:53:15:c6:2b:
         0a:6c:44:21:c7:fa:b4:20:fb:95:8f:13:b5:59:c9:25:12:55:
         2c:94:cd:c3:8a:34:3c:da:29:1c:3a:12:99:7a:cd:41:1c:74:
         1e:b7:32:16:2c:74:e3:18:22:64:66:1d:da:99:15:3f:9d:51:
         c1:22:f6:36:ce:89:68:7b:e2:35:95:9b:ad:ab:7a:93:d0:b5:
         88:da:28:e3:29:a0:9f:31:87:24:37:f4:c8:f5:30:df:a0:aa:
         25:4f:f4:77
-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWE6nhvnedrcNnTlPTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1
ZTM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWZjOGNhY2UtMmU2NS00MDJjLTk1YjMtZDcyZDM0YWU1MGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3OOp5Qtz71p9oY/EimTqemPLXQO2bVUD+IY
zuhruKKg444YAKf0f4L/D9sB4iOdfPQrovRFGglcO3DbeSvZiVlA7JqCRmpPkw/j
oUoBiGXd6MnUs/MNsFAIDK4eVZGFU5R6yZyxrMsfnO/sVs5ML9jNx3M12uJkUxvn
p2aiOkWpPeprLtUR+LEg2mNp7ZdQ5YthZn+xcPj8CRuq1V8JnY+zt9Sx6Fz4kQG5
6Ag1NYdDmxtYBb8ZhAmpSALZ7cdwC3x8uv2J8XKOcsYU3OEt7SrFhtzVlITyoUmf
52Yaj/bEr6W2jEaJr4iI74hLS7kuwvF9icwSVbEQogCaiO15TQIDAQABo4IDvDCC
A7gwHQYDVR0OBBYEFHNFhXOyHmgBJVcjqspamtbbX18xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx
ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvZjYyZTFhZTItZmZmYi0z
M2JlLTllYmQtNzQ3M2I4MDY2ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi
YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1
NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky
OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME
BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME
BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME
AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQALeM7plJM40gKgufAAUCHR2r7C4jLkHAXCNh8KcGcy0eUl
XflQHStxUJ9y6z+f3MER+gskID0aqCbvgk6I3j1Cz1JkpI+8kf7736opI4arl+XD
cUA2iPACQHrM/ULRAHmsPot1TgEfklWKQ2xsG31eMDXX6QdA0X/VzxGpsEv2pst3
bRGc4sbKrC2bKSvLKmOjF4231qH55j3actmwTlMVxisKbEQhx/q0IPuVjxO1Wckl
ElUslM3DijQ82ikcOhKZes1BHHQetzIWLHTjGCJkZh3amRU/nVHBIvY2zoloe+I1
lZutq3qT0LWI2ijjKaCfMYckN/TI9TDfoKolT/R3
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:40:12 2026 by rpki-client