Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f777af0f-1bfe-3f1e-98c7-292f23af127d.roa
File:                     f777af0f-1bfe-3f1e-98c7-292f23af127d.roa (raw, json)
Hash identifier:          Fk3UD75dsXGks+kj1AdtrqXs4aexW6Oxpnm6QzA9L14=
Subject key identifier:   5C:1B:4D:45:E0:FB:68:ED:C1:18:3B:7E:DC:AF:E0:B0:C9:CA:B0:D3
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584F6F230B39E85268EB63F71D00
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f777af0f-1bfe-3f1e-98c7-292f23af127d.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     62651
IP address blocks:        69.16.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0b:39:e8:52:68:eb:63:f7:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=6833f046-1f37-46c4-9d05-e8ef614a0c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:7e:e5:f8:1d:0f:d0:1d:e6:b1:26:f4:da:
                    1f:90:8c:15:8e:88:18:25:c7:e3:52:ef:f4:a4:47:
                    f1:0a:94:b7:68:98:e4:eb:78:b3:99:65:ef:fc:92:
                    ee:6c:6d:54:a8:2d:e6:02:6a:f1:51:d5:2b:ff:f8:
                    8a:17:e4:da:8d:ca:4d:53:32:16:aa:e9:e2:9c:2f:
                    3b:9d:ac:3d:79:41:b1:3c:8b:c7:9d:a0:eb:13:a9:
                    1e:6b:1e:64:de:57:16:94:b4:ff:2d:fb:6b:b1:43:
                    13:f2:83:7a:9f:bb:b5:cd:c5:e2:e1:41:94:87:aa:
                    98:69:fe:50:e9:84:81:71:62:8d:a6:ad:3f:ab:9e:
                    ca:c5:48:ab:4a:6f:f1:78:20:18:b5:86:c9:54:62:
                    cc:33:6d:ba:d4:0f:e3:16:e4:e3:4b:46:e8:fb:fc:
                    e7:fd:1f:fa:eb:39:ff:7c:48:48:a2:cc:d2:13:a1:
                    20:98:74:46:db:e0:92:6b:ac:13:08:81:15:07:9a:
                    d5:ab:93:cf:f5:d4:bf:61:1c:ee:4a:48:c1:82:1e:
                    52:7e:2c:3b:eb:e1:e3:2c:f1:06:45:f9:82:b4:23:
                    0a:52:3f:14:4a:2f:94:55:ae:e0:25:4b:f1:02:cc:
                    df:8e:a5:02:d1:dc:9e:19:d9:df:0d:57:e9:86:b0:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:4D:45:E0:FB:68:ED:C1:18:3B:7E:DC:AF:E0:B0:C9:CA:B0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f777af0f-1bfe-3f1e-98c7-292f23af127d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:84:f0:de:df:08:db:04:8e:81:97:ac:cc:92:07:b2:d6:
         fc:9c:13:15:2d:10:f4:db:77:9b:42:36:7c:ce:dc:30:a9:af:
         80:14:3d:fd:1d:6d:48:1d:5d:d7:e3:fd:4d:b2:86:f3:68:dd:
         e3:61:c3:ed:f0:82:53:e9:aa:dc:0e:83:58:e1:c7:a7:4b:41:
         f0:75:79:0e:03:23:46:6f:72:f3:39:20:2a:60:0b:ba:8a:69:
         d5:ab:55:62:34:5c:64:f6:40:c3:0e:1f:44:b7:30:09:1a:54:
         2b:28:02:24:8d:a9:13:01:81:72:57:3c:c6:45:42:34:06:25:
         66:f0:72:ef:b3:a0:f2:04:d6:44:52:37:13:05:20:6a:1c:6b:
         d8:46:a5:2e:31:25:57:f2:f0:b0:f6:39:28:04:75:89:88:db:
         37:d8:1a:3a:c0:e6:f0:2b:87:e4:3a:c2:1e:0e:f2:2a:b8:c8:
         38:bc:76:37:8d:4c:28:e1:f5:0f:5c:f9:27:10:5e:dd:a7:3c:
         c8:52:0c:d1:a7:76:49:ae:62:90:aa:ed:7c:1d:ed:1a:8d:22:
         78:d6:93:fa:71:93:24:19:30:be:df:a2:3b:6f:64:6a:83:c8:
         68:74:09:da:5a:fa:5b:8a:be:00:e6:f3:19:82:e2:55:0d:8e:
         12:98:97:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIws56FJo62P3HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NjgzM2YwNDYtMWYzNy00NmM0LTlkMDUtZThlZjYxNGEwYzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yp+5fgdD9Ad5rEm9NofkIwVjogYJcfjUu/0
pEfxCpS3aJjk63izmWXv/JLubG1UqC3mAmrxUdUr//iKF+TajcpNUzIWquninC87
naw9eUGxPIvHnaDrE6keax5k3lcWlLT/LftrsUMT8oN6n7u1zcXi4UGUh6qYaf5Q
6YSBcWKNpq0/q57KxUirSm/xeCAYtYbJVGLMM2261A/jFuTjS0bo+/zn/R/66zn/
fEhIoszSE6EgmHRG2+CSa6wTCIEVB5rVq5PP9dS/YRzuSkjBgh5Sfiw76+HjLPEG
RfmCtCMKUj8USi+UVa7gJUvxAszfjqUC0dyeGdnfDVfphrASmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwbTUXg+2jtwRg7ftyv4LDJyrDTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZjc3N2FmMGYtMWJmZS0z
ZjFlLTk4YzctMjkyZjIzYWYxMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRCTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+yhPDe3wjbBI6Bl6zMkgey1vycExUtEPTbd5tCNnzO3DCpr4AUPf0d
bUgdXdfj/U2yhvNo3eNhw+3wglPpqtwOg1jhx6dLQfB1eQ4DI0ZvcvM5ICpgC7qK
adWrVWI0XGT2QMMOH0S3MAkaVCsoAiSNqRMBgXJXPMZFQjQGJWbwcu+zoPIE1kRS
NxMFIGoca9hGpS4xJVfy8LD2OSgEdYmI2zfYGjrA5vArh+Q6wh4O8iq4yDi8djeN
TCjh9Q9c+ScQXt2nPMhSDNGndkmuYpCq7Xwd7RqNInjWk/pxkyQZML7fojtvZGqD
yGh0Cdpa+luKvgDm8xmC4lUNjhKYl/w=
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:40:32 2026 by rpki-client