Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa
File:                     b04b7367-5452-3760-b2f3-796a906930bc.roa (raw, json)
Hash identifier:          uzzbInNRBvrRPLzsr34t/mOLMJ/J2vzJ/t3d2u0JTn0=
Subject key identifier:   F1:85:2E:1B:B4:45:35:EF:96:9F:3A:E3:A5:5F:7A:FF:C0:D4:87:6B
Certificate issuer:       /CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d
Certificate serial:       010D0C9F4328584D7CCFDF66D646210B98F6A200
Authority key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     11965
IP address blocks:        64.39.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:df:66:d6:46:21:0b:98:f6:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=4ddcfe95-363f-45ad-b98a-018b139957bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:3f:e5:81:da:f4:ba:6a:4b:05:12:15:8c:
                    52:ea:d9:a9:eb:d0:fb:5b:19:36:5b:2b:d9:21:82:
                    17:a1:6d:e8:b2:a7:2c:4f:61:b0:b1:03:fb:f8:93:
                    a9:83:d7:ed:5b:53:2b:dc:60:6f:f2:cc:51:3e:df:
                    23:b5:2d:97:25:25:7b:1f:a5:00:63:dc:ea:b6:ee:
                    95:87:60:dd:2a:2f:35:1f:12:11:25:99:a2:a7:3a:
                    67:9d:9a:8c:df:94:35:24:bd:e4:ef:74:59:b6:15:
                    8f:67:33:c3:1b:b5:98:fe:d0:7e:c6:5a:07:5f:da:
                    7a:f5:1e:13:36:97:f9:99:b6:6a:a2:3e:12:2d:22:
                    55:c9:e4:2d:c8:bf:6a:33:ff:cb:13:91:8a:31:9d:
                    d6:53:e3:79:4f:0c:86:ea:14:97:76:cc:12:61:23:
                    b9:0e:c1:e9:56:72:33:37:26:c3:df:26:63:b2:42:
                    e5:45:d8:d8:0f:d1:ac:e4:15:3c:42:08:f5:2f:9e:
                    12:2c:0c:cd:92:ea:8d:9c:56:38:fe:8a:e5:57:fa:
                    e4:62:be:e1:4f:bc:5b:b4:8e:14:9d:19:f8:0e:ac:
                    5c:81:f7:b5:fc:94:57:85:8c:f9:70:b5:16:56:1c:
                    95:37:b9:a8:bb:6a:94:ab:15:2c:80:b5:50:e8:2a:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:2E:1B:B4:45:35:EF:96:9F:3A:E3:A5:5F:7A:FF:C0:D4:87:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/b04b7367-5452-3760-b2f3-796a906930bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl

            X509v3 Authority Key Identifier:
                keyid:B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:dc:b6:3d:ba:9e:35:bd:70:9f:0a:f4:c9:2b:11:3a:c3:
         43:18:f6:b0:e9:78:84:9e:7e:58:2e:4e:45:a0:fc:dc:3e:2b:
         84:71:87:5a:70:4a:06:c3:b9:7b:45:47:9e:b9:61:49:21:94:
         be:2c:5c:5c:c7:35:97:7b:66:86:1d:5b:b6:4b:37:01:bf:60:
         d4:eb:3f:3e:93:63:75:85:a8:c3:c3:55:11:5f:23:8c:25:8a:
         69:64:a1:89:26:bc:b0:7e:7b:1f:6f:b0:84:e4:e5:5f:c9:30:
         4e:47:90:fc:3a:4f:ea:60:e6:1e:27:33:fa:1d:8c:e6:3b:3e:
         be:cf:ce:a2:8e:9f:c3:bb:41:f0:0e:85:dd:c8:7b:8a:bc:f7:
         90:bb:87:ed:34:22:14:cc:d0:a2:ad:43:4c:b1:2f:46:19:5d:
         53:ff:1f:0e:da:37:d0:c2:71:f3:9b:28:35:7f:b1:4c:3f:fa:
         61:9d:2e:ae:1b:86:bd:98:95:62:57:66:4a:9c:aa:41:39:78:
         47:d7:5d:57:d2:bc:68:2a:17:ad:13:03:67:a8:1d:89:da:6a:
         3e:0f:ae:d0:b4:b9:73:02:65:b8:2d:2e:9b:d1:e8:e0:a5:89:
         2e:de:5f:e5:ef:ee:cf:6b:fe:1c:50:71:0f:a1:13:dd:bf:aa:
         eb:d4:ba:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z99m1kYhC5j2ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyYzZiNjUtZGNmZC00MTJhLTg3ODgtOGJhYTkxZmIz
YTFkMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
NGRkY2ZlOTUtMzYzZi00NWFkLWI5OGEtMDE4YjEzOTk1N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbQ/5YHa9LpqSwUSFYxS6tmp69D7Wxk2WyvZ
IYIXoW3osqcsT2GwsQP7+JOpg9ftW1Mr3GBv8sxRPt8jtS2XJSV7H6UAY9zqtu6V
h2DdKi81HxIRJZmipzpnnZqM35Q1JL3k73RZthWPZzPDG7WY/tB+xloHX9p69R4T
Npf5mbZqoj4SLSJVyeQtyL9qM//LE5GKMZ3WU+N5TwyG6hSXdswSYSO5DsHpVnIz
NybD3yZjskLlRdjYD9Gs5BU8Qgj1L54SLAzNkuqNnFY4/orlV/rkYr7hT7xbtI4U
nRn4Dqxcgfe1/JRXhYz5cLUWVhyVN7mou2qUqxUsgLVQ6CosPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGFLhu0RTXvlp8646Vfev/A1IdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDJj
NmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFmYjNhMWQvYjA0YjczNjctNTQ1Mi0z
NzYwLWIyZjMtNzk2YTkwNjkzMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDAyYzZiNjUtZGNmZC00MTJhLTg3
ODgtOGJhYTkxZmIzYTFkLzQwMmM2YjY1LWRjZmQtNDEyYS04Nzg4LThiYWE5MWZi
M2ExZC5jcmwwHwYDVR0jBBgwFoAUtsg0jmaGn6w1+CVuUQdfRLRRSSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFh
OTFmYjNhMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCflMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4Z3LY9up41vXCfCvTJKxE6w0MY9rDpeISeflguTkWg/Nw+K4Rxh1pw
SgbDuXtFR565YUkhlL4sXFzHNZd7ZoYdW7ZLNwG/YNTrPz6TY3WFqMPDVRFfI4wl
imlkoYkmvLB+ex9vsITk5V/JME5HkPw6T+pg5h4nM/odjOY7Pr7PzqKOn8O7QfAO
hd3Ie4q895C7h+00IhTM0KKtQ0yxL0YZXVP/Hw7aN9DCcfObKDV/sUw/+mGdLq4b
hr2YlWJXZkqcqkE5eEfXXVfSvGgqF60TA2eoHYnaaj4PrtC0uXMCZbgtLpvR6OCl
iS7eX+Xv7s9r/hxQcQ+hE92/quvUuis=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:05 2026 by rpki-client