Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023bbb57-6a66-3be5-ba07-96342ca8d1b7.roa
File:                     023bbb57-6a66-3be5-ba07-96342ca8d1b7.roa (raw, json)
Hash identifier:          MmOlJOgqDxsw4RkP9ONw5ei6rptYbkMKSF7Or1c9Mvk=
Subject key identifier:   86:7F:62:FE:7F:33:3B:FD:C2:0F:B1:B8:84:BA:6A:AA:30:7C:AB:F3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FC88A249E6A4227772500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023bbb57-6a66-3be5-ba07-96342ca8d1b7.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        75.135.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:c8:8a:24:9e:6a:42:27:77:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=9f09e5da-42c0-4235-9543-9886d5b2c91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:9c:b1:86:ee:92:19:e5:46:2e:b6:68:d8:
                    29:8b:98:49:c1:34:54:47:0b:cd:ae:4a:a2:c1:30:
                    c7:c2:ee:70:3f:cc:20:95:68:c6:fa:b0:f4:8d:00:
                    22:ee:07:21:9b:a4:01:94:af:d0:05:7e:e0:c8:b3:
                    40:7a:c7:d1:89:a8:36:77:4f:2f:fc:0d:20:0e:49:
                    a5:41:7e:e4:a1:81:ef:5c:78:db:7c:46:77:cb:eb:
                    2d:89:aa:a5:db:77:63:bc:c6:ca:3e:af:f5:bf:c7:
                    38:4c:18:9e:7c:ac:bf:3b:e6:57:04:71:57:e5:88:
                    b8:eb:a8:4b:37:bc:2c:2d:f6:45:bf:aa:8e:a4:6b:
                    65:ca:8c:31:6b:1d:3b:36:87:58:a0:b0:4b:8d:29:
                    83:55:9e:1e:6c:9c:b9:15:33:f7:f6:89:5f:75:0c:
                    46:0b:b5:e4:33:ed:ba:84:db:63:09:d1:c6:f7:49:
                    70:dd:40:c9:52:60:6c:35:0e:d2:48:9f:58:ae:74:
                    ec:0f:b6:07:76:8d:aa:28:76:32:d5:5a:6d:2f:e1:
                    94:33:fe:d2:1a:c4:4d:fc:5f:8e:6c:45:17:95:ff:
                    6a:97:ce:11:ee:bd:c6:32:cf:a9:af:cf:52:eb:14:
                    fd:d0:54:4a:26:16:c2:3a:ca:ec:a3:1d:0f:3a:cf:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:62:FE:7F:33:3B:FD:C2:0F:B1:B8:84:BA:6A:AA:30:7C:AB:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023bbb57-6a66-3be5-ba07-96342ca8d1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.135.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:e2:cd:36:d6:d5:c6:ff:af:f7:5e:5c:03:f7:13:a6:ab:
         79:d8:b4:4d:b1:92:82:32:05:59:f5:9d:3a:b9:43:dd:ac:c8:
         12:75:17:eb:2c:e7:1f:d9:1f:ff:03:bc:7b:94:04:ee:8d:fe:
         a1:73:9e:94:63:ea:4c:ef:a2:e7:69:25:d3:c8:6a:8d:c0:6f:
         7e:fe:75:eb:d3:3e:d6:67:d3:67:3b:ec:87:f8:f1:52:95:29:
         e9:21:37:dd:7c:e4:09:e1:43:af:c3:8c:b8:f6:ec:24:77:97:
         d7:a5:c1:52:1e:6a:96:77:07:73:fa:f4:ab:f6:b6:62:e9:12:
         ca:4f:a7:4d:c5:33:33:82:0c:fd:08:7e:b2:b4:cd:0c:31:e9:
         c6:4a:b2:a1:fc:45:0e:f3:a4:f5:44:96:13:fe:11:34:11:90:
         09:55:bc:61:61:74:a6:d9:65:7b:7d:09:e3:49:80:2a:1a:1b:
         7d:f2:00:66:81:38:5b:c5:c8:5d:a2:e6:77:a8:cf:3f:5f:2e:
         59:65:6b:34:57:12:f8:f3:6b:75:9f:07:91:cb:8e:87:38:ea:
         67:8b:a9:aa:cc:37:05:63:d9:52:57:52:d7:5d:65:14:69:be:
         c2:7c:29:e2:32:73:17:7c:13:d9:05:47:e0:96:ba:5d:d3:4a:
         4c:c1:a6:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD8iKJJ5qQid3JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
OWYwOWU1ZGEtNDJjMC00MjM1LTk1NDMtOTg4NmQ1YjJjOTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxScsYbukhnlRi62aNgpi5hJwTRURwvNrkqi
wTDHwu5wP8wglWjG+rD0jQAi7gchm6QBlK/QBX7gyLNAesfRiag2d08v/A0gDkml
QX7koYHvXHjbfEZ3y+stiaql23djvMbKPq/1v8c4TBiefKy/O+ZXBHFX5Yi466hL
N7wsLfZFv6qOpGtlyowxax07NodYoLBLjSmDVZ4ebJy5FTP39olfdQxGC7XkM+26
hNtjCdHG90lw3UDJUmBsNQ7SSJ9YrnTsD7YHdo2qKHYy1VptL+GUM/7SGsRN/F+O
bEUXlf9ql84R7r3GMs+pr89S6xT90FRKJhbCOsrsox0POs8zfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZ/Yv5/Mzv9wg+xuIS6aqowfKvzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDIzYmJiNTctNmE2Ni0z
YmU1LWJhMDctOTYzNDJjYThkMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS4cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALZR4s021tXG/6/3XlwD9xOmq3nYtE2xkoIyBVn1nTq5Q92syBJ1F+ss
5x/ZH/8DvHuUBO6N/qFznpRj6kzvoudpJdPIao3Ab37+devTPtZn02c77If48VKV
KekhN9185AnhQ6/DjLj27CR3l9elwVIeapZ3B3P69Kv2tmLpEspPp03FMzOCDP0I
frK0zQwx6cZKsqH8RQ7zpPVElhP+ETQRkAlVvGFhdKbZZXt9CeNJgCoaG33yAGaB
OFvFyF2i5neozz9fLlllazRXEvjza3WfB5HLjoc46meLqarMNwVj2VJXUtddZRRp
vsJ8KeIycxd8E9kFR+CWul3TSkzBpvo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:23 2026 by rpki-client