Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa
File:                     2d0999fc-6ff4-35a6-93fa-3979f0432902.roa (raw, json)
Hash identifier:          DqOgwQaxeCJW5AtTSyA+GF99ProVfQiKk/T7tIRQ2rs=
Subject key identifier:   4C:5E:65:E0:90:94:65:C5:77:D8:3B:9F:07:F0:E4:62:9E:3C:0A:33
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584E5FDF5E0ACD96AB3651BD1080
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        208.81.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5e:0a:cd:96:ab:36:51:bd:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=dfe42889-0964-4680-bf3c-c0baecb5b57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:53:d9:e5:62:5d:7f:0d:db:c8:c6:6b:83:fa:
                    c3:e0:17:c7:a1:a4:a0:f5:c6:fc:5b:aa:8c:50:e3:
                    54:66:01:2f:81:c4:fd:eb:9a:2f:7a:00:c4:bb:94:
                    55:02:c8:30:ed:b7:69:a1:b3:bb:43:6a:34:d4:58:
                    3a:b2:79:24:1d:a6:50:3c:2f:42:d8:06:b6:cc:f3:
                    43:c9:6c:85:77:d0:43:f3:31:8e:a2:d0:2a:fc:b6:
                    85:34:20:55:e7:64:23:e2:c1:f0:87:7d:f9:45:c3:
                    db:ba:85:9e:a4:3b:c3:28:e3:b1:ec:d3:16:b5:4d:
                    87:5c:60:19:2d:94:00:3f:06:ef:0a:a7:70:a5:e9:
                    ed:51:3e:3b:54:76:11:11:12:f4:d4:fb:b7:a5:76:
                    c6:d0:2f:ba:c0:56:67:a4:30:b1:bf:83:0b:47:47:
                    de:48:d4:f9:75:00:13:07:bd:d2:3f:ec:d7:da:41:
                    55:14:dd:79:05:3c:1c:d4:6c:99:18:66:c4:99:f2:
                    ec:66:fc:73:38:38:8f:e9:24:a0:f3:44:e3:e8:a3:
                    b3:fb:69:ce:77:62:82:db:b8:71:15:69:ad:51:2b:
                    c5:74:fa:d0:46:a7:94:a2:3a:8c:99:08:6c:9e:72:
                    4b:ba:be:6c:ed:1a:67:c7:12:13:00:58:6c:50:c4:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5E:65:E0:90:94:65:C5:77:D8:3B:9F:07:F0:E4:62:9E:3C:0A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:00:8f:e3:52:98:5e:dd:3d:9b:56:b5:c5:11:9b:4e:b5:
         8b:36:73:d5:1b:cb:aa:8a:f3:ab:79:8a:6c:31:78:2d:5a:60:
         6d:bf:ab:dc:39:ef:0f:c0:cc:7c:33:ed:50:26:4c:0b:77:97:
         8c:7d:db:37:fc:66:a2:15:83:c9:25:53:26:45:6d:a0:ac:e3:
         e0:8e:76:4b:7d:a0:95:92:18:7f:30:f2:8b:17:2a:04:39:b5:
         82:3c:f0:b3:89:9e:9a:9d:62:18:80:6c:7a:bf:4a:3e:6b:d0:
         1e:dc:55:a7:f5:ca:9c:4f:19:36:e3:2a:87:a4:d2:1d:c6:0a:
         91:21:3e:6e:27:e3:85:90:be:ae:84:77:91:50:e3:96:11:ba:
         6e:0c:20:df:39:a1:66:4f:38:63:c8:1f:65:3e:43:0c:11:d4:
         54:1f:20:cc:c7:b5:56:15:c2:1e:8c:c6:6f:a9:e4:bc:7c:0c:
         eb:90:62:63:8a:cf:1e:4e:c7:ab:bf:80:b8:a6:80:52:24:d6:
         51:ac:5a:28:48:a5:92:60:05:9d:2f:a9:27:0d:0e:eb:95:45:
         ac:5a:42:8d:91:00:25:1e:37:06:56:06:d1:82:3d:13:60:20:
         80:c2:53:09:45:3f:ec:bd:8f:b5:e9:f7:f1:ee:71:93:6f:a4:
         4c:7f:3e:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f314KzZarNlG9EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
ZGZlNDI4ODktMDk2NC00NjgwLWJmM2MtYzBiYWVjYjViNTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VPZ5WJdfw3byMZrg/rD4BfHoaSg9cb8W6qM
UONUZgEvgcT965ovegDEu5RVAsgw7bdpobO7Q2o01Fg6snkkHaZQPC9C2Aa2zPND
yWyFd9BD8zGOotAq/LaFNCBV52Qj4sHwh335RcPbuoWepDvDKOOx7NMWtU2HXGAZ
LZQAPwbvCqdwpentUT47VHYRERL01Pu3pXbG0C+6wFZnpDCxv4MLR0feSNT5dQAT
B73SP+zX2kFVFN15BTwc1GyZGGbEmfLsZvxzODiP6SSg80Tj6KOz+2nOd2KC27hx
FWmtUSvFdPrQRqeUojqMmQhsnnJLur5s7RpnxxITAFhsUMQoJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExeZeCQlGXFd9g7nwfw5GKePAozMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMmQwOTk5ZmMtNmZmNC0z
NWE2LTkzZmEtMzk3OWYwNDMyOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf4AI/jUphe3T2bVrXFEZtOtYs2c9Uby6qK86t5imwxeC1aYG2/q9w5
7w/AzHwz7VAmTAt3l4x92zf8ZqIVg8klUyZFbaCs4+COdkt9oJWSGH8w8osXKgQ5
tYI88LOJnpqdYhiAbHq/Sj5r0B7cVaf1ypxPGTbjKoek0h3GCpEhPm4n44WQvq6E
d5FQ45YRum4MIN85oWZPOGPIH2U+QwwR1FQfIMzHtVYVwh6Mxm+p5Lx8DOuQYmOK
zx5Ox6u/gLimgFIk1lGsWihIpZJgBZ0vqScNDuuVRaxaQo2RACUeNwZWBtGCPRNg
IIDCUwlFP+y9j7Xp9/HucZNvpEx/PkA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:19 2026 by rpki-client