Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
File:                     5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json)
Hash identifier:          9+1s88A4LL8kHBp8z+21NCm5CHpKa7TUjD7B2vUQdCw=
Subject key identifier:   DE:E0:F9:A4:4D:3D:4C:DB:32:A3:EC:16:00:5F:AA:39:83:11:7B:EF
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584E18AEF43718F1F98F0B18A040
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     5645
IP address blocks:        198.84.128.0/17 maxlen: 17
                          198.84.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f4:37:18:f1:f9:8f:0b:18:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=d7ab2a5f-2226-4a9b-9d6f-d9dae83c1cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:f5:81:cd:8a:a3:5d:1c:c5:57:09:06:3f:
                    8d:d9:66:db:a7:30:16:8b:f6:81:a7:15:ca:70:9d:
                    b4:c3:a0:20:37:e0:c5:63:f4:3d:bd:aa:cc:fa:7b:
                    b7:d5:73:dd:9d:ff:48:bc:05:4d:3e:e1:88:b6:12:
                    1c:22:65:6e:6f:04:fd:79:d5:85:59:51:6d:02:78:
                    86:c3:9c:b5:b8:3d:ff:f1:8f:04:f2:46:45:ff:9f:
                    11:24:5e:6d:ac:d9:e2:f5:ed:10:fc:01:a6:09:19:
                    34:95:b2:78:f6:60:a3:78:aa:a0:02:7c:63:9b:9e:
                    05:5c:be:9f:fe:3c:c7:ad:dd:3c:9a:ee:cd:c1:ab:
                    d4:cf:02:a0:6c:5d:41:f5:ea:ba:0a:4a:04:79:8c:
                    12:c3:bd:56:9c:ae:67:2b:66:f4:33:5a:36:58:2c:
                    4c:e3:5f:da:f9:4c:12:0f:1e:86:a2:ae:15:84:ae:
                    6d:c1:05:7e:6f:d1:17:fe:b4:a5:a2:02:ee:b4:87:
                    a9:fe:cd:0f:5a:76:41:62:4f:e7:3d:18:02:60:c9:
                    02:5c:c3:90:f9:0a:a0:6f:e3:ce:88:f0:51:bc:51:
                    0e:42:d2:bf:5f:53:9e:47:aa:65:69:72:30:02:a5:
                    73:42:ea:fd:8e:7f:bf:08:f7:f7:1a:9e:1d:fb:d0:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:F9:A4:4D:3D:4C:DB:32:A3:EC:16:00:5F:AA:39:83:11:7B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:b3:91:34:68:ab:00:48:1d:4f:79:36:f8:51:95:8f:a0:
         88:e8:6a:5c:74:55:b6:2a:02:ac:19:44:05:3b:71:99:fb:d7:
         0d:54:1c:29:08:76:2c:16:5e:69:22:85:ba:2b:4a:f8:78:9b:
         13:2c:91:1b:7e:aa:f0:3c:88:8b:32:2b:b5:18:aa:b8:cc:c5:
         6f:f9:7a:e3:9d:c0:1d:f8:15:30:be:d8:70:2f:94:dd:10:44:
         dd:95:fd:11:1d:56:94:85:b8:c4:a4:fe:55:1c:f6:69:97:f2:
         2a:4b:b2:34:5e:70:1e:46:f2:c0:3f:92:04:ff:4e:9c:e5:76:
         c5:30:89:bf:1d:12:08:92:c8:9f:1b:4b:49:91:65:3f:34:22:
         8f:6d:18:4e:0c:5e:92:6f:bd:2b:9b:aa:99:d0:96:73:a9:c6:
         9d:91:bd:ff:3a:3c:eb:ce:35:4f:e5:2a:5d:b5:f4:0e:23:c9:
         cd:44:b8:84:7a:ab:d9:94:6e:68:5e:63:5f:c3:8c:5e:ee:2b:
         87:f6:e0:63:e3:6a:c1:1a:20:cd:cb:38:74:55:c5:98:22:9c:
         5b:66:2b:de:7a:7b:5f:57:e4:ef:11:66:ff:06:8e:7a:a1:68:
         b6:6a:3b:ba:e6:c3:ae:75:04:14:7b:bf:82:53:7e:cf:fd:c8:
         60:eb:f8:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvQ3GPH5jwsYoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi
MWNjMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDdhYjJhNWYtMjIyNi00YTliLTlkNmYtZDlkYWU4M2MxY2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ef1gc2Ko10cxVcJBj+N2WbbpzAWi/aBpxXK
cJ20w6AgN+DFY/Q9varM+nu31XPdnf9IvAVNPuGIthIcImVubwT9edWFWVFtAniG
w5y1uD3/8Y8E8kZF/58RJF5trNni9e0Q/AGmCRk0lbJ49mCjeKqgAnxjm54FXL6f
/jzHrd08mu7NwavUzwKgbF1B9eq6CkoEeYwSw71WnK5nK2b0M1o2WCxM41/a+UwS
Dx6Goq4VhK5twQV+b9EX/rSlogLutIep/s0PWnZBYk/nPRgCYMkCXMOQ+Qqgb+PO
iPBRvFEOQtK/X1OeR6plaXIwAqVzQur9jn+/CPf3Gp4d+9DPkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7g+aRNPUzbMqPsFgBfqjmDEXvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl
NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTM4MmM5ODYtZTNhNS0z
ZWE3LWI0YzctMzQ3NDg4MmY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3
NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm
YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh
ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxlSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVOs5E0aKsASB1PeTb4UZWPoIjoalx0VbYqAqwZRAU7cZn71w1UHCkI
diwWXmkihborSvh4mxMskRt+qvA8iIsyK7UYqrjMxW/5euOdwB34FTC+2HAvlN0Q
RN2V/REdVpSFuMSk/lUc9mmX8ipLsjRecB5G8sA/kgT/TpzldsUwib8dEgiSyJ8b
S0mRZT80Io9tGE4MXpJvvSubqpnQlnOpxp2Rvf86POvONU/lKl219A4jyc1EuIR6
q9mUbmheY1/DjF7uK4f24GPjasEaIM3LOHRVxZginFtmK956e19X5O8RZv8Gjnqh
aLZqO7rmw651BBR7v4JTfs/9yGDr+LM=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:03:08 2026 by rpki-client