Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa
File:                     1b5bca19-3aed-3ecb-8006-85f1800bd993.roa (raw, json)
Hash identifier:          04QcBaYEtCxTpY+XU7rTAMDAENEixXcdmPdkdoXhgig=
Subject key identifier:   54:B4:6D:24:B6:E5:54:99:EC:93:88:1D:70:C8:7D:CC:9D:C6:C1:3E
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584D4D5A4D7E9175503E811AFB80
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6639
IP address blocks:        199.201.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:4d:7e:91:75:50:3e:81:1a:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=86418956-1dcf-40f5-991f-ca9a2996fd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:dd:c5:d4:8c:8e:70:4c:f3:93:15:41:45:
                    a9:f2:8a:f9:b5:86:f8:4a:b2:c0:9c:65:d4:f0:12:
                    fd:4d:80:a8:ac:c7:4b:11:f4:5c:0f:7c:c1:66:02:
                    cd:b2:dd:73:db:b5:c5:fd:7d:a0:83:02:7b:8c:50:
                    5f:37:98:b8:d8:e4:b2:6c:94:f7:3d:8d:37:8e:7a:
                    66:d0:21:27:b4:93:14:d9:81:ff:3d:e9:b3:27:32:
                    08:dc:d0:80:e5:4a:2d:e5:21:ec:d9:cc:89:b2:51:
                    92:b0:9b:36:21:3a:9c:c2:45:bb:8a:20:95:cb:46:
                    ac:ac:ca:db:02:2e:98:0e:6e:22:65:43:6c:07:14:
                    2d:5c:28:f2:05:1d:c4:e7:b2:1d:11:d9:5d:0a:e2:
                    fc:48:c0:6c:57:87:f4:0a:12:d4:98:a4:e2:07:86:
                    1b:f6:be:52:23:2f:99:fb:06:be:a1:40:1b:b0:67:
                    02:97:cd:d8:03:24:31:c0:7e:dc:ea:26:fc:5d:9f:
                    11:4d:52:da:fb:71:91:a3:08:bb:83:82:11:69:f1:
                    37:7c:2a:e7:d0:ec:01:c5:f0:0f:94:64:20:03:b1:
                    5c:5f:d8:97:da:1a:3c:1c:77:ab:b3:e1:08:ab:4c:
                    40:00:eb:4d:06:2b:63:dc:66:f8:d6:aa:c1:d2:3b:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:6D:24:B6:E5:54:99:EC:93:88:1D:70:C8:7D:CC:9D:C6:C1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:2d:a7:fd:02:cc:d1:4b:73:1f:03:74:e1:fa:68:7d:a7:
         7a:b5:45:ab:91:6f:6d:f8:ae:62:c7:b7:54:c5:f6:36:3c:4c:
         24:ea:19:34:a8:b0:6c:74:f3:db:50:9b:c5:d3:a4:e6:63:2f:
         8e:7e:11:a3:a0:b5:33:56:15:b5:6b:e4:fa:93:76:68:49:03:
         d4:68:27:81:9d:ee:55:0f:1f:c9:02:0a:5a:25:33:c8:73:e0:
         3d:02:17:18:74:fd:2d:2e:4e:d8:87:cf:90:33:b2:84:25:fa:
         65:45:c8:c7:e8:49:af:c7:ba:e5:03:7c:4c:23:6f:af:c5:b5:
         97:66:fb:b1:65:82:3f:08:95:62:c7:07:e0:82:42:8f:d4:6c:
         bf:7c:ca:64:16:02:f9:b1:1b:54:ce:64:f7:8e:6d:79:dc:ec:
         ef:e5:a5:53:09:ab:11:5d:69:70:6f:d2:9d:6e:0f:e4:bd:a3:
         0b:6a:e9:f5:a6:37:45:63:79:74:d3:28:fb:54:79:af:4a:3c:
         e1:ef:bc:c1:1a:ba:4b:d4:40:43:84:42:0b:da:f7:22:9a:ed:
         02:67:14:57:c1:c7:16:8c:d1:16:1c:8f:4b:93:08:7a:21:f5:
         e7:5a:19:ae:43:32:49:c2:c1:b9:73:11:54:e8:b5:8f:c8:ef:
         59:b9:f0:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk1+kXVQPoEa+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx
ZTI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ODY0MTg5NTYtMWRjZi00MGY1LTk5MWYtY2E5YTI5OTZmZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ndxdSMjnBM85MVQUWp8or5tYb4SrLAnGXU
8BL9TYCorMdLEfRcD3zBZgLNst1z27XF/X2ggwJ7jFBfN5i42OSybJT3PY03jnpm
0CEntJMU2YH/PemzJzII3NCA5Uot5SHs2cyJslGSsJs2ITqcwkW7iiCVy0asrMrb
Ai6YDm4iZUNsBxQtXCjyBR3E57IdEdldCuL8SMBsV4f0ChLUmKTiB4Yb9r5SIy+Z
+wa+oUAbsGcCl83YAyQxwH7c6ib8XZ8RTVLa+3GRowi7g4IRafE3fCrn0OwBxfAP
lGQgA7FcX9iX2ho8HHers+EIq0xAAOtNBitj3Gb41qrB0jvdcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFS0bSS25VSZ7JOIHXDIfcydxsE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4
NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMWI1YmNhMTktM2FlZC0z
ZWNiLTgwMDYtODVmMTgwMGJkOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3
MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl
MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh
NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8lUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADppLaf9AszRS3MfA3Th+mh9p3q1RauRb234rmLHt1TF9jY8TCTqGTSo
sGx089tQm8XTpOZjL45+EaOgtTNWFbVr5PqTdmhJA9RoJ4Gd7lUPH8kCClolM8hz
4D0CFxh0/S0uTtiHz5AzsoQl+mVFyMfoSa/HuuUDfEwjb6/FtZdm+7Flgj8IlWLH
B+CCQo/UbL98ymQWAvmxG1TOZPeObXnc7O/lpVMJqxFdaXBv0p1uD+S9owtq6fWm
N0VjeXTTKPtUea9KPOHvvMEaukvUQEOEQgva9yKa7QJnFFfBxxaM0RYcj0uTCHoh
9edaGa5DMknCwblzEVTotY/I71m58Oo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:32 2026 by rpki-client